ROS-20260714-73-0017

The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20260714-73-0002

The vulnerability of the RTSP protocol analyzer and the network traffic analyzer in Wireshark is related to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260714-73-0019

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

ROS-20260714-73-0035

The vulnerability of the mbimdissecttlvielist function in the Wireshark computer network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...

ROS-20260714-73-0059

The vulnerabilities of the ngxhttpproxyv2module and ngxhttpgrpcmodule modules in NGINX Plus and NGINX Open Source web servers are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause...

ROS-20260714-73-0061

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...

PT-2026-58487

Name of the Vulnerable Software and Affected Versions Windows 10 affected versions not specified Windows 11 affected versions not specified Windows Server 2016 affected versions not specified Windows Server 2019 affected versions not specified Windows Server 2022 affected versions not specified...

ROS-20260714-73-0009

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, Wireshark, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2025-56365

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent to a nonexistent endpoint and cluster e.g., 0x34, the code incorrectly treats the endpoint as valid due to missing...

ROS-20260714-73-0051

The vulnerability in poppler is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260714-73-0049

The vulnerability of the PostgreSQL PgBouncer connection pool software relates to the assignment of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20260714-73-0047

The vulnerability in Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260714-73-0040

The vulnerability in Wireshark is related to the swapping of the zero pointer. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20260714-73-0038

The vulnerability in Wireshark is related to the swapping of the zero pointer. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20260714-73-0039

The vulnerability in Wireshark is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20260714-73-0004

The vulnerability of the iLBC packet analyzer in Wireshark relates to a memory reclamation error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

PT-2026-58805

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially compromising the system. Recommendations At the moment, there ...

The vulnerability of the futex_key_to_node_opt() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the futexkeytonodeopt function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

PYSEC-2026-2362 Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries

Secrets in Variables saved as JSON dictionaries were not properly redacted - in case the variables were retrieved by the user the secrets stored as nested fields were not masked. If developers do not store variables with sensitive values in JSON form, their projects are not affected. Otherwise...

PYSEC-2026-3217 `CHECK` fail via inputs in `PyFunc`

Impact An input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.rawops.PyFunc. python import tensorflow as tf value = tf.constantvalue=1,2 token = b'\xb0' dataType = tf.int32 tf.rawops.PyFuncinput=value,token=token,Tout=dataType Patches We have patched the issue in GitHub...