ROS-20251216-7340

A vulnerability in the qemuFwCfgMmioRead function of the Box/Devices/PC/DevQemuFwCfg.cpp component of the Oracle VM VirtualBox virtualization software tool is related to integer overflow. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

ROS-20251216-7338

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an access control flaw. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20251216-7363

A vulnerability in the Extensions component of Google Chrome and Microsoft Edge browsers is related to access control flaws. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20251216-7337

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an access control flaw. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information...

ROS-20251216-7371

A vulnerability in the Extensions component of Google Chrome and Microsoft Edge browsers is related to incorrect resource initialization. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20251216-7369

A vulnerability in the WebXR component of Google Chrome and Microsoft Edge browsers is related to reading data outside the buffer boundaries in memory. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the `clone_private_mnt()` function in the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the cloneprivatemnt function in the Linux operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the tx.c component in the Linux operating system’s kernel allows a attacker to compromise the integrity of the protected information.

The vulnerability of the tx.c component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

ROS-20251202-08

Vulnerability in the Dawn component of Google Chrome browser is related to writing beyond buffer boundaries. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to affect the accessibility of protected information...

The vulnerability of the LibHTP syntactic analysis library for HTTP protocols, related to memory leaks, allows attackers to compromise the accessibility of protected information.

The vulnerability of the LibHTP syntax analysis library in HTTP protocols is related to a memory leak. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the accessibility of protected information...

ROS-20251105-10

Zabbix universal monitoring system vulnerability is related to authorization errors. Exploitation vulnerability can allow a remote attacker to gain unauthorized access to protected information. protected information Vulnerability of Zabbix universal monitoring system is related to a logical error...

ROS-20251029-03

A vulnerability in the tarfile module of the Python programming language is related to incorrect definition of symbolic links during file access. symbolic links during file access. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity of protected...

The vulnerability of the email_err_data configuration on the Squid proxy server allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the emailerrdata configuration on the Squid proxy server is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to errors in privilege management. This vulnerability allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to deficiencies in authentication mechanisms. This allows unauthorized individuals to gain access to protected information.

The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow unauthorized actors to gain...

ROS-20251020-03

Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...

PT-2025-54581

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Digital Credentials component of the Google Chrome browser due to improper restriction of rendered user interface layers. Remote attackers may be able to compromise...

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2025-42746

Name of the Vulnerable Software and Affected Versions GitLab affected versions not specified Description A security issue exists in the GitLab code collaboration platform due to a missing authorization procedure. Remote attackers may be able to gain unauthorized access to protected information by...

ROS-20250925-02

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of restricted directory. Python programming language interpreter CPython functions TarFile.extractall and...