ROS-20251202-08

Vulnerability in the Dawn component of Google Chrome browser is related to writing beyond buffer boundaries. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to affect the accessibility of protected information...

The vulnerability of the LibHTP syntactic analysis library for HTTP protocols, related to memory leaks, allows attackers to compromise the accessibility of protected information.

The vulnerability of the LibHTP syntax analysis library in HTTP protocols is related to a memory leak. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the accessibility of protected information...

The vulnerability of ASUS DSL series routers lies in their ability to bypass authentication procedures by using an alternative path or channel, allowing unauthorized access to protected information.

The vulnerability of ASUS’ DSL series routers lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Dell PowerScale OneFS operating system, related to the use of cryptographic algorithms containing defects, allows a perpetrator to disclose protected information.

The vulnerability of the Dell PowerScale OneFS operating system lies in the use of cryptographic algorithms that contain defects. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

The vulnerability of Google Chrome’s Devtools component allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the maskedPaths function in the runc tool for running isolated containers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maskedPaths function in the runc tool for running isolated containers is related to the state of the race condition, which allows for the tracking of references. Exploiting this vulnerability could enable a perpetrator to compromise the confidentiality, integrity, and...

The vulnerability of the PageInfo component in browsers such as Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the PageInfo component in browsers such as Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Go programming language, related to insufficient validation of input data, allows attackers to compromise the accessibility of protected information.

The vulnerability of the Go programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the accessibility of protected information...

ROS-20251105-10

Zabbix universal monitoring system vulnerability is related to authorization errors. Exploitation vulnerability can allow a remote attacker to gain unauthorized access to protected information. protected information Vulnerability of Zabbix universal monitoring system is related to a logical error...

ROS-20251029-03

A vulnerability in the tarfile module of the Python programming language is related to incorrect definition of symbolic links during file access. symbolic links during file access. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity of protected...

The vulnerability of the email_err_data configuration on the Squid proxy server allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the emailerrdata configuration on the Squid proxy server is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to errors in privilege management. This vulnerability allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to deficiencies in authentication mechanisms. This allows unauthorized individuals to gain access to protected information.

The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow unauthorized actors to gain...

ROS-20251020-03

Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...

The vulnerability of the Jenkins automation server, related to improper access control, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2025-54581

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Digital Credentials component of the Google Chrome browser due to improper restriction of rendered user interface layers. Remote attackers may be able to compromise...

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2025-42746

Name of the Vulnerable Software and Affected Versions GitLab affected versions not specified Description A security issue exists in the GitLab code collaboration platform due to a missing authorization procedure. Remote attackers may be able to gain unauthorized access to protected information by...