20245 matches found
ROS-20250110-14
Vulnerability of ServerConfig.PublicKeyCallback function of the library for Go crypto programming language is related to a flaw in the authorization procedure for key processing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass security restrictions...
The vulnerability of the Suricata intrusion detection and prevention system, related to asymmetric resource consumption, allows an intruder to trigger a service failure.
The vulnerability of the Suricata intrusion detection and prevention system is related to asymmetric resource consumption caused by incorrect compression of resource names during DNS message processing. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
CVE-2025-21596
An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authenticated attacker executing the 'show chassis environment pem' command to cause the chassis daemon...
CVE-2025-21596 Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash
An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authenticated attacker executing the 'show chassis environment pem' command to cause the chassis daemon...
Important: Red Hat Security Advisory: dpdk security update
An update for dpdk is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
Important: Red Hat Security Advisory: dpdk security update
An update for dpdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Important: Red Hat Security Advisory: dpdk security update
An update for dpdk is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-waitress) security update
An update for python-waitress is now available for Red Hat OpenStack Platform 16.2 Train for Red Hat Enterprise Linux RHEL 8.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in webkitgtk. In affected versions of this package, processing maliciously crafted web content may lead to an unexpected process crash...
webkit: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can trigger a type confusion issue due to improper memory handling, causing memory corruption...
ROS-20250109-02
Vulnerability in dogtag-pki and pki-core packages is related to incorrect input validation during query processing LDAP. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the authentication process. authentication...
ALSA-2025:0210 Important: dpdk security update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fixes: dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library CVE-2024-11614 For more details about the security...
The vulnerability of the Acronis CyberProtect Cloud data protection software for Linux operating systems allows attackers to compromise the integrity of the protected information.
The vulnerability of Acronis Cyber Protect Cloud, a cloud-based data protection software for Linux operating systems, stems from the use of cryptographic algorithms that contain vulnerabilities when processing RPM packages. Exploiting this vulnerability could allow attackers to compromise the...
The vulnerability of the Netflow v9 protocol implementation of the FastNetMon detection and prevention DDoS attack tool allows a perpetrator to cause a service failure.
The vulnerability in the implementation of the Netflow v9 protocol for the FastNetMon tool, which is used for detecting and preventing DDoS attacks, stems from the lack of checks for division by zero when processing templates. Exploiting this vulnerability could allow a malicious actor to cause...
ROS-20250109-05
Vulnerability in Firefox ESR, Firefox web browsers and Thunderbird email client is related to errors in data type conversion due to enabled autorun private mode. data type conversion errors due to enabled private mode autorun. Exploitation of the vulnerability could allow an attacker acting...
CVE-2024-40747
Various module chromes didn't properly process inputs, leading to XSS vectors...
CVE-2024-40747
Various module chromes didn't properly process inputs, leading to XSS vectors...
CVE-2024-40747 [20250101] - Core - XSS vectors in module chromes
Various module chromes didn't properly process inputs, leading to XSS vectors...
CVE-2024-40747
CVE-2024-40747 affects Joomla! core module chromes, where inputs are not properly processed, enabling cross-site scripting (XSS). The vulnerability is described across multiple feeds as applying to module chromes and is categorized with CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base score 6....