Navigation Component Google Chrome Microsoft Edge Protected Information

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to insufficient validation of entered protected information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Cisco IOS XE Resource Exhaustion DoS

The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

Linux Handshake Request Buffer Overflow

The vulnerability of the handshakereqsubmit function in the net/handshake/request.c module of the Linux operating system is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow an attacker to gain access to protected information...

ROS-20260609-73-0004

The vulnerability of the RDP client FreeRDP is related to the escape of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

tunnel.allowNgrokFreeTierLoopbackBypass Parameter Compromise

The vulnerability of the tunnel.allowNgrokFreeTierLoopbackBypass parameter is related to the AI agent OpenClaw previously ClawdBot or MoltBot. This vulnerability stems from the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to...

base/gp_utf8.c Decode Unauthorized Access

The vulnerability of the decodeutf8 function in the base/gputf8.c software component for processing and generating Ghostscript documents is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...

Business Chat Function Microsoft 365 Copilot Unauthorized Access

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Linux sk_stream_kill_queues Heap Buffer Overflow DoS

The vulnerability of the skstreamkillqueues function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the DCBATTRBCN function in Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

Honeywell CCTV Authentication Bypass

The vulnerability of Honeywell CCTV video surveillance software lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

FreeRDP Buffer Overflow DoS

The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

inetutils telnetd Unauthorized Access

The vulnerability of the telnetd server of the inetutils network programming package is related to the lack of validation during the processing of incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Podman isAccessAllowed Bypass

The vulnerability of the isAccessAllowed function in the Podman control and execution software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions and gain unauthorized access to protected...

ROS-20260120-7328

A vulnerability in the amdgetmmconfigrange function of the arch/x86/kernel/amdnb.c module of the Linux kernel is related to access differentiation flaws. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

PackageKit Idle Compromise

The vulnerability of the Idle function in the PackageKit package manager is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

Kapsch TrafficCom RIS-9260 Authentication Bypass Info Disclosure

The vulnerability of the Kapsch TrafficCom RIS-9260 road communication module’s microprogramming software lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

drm/xe/guc Linux Component Data Compromise

The vulnerability of the drm/xe/guc component in the Linux operating system is related to improper checking or processing of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

IndustryPack device support driver Heap Buffer Overflow Info Disclosure

The vulnerability of the ipoctalinstslot function in the module drivers/ipack/devices/ipoctal.c of the IndustryPack device support driver for the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected informati...

Go Insufficient Validation Information Disclosure

The vulnerability of the Go programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the accessibility of protected information...