ROS-20250912-09

Vulnerability in the implementation of the CORS mechanism of the Python PyPi language software product repository is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information. remotely to disclose protected...

ROS-20250905-02

A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...

ROS-20250903-01

A vulnerability in the bsonstrfreev function of the libbson library of the MongoDB database management system driver C Driver is related to integer overflow. Exploitation of the vulnerability could allow an attacker to affect the integrity of protected information Vulnerability in bsonutf8validat...

The vulnerability of the dwc3_check_event_buf function in the Linux operating system, which allows a hacker to compromise the confidentiality of the protected information

The vulnerability of the dwc3checkeventbuf function in the Linux operating system is related to reading memory beyond the boundaries of the allocated buffer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the protected information...

ROS-20250822-04

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

ROS-20250822-05

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

The vulnerability of the HTTPS protocol implementation in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the HTTPS protocol’s implementation in macOS systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the WebKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the WebKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to deficiencies in access control for personal information. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerabilities of the functions mbedtls_pem_read_buffer() and mbedtls_pk_parse() in the Mbed TLS software allow a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlspemreadbuffer and mbedtlspkparse functions in Mbed TLS is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service failures or expose protected information...

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications, exposes security flaws in access control for personal information. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to...

The vulnerability of the Accessibility component in operating systems such as iOS and iPadOS allows attackers to disclose protected information.

The vulnerability of the “Accessibility” component in iOS and iPadOS operating systems is related to deficiencies in restricting access to personal information. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of iPadOS and macOS operating systems, related to incorrect handling of links before accessing files, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of iPadOS and macOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of PackageKit in macOS operating systems allows attackers to circumvent security restrictions and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals, allowing attackers to gain unauthorized access to protected information.

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected information...

The vulnerability of the MCP protocol of the server-filesystem allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MCP protocol of the server-filesystem relates to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ELMED MIS platform, due to deficiencies in access control mechanisms, allows unauthorized access by attackers, thereby compromising the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ELMED MIS platform is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its confidentiality, integrity, and accessibility...

The vulnerability of the Firewall software for creating containerized systems like Moby allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Moby container isolation system’s Firewall software relates to improper initialization of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Dock panel on macOS operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Dock panel on macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the CoreServices component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CoreServices component in macOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...