5842 matches found
ROS-20260524-73-0007
A vulnerability in the JGSS component of the Oracle Java SE software platform, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is associated with a breach of the data protection mechanism. Exploitation of the vulnerability could allow a remote attacker to gain...
ROS-20260524-73-0035
A vulnerability in the vim text editor is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to affect the integrity of protected information...
ROS-20260524-73-0008
A vulnerability in the JGSS component of the Oracle Java SE software platform, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is associated with a breach of the data protection mechanism. Exploitation of the vulnerability could allow a remote attacker to gain...
ROS-20260524-73-0048
Vulnerability in grafana related to a flaw in the authorization procedure. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...
ROS-20260524-73-0030
Vulnerability in the vim text editor is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to affect the availability of protected information...
ROS-20260524-73-0046
Vulnerability in nextcloud related to authorization bypass through the use of a user-controlled key. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20260524-73-0049
Vulnerability in grafana related to a flaw in the authorization procedure. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the BuildKit container-building software lies in the improper restriction of the path name to the restricted-access directory, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260520-73-0044
A vulnerability in the WebUSB protocol implementation of Google Chrome browser is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information using a specially crafted HTML page...
Уязвимость компонента Speech браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимость компонента Speech браузеров Google Chrome и Microsoft Edge связана c ошибками синхронизации при использовании общего ресурса «Ситуация гонки». Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации с помощь...
The vulnerability of the Grafana monitoring and surveillance platform lies in the unauthorized access to the account after the token has expired, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Grafana monitoring and observation platform relates to incorrect access to the account after the token’s expiration period. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Next.js software platform for creating web applications stems from insufficient validation of requests on the server side. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Next.js web application development software platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vulnerability of the Networking component: DNS in Mozilla Firefox browsers and the email client Thunderbird, which allows attackers to affect the accessibility of protected information.
The vulnerability of the Networking component: DNS browsers like Mozilla Firefox and the email client Thunderbird are vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information...
Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and the Thunderbird email client allows attackers to compromise the accessibility of protected information.
The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager allows a intruder to gain unauthorized access to protected information.
The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager centralized system management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by...
The vulnerability of the Next.js web application development software platform, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent existing security mechanisms and gain unauthorized access to protected information.
The vulnerability of the Next.js web application development software platform lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and gain unauthorized...
ROS-20260515-73-0012
A vulnerability in the alerting system of the Grafana monitoring and surveillance platform is related to information disclosure. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...
The vulnerability of the BitLocker component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BitLocker component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ROS-20260515-73-0042
A vulnerability in the Picture In Picture technology of Google Chrome browser is associated with incorrect restriction of visualized user interface layers. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity of protected information using a specially...