ROS-20260417-73-0028

Vulnerability in rubygem-rack related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library allows attackers to influence the integrity of the protected information.

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

The vulnerability of the libssh library, related to incorrect pathname restrictions for the directory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libssh library is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Honeywell CCTV surveillance camera software lies in the lack of authentication for critical functions, allowing intruders to gain unauthorized access to protected information.

The vulnerability of Honeywell CCTV video surveillance software lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of GLib libraries relates to incorrect restrictions on path names to the catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the GLib library set is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability of NetworkManager’s software for managing network connections, related to improper storage of permissions, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NetworkManager software for managing network connections is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the http.cookies.Morsel component in the Python programming language allows a attacker to compromise the accessibility of the protected information.

The vulnerability of the http.cookies.Morsel component in the Python programming language is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the accessibility of protected information...

The vulnerability of the vvdec_push_data2() function in the HEIF File Parser component, a decoder and file format parser library, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the vvdecpushdata2 function in the HEIF File Parser component, a decoder and file format parser library, is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of the LibSoup library for HTTP servers relates to reading data beyond the allowed buffer limits, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the LibSoup library for HTTP servers relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260410-73-0001

A vulnerability in the Downloads component of Google Chrome browser is related to insufficient input validation. Exploitation of the vulnerability could allow a remote attacker to disclose protected information via a specially crafted HTML page...

The vulnerability of the Node.js software platform, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.

The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Vulnerability of the ngx_mail_smtp_module module in NGINX Plus and NGINX Open Source HTTP servers, allowing attackers to compromise the integrity of protected information.

The vulnerability of the ngxmailsmtpmodule module in NGINX Plus and NGINX Open Source servers is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the telnetd server of the inetutils network programming package allows a hacker to gain unauthorized access to protected information.

The vulnerability of the telnetd server of the inetutils network programming package is related to the lack of validation during the processing of incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the RDP client FreeRDP, related to reading beyond the buffer in memory, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of the persistent_cache_read_entry_v3() function in the RDP client FreeRDP allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the persistentcachereadentryv3 function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

Vulnerabilities of the kerberos_AcceptSecurityContext() and kerberos_InitializeSecurityContextA() functions in the FreeRDP client, allowing attackers to compromise the accessibility of protected information

The vulnerabilities of the kerberosAcceptSecurityContext and kerberosInitializeSecurityContextA functions in the FreeRDP client are related to a memory reclamation error. Exploiting these vulnerabilities could allow an attacker to compromise the accessibility of protected information...

ROS-20260403-73-0010

A vulnerability in the proc component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an intruder to affect confidentiality, integrity and availability of protected information...

ROS-20260403-73-0017

A vulnerability in the drivers/iommu/amd/init.c component of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability allows an intruder to affect the integrity and availability of protected information...

The vulnerability of the FileLoader class in the CPython interpreter allows a attacker to compromise the integrity of the protected information.

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the davinci_cpufreq_probe() function in the drivers/cpufreq/davinci-cpufreq.c module of the Linux kernel’s frequency scaling driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the davincicpufreqprobe function in the drivers/cpufreq/davinci-cpufreq.c module of the Linux kernel frequency scaling driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...