ROS-20260923-73-0043

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in Google Chrome and Microsoft Edge web browsers, related to reading data beyond the buffer in memory, allows attackers to trigger a service failure.

The vulnerability in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the http_response_recv_body() function in the libfreerdp/core/gateway/http.c file of the RDP client FreeRDP, which allows a hacker to trigger a service failure.

The vulnerability of the httpresponserecvbody function in the libfreerdp/core/gateway/http.c file of the RDP client FreeRDP is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20260708-73-0004

The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

ROS-20260708-73-0003

The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the minimatch library on the Node.js software platform lies in the use of a regular expression with inefficient computational complexity, which allows attackers to trigger a service failure.

The vulnerability of the minimatch library on the Node.js software platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to type conversion errors, allows attackers to trigger a service failure.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to data type conversion errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system server is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the ntfs_new inode() function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ntfsnew inode function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the copy_highpage() function in the arch/arm64/mm/copypage.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the copyhighpage function in the arch/arm64/mm/copypage.c module of the Linux operating system’s ARM 64-bit kernel supports is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to cause...

The vulnerability of the formSetAdInfoDetails() function (/goform/setAdInfoDetail) in the Tenda M3 router software allows a hacker to cause a service failure.

The vulnerability of the formSetAdInfoDetails function /goform/setAdInfoDetail in the Tenda M3 router software is related to the issue where an operation is executed outside the buffer in memory when processing parameters such as adName, smsPassword, smsAccount, weixinAccount, weixinName,...

The vulnerability of the Rust programming language library for interacting with the SSH protocol, which allows a hacker to cause a service failure.

The vulnerability of the Rust programming language’s Russh library for interacting with the SSH protocol is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the MongoDB database management system, related to the use of memory after it is freed, allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Windows Local Session Manager (LSM) component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager LSM component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the cross-platform hypervisor Xen kernel in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the built-in web server boa (/boafrm/formPortFw) of the Totolink A3002R router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the built-in web server boa /boafrm/formPortFw of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability in the built-in web server boa (/boafrm/formMapDelDevice) of the Totolink A3002R router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the built-in web server boa /boafrm/formMapDelDevice of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda CH22 router software allows a attacker to cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda CH22 router’s microprogramming system lies in the copying of buffers without checking the size of the input data when processing the cmdinput parameter. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise operational analytics web platform’s component is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise operational analytics web platform’s Splunk component is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...