The vulnerability of HTTP servers for Ruby/Rack applications, Puma, relates to deficiencies in HTTP request processing, allowing attackers to influence the integrity of information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to influence the integrity of information...

The vulnerability of the Core server component of Oracle WebLogic Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 exists due to the failure to take measures to eliminate special elements used in the operating system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR’s embedded software, including models like NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850, exists due to the lack of...

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to compromise the integrity of the protected information.

The vulnerability of the Moodle virtual training environment is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of many elements of the Cyrus IMAP email server, related to the lack of mechanisms for checking input data, allows attackers to compromise the integrity of information.

The vulnerability of many elements of the Cyrus IMAP email server lies in the lack of mechanisms for checking entered data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of information...

The vulnerability of Firefox browsers, related to writing beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the Firefox browser is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability of AD DC network communication programs like Samba allows attackers to compromise the integrity of information.

The vulnerability of AD DC network communication programs like Samba is related to the incorrect implementation of security checks for standard system components. Exploiting this vulnerability allows a malicious actor to compromise the integrity of information...

The vulnerability of the userfaultfd component in Linux operating systems allows attackers to compromise the integrity of protected information.

The vulnerability of the userfaultfd component in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information...

The vulnerability of the transaction management function of the SAP Treasury and Risk Management software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the transaction management function in SAP Treasury and Risk Management involves deficiencies in the authorization mechanism. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation-based application of Oracle Financial Services, allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation-based application of Oracle Financial Services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating...

PT-2019-5245 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.4 snapshot-20190403 Q8 Description: The issue is related to a use-after-free in the ThrowException and ThrowLoggedException functions of magick/error.c. This could potentially allow a remote attacker to gain...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic lies in insufficient validation of input data. This allows a malicious actor to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability of the Cisco IOS XE command-line interface allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

PT-2019-3606 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.280 and earlier Description: A security issue exists where authentication is not required when binding the Inspector instance to a different customer tenant. This is related to deficiencies in authentication...

The vulnerability of the Sender Policy Framework component in the Cisco Email Security Appliance’s security system allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the Sender Policy Framework component in the Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass the configured content filters and compromise the integrity of the protected...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the Cisco Identity Services Engine ISE web interface is related to input validation errors. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the software for Cisco TelePresence Video Communication Server and Cisco Expressway Series devices is related to errors in network service restrictions, allowing attackers to compromise the integrity of protected information.

The vulnerability of the software on Cisco TelePresence Video Communication Server and Cisco Expressway Series conference communication devices is related to errors in network service restrictions. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

The vulnerability of the NuGet package management system, related to deficiencies in access control, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the NuGet package management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information by modifying the intermediate build directory...

The vulnerability of the anti-spam protection mechanism of the Cisco Email Security Appliance allows attackers to compromise the integrity of the protected information.

The vulnerability of the anti-spam protection mechanism of Cisco Email Security Appliance is related to errors in the verification of Sender Policy Framework SPF messages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information by sending...

The vulnerability of the Apache Tomcat application server, related to the use of open redirection, allows attackers to compromise the integrity of the protected information.

The vulnerability of the default server servlet engine for Apache Tomcat is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...