ROS-20250925-02

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of restricted directory. Python programming language interpreter CPython functions TarFile.extractall and...

The vulnerability of the cairodebugresetstatic_data() function in the Poppler PDF rendering library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the cairodebugresetstaticdata function in the Poppler PDF rendering library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to deficiencies in handling exception states, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) and the software for remote management and monitoring of the Intel Server Platform Services (SPS) are related to manipulating an unknown input, resulting in a timing mismatch that allows a perpetrator to disclose protected information.

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME and the software for remote management and monitoring of the Intel Server Platform Services SPS are related to manipulating an unknown input, resulting in a timin...

ROS-20250912-09

Vulnerability in the implementation of the CORS mechanism of the Python PyPi language software product repository is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information. remotely to disclose protected...

The vulnerability of the GNOME graphical interface library libsoup, related to insufficient registry checks, allows attackers to compromise the integrity of the protected information.

The vulnerability of the GNOME graphical interface library libsoup is related to insufficient registration checks. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the TrueConf Server software, related to errors in processing the relative path to the directory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the TrueConf Server software is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20250905-02

A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...

ROS-20250903-01

A vulnerability in the bsonstrfreev function of the libbson library of the MongoDB database management system driver C Driver is related to integer overflow. Exploitation of the vulnerability could allow an attacker to affect the integrity of protected information Vulnerability in bsonutf8validat...

The vulnerability of the dwc3_check_event_buf function in the Linux operating system, which allows a hacker to compromise the confidentiality of the protected information

The vulnerability of the dwc3checkeventbuf function in the Linux operating system is related to reading memory beyond the boundaries of the allocated buffer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...

ROS-20250822-05

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

ROS-20250822-04

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

The vulnerability of the HTTPS protocol implementation in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the HTTPS protocol’s implementation in macOS systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerabilities of the functions mbedtls_pem_read_buffer() and mbedtls_pk_parse() in the Mbed TLS software allow a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlspemreadbuffer and mbedtlspkparse functions in Mbed TLS is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service failures or expose protected information...

The vulnerability of the WebKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the WebKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to deficiencies in access control for personal information. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications, exposes security flaws in access control for personal information. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to...

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of iPadOS and macOS operating systems, related to incorrect handling of links before accessing files, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of iPadOS and macOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Accessibility component in operating systems such as iOS and iPadOS allows attackers to disclose protected information.

The vulnerability of the “Accessibility” component in iOS and iPadOS operating systems is related to deficiencies in restricting access to personal information. Exploiting this vulnerability can allow attackers to disclose protected information...