The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the “REDAAM” IT-infrastructure centralized management system, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Test IT testing management system, related to the use of default login credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FOQUZ platform, related to the incorrect duration of a session, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FOQUZ platform, related to synchronization errors when using a shared resource, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2026:1785153163)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785153163 advisory. - A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This i...

AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1785143860)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785143860 advisory. - A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This i...

ROS-20260929-73-0149

The vulnerabilities of the functions ksmbdtreeconnconnect, ksmbdtreeconnect PUT, and ksmbdtreeconndisconnect in the module fs/smb/server/mgmt/treeconnect.c, as well as the function smb2treedisconnect in the module fs/smb/server/smb2pdu.c, are related to the reuse of previously freed memory due to...

ROS-20260925-73-0029

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

ROS-20260925-73-0008

The vulnerability of the Linux operating system’s Qualcomm driver relates to the use of previously freed memory due to competitive access to resources during device disconnection in the emacremove function within the drivers/net/ethernet/qualcomm/emac/emac.c module. Exploiting this vulnerability...

ROS-20260925-73-0015

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-79680

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

ROS-20260924-73-0003

The vulnerability of the net/netfilter/ipvs component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

ROS-20260923-73-0058

The vulnerability of the xskbind function in the net/xdp/xsk.c module, which implements networking functions for the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the shell.openPath() function in the Electron application development software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the shell.openPath function in the Electron application development platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

The vulnerability of the qaic_gem_object_mmap() function in the drivers/accel/qaic/qaic_data.c file of the Linux kernel’s acceleration device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qaicgemobjectmmap function in the drivers/accel/qaic/qaicdata.c file of the Linux kernel’s acceleration device driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260908-73-0022

The vulnerability in Helm is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the inet_frag_queue_flush() function in the net/ipv4/inet_fragment.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...