The vulnerability of the Apache Traffic Server web server arises from the improper processing of URL fragments, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Apache Traffic Server web server is related to the improper processing of URL fragments. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to deficiencies in the pathname restriction mechanism for the directory. This vulnerability allows an attacker to compromise the integrity of the protected information.

The vulnerability in the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the DNS server Dnsmasq, related to errors in the implementation of security checks for standard elements, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Dnsmasq DNS server lies in the lack of checking for requests with the same name. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Vulnerability of reply_query() function (forward.c): The Dnsmasq DNS server has vulnerabilities related to errors in implementing security checks for standard elements, allowing attackers to compromise the integrity of protected information.

The vulnerability of the replyquery function forward.c: The Dnsmasq DNS server has vulnerabilities related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Ruby library for parsing Markdown in HTML Redcarpet, related to the lack of protection for website structure, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Ruby library for parsing Markdown in HTML Redcarpet is related to improper cleaning of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the ContentModelChange function in the software for implementing a hypertext environment like MediaWiki allows attackers to compromise the integrity of the protected information.

The vulnerability of the ContentModelChange function in the MediaWiki software, which is used to implement the hypertext environment, relates to the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the...

The vulnerability of the OpenSSH cryptographic protection mechanism, related to privilege management errors, allows attackers to compromise the integrity of the protected information.

The vulnerability of the OpenSSH cryptographic protection mechanism is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Information disclosure

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense FTD, as well as Cisco Catalyst network devices, ISR and ISA routers, and the integrated-service virtual router ISRv, is related to security configuration errors. Exploiting this vulnerability can allow a...

The vulnerability of Firefox ESR browser for Android operating systems, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of Firefox ESR browser for Android operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information...

The vulnerability of Cisco WebEx Meetings software allows a perpetrator to compromise the integrity of protected information.

The vulnerability of Cisco WebEx Meetings software relates to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the command-line interface (CLI) of the vManage web interface for programmatically defined Cisco SD-WAN networks allows a attacker to compromise the integrity of protected information.

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the WSGI Micro-Framework configuration, Bottle, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the WSGI Micro-Framework “Bottle” is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Node.js software platform allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Node.js software platform is related to the inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of web services in the Spring Framework software platform allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of web services in the Spring Framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the ChannelSftp.OVERWRITE component in the Java implementation of SSH2, jsch, allows a attacker to compromise the integrity of information.

The vulnerability of the ChannelSftp.OVERWRITE component in the Java SSH2 implementation jsch exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the information...

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Data Center Network Manager DCNM management interface relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the add-apt-repository utility in the Ubuntu operating system allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the add-apt-repository utility in the Ubuntu operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to insufficient input data validation, allowing attackers to compromise the integrity of information.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a remote attacker to compromise the integrity of information...

PT-2021-1584 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server, which can be exploited by a remote attacker to impact the confidentiality, integrity,...