The vulnerability of the jQuery library lies in its lack of measures to protect the structure of web pages, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the jQuery library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Google Chrome browser user interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of Google Chrome browser developer tools allows a hacker to compromise the integrity of the protected information.

The vulnerability of Google Chrome browser developer tools is related to errors in the use of standard permissions. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information from a remote location...

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Google Chrome browser’s user interface is related to errors in the use of standard permissions. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of HTTP servers for Ruby/Rack applications, Puma, relates to deficiencies in HTTP request processing, allowing attackers to influence the integrity of information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to influence the integrity of information...

The vulnerability of the Core server component of Oracle WebLogic Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 exists due to the failure to take measures to eliminate special elements used in the operating system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR’s embedded software, including models like NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850, exists due to the lack of...

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to compromise the integrity of the protected information.

The vulnerability of the Moodle virtual training environment is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of many elements of the Cyrus IMAP email server, related to the lack of mechanisms for checking input data, allows attackers to compromise the integrity of information.

The vulnerability of many elements of the Cyrus IMAP email server lies in the lack of mechanisms for checking entered data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of information...

The vulnerability of Firefox browsers, related to writing beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the Firefox browser is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability of AD DC network communication programs like Samba allows attackers to compromise the integrity of information.

The vulnerability of AD DC network communication programs like Samba is related to the incorrect implementation of security checks for standard system components. Exploiting this vulnerability allows a malicious actor to compromise the integrity of information...

The vulnerability of the userfaultfd component in Linux operating systems allows attackers to compromise the integrity of protected information.

The vulnerability of the userfaultfd component in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information...

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation-based application of Oracle Financial Services, allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation-based application of Oracle Financial Services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating...

The vulnerability of the transaction management function of the SAP Treasury and Risk Management software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the transaction management function in SAP Treasury and Risk Management involves deficiencies in the authorization mechanism. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

PT-2019-5245 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.4 snapshot-20190403 Q8 Description: The issue is related to a use-after-free in the ThrowException and ThrowLoggedException functions of magick/error.c. This could potentially allow a remote attacker to gain...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic lies in insufficient validation of input data. This allows a malicious actor to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability of the Cisco IOS XE command-line interface allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

PT-2019-3606 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.280 and earlier Description: A security issue exists where authentication is not required when binding the Inspector instance to a different customer tenant. This is related to deficiencies in authentication...