The vulnerability of the Windows QoS Packet Scheduler allows a hacker to exploit it to disclose protected information.

The vulnerability of the Windows QoS Packet Scheduler in the operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

ROS-20260720-73-0006

The vulnerability of the GPU Video component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a...

CVE-2024-58367 SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions

SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized users to access unauthorized field values through various query techniques. Attackers can exploit SELECT VALUE operations, field aliasing, function argument...

The vulnerability of Windows operating systems with HID technology allows attackers to disclose sensitive information.

The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise software allows a perpetrator to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these system...

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module on the Django web application software platform allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to disclose protected information.

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is caused by buffer overflows in the stack. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the IPTC metadata writing module in the console-based image editing tool ImageMagick allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the IPTC writing module in the console-based image editing tool ImageMagick is related to the escape of operations from the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected...

The vulnerability of the software for interacting with servers via cURL, related to errors in the certificate validation process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

ROS-20260714-73-0044

The vulnerability in MinIO is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Django web application software lies in its ability to send session cookies, which allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Django web application framework relates to the ability to send session cookies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260713-73-0026

The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

ROS-20260713-73-0042

The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260713-73-0053

The vulnerability of the RDP client FreeRDP relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the aiohttp HTTP client, related to insufficient protection of service data, allows attackers to disclose the protected information.

The vulnerability of the aiohttp HTTP client is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...