The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in mechanisms for combating cross-site fraud, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of many components of the DAViCal calendar exchange server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability of the pamk5_prompter_krb5 function in the prompt.c library of the libpam-krb5 library, related to a lack of mechanism for checking the size of copied data, allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the pamk5prompterkrb5 function in the prompt.c library of the libpam-krb5 library is related to a lack of mechanism for checking the size of copied data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the V8 component in Google Chrome browsers allows a hacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of Google Chrome’s V8 component relates to access to data without type control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity through a specially created HTML page...

Teclib GLPI Information Disclosure Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. An information disclosure vulnerability exists in Teclib GLPI version 9.1 an...

File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2219 Release Date: ============= 2020-05-03 Vulnerability Laboratory ID VL-ID:...

The vulnerability of the typeization function in Google Chrome’s JavaScript browser allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the typecasting function in Google Chrome’s JavaScript browser is related to access to resources through incompatible data types. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

The vulnerability of the `generate` function in the Werkzeug web application library, which allows an attacker to gain unauthorized access to confidential data.

The vulnerability of the generate function in the Werkzeug web application library’s init.py file is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data...

PT-2020-3138 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: A flaw in the Linux kernel's SELinux LSM hook implementation allows for insufficient authentication of data. This issue arises because the hook incorrectly assumes that a socket buffer skb...

The vulnerability of the onig_new_deluxe function in the regular expression library for multi-binary strings libonig allows a hacker to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of the onignewdeluxe function in the regular expression library libonig relates to memory usage after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information and compromise its integrity and accessibility...

OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

The vulnerability of Firefox’s browser security policy allows a hacker to gain unauthorized access to confidential data and compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of measures to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to confidential data and compromise data integrity using object tags...

The vulnerability of the component responsible for checking the names of submodules in the Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the component responsible for checking the names of sub-modules in the distributed version control system Git is related to a lack of input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the recursive cloning component of the distributed Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the recursive cloning component of the distributed version control system Git is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and...

The vulnerability in the Git version control system’s component that handles NTFS Alternate Data Streams allows a attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Git version control system’s NTFS Alternate Data Streams handling component is related to a lack of input validation mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability in Google Chrome’s built-in Database API, IndexedDB, allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s built-in Database API, IndexedDB, relates to memory management after freeing resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-23421)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Unauthorized Access Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle GraalVM Enterprise Edition Unauthorized Access Vulnerability (CNVD-2020-26995)

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. A security vulnerability exists in Oracle GraalVM in the Tools component of Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0. An attacker could exploit the vulnerability t...

Unspecified Vulnerability in Oracle MySQL Connectors (CNVD-2020-72715 )

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A security vulnerability exists in Oracle MySQL Connectors. An attacker could exploit this vulnerability to unauthorized...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2020-23827)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...