ROS-20250912-02

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

ROS-20250912-05

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE involves insufficient protection of website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) software lies in the insufficient protection of the website structure, allowing attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software relates to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

ROS-20250912-03

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

ROS-20250912-01

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

kernel: tipc: Fix use-after-free in tipc_conn_close()

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcconnclose. syzbot reported a null-ptr-deref in tipcconnclose during netns dismantle. 0 tipctopsrvstop iterates tipcnetnet-topsrv-connidr and calls tipcconnclose for each tipcconn. The problem is th...

Cross-site Scripting (XSS)

com.liferay.portal, release.portal.bom is vulnerable to Stored DOM-based Cross-Site Scripting XSS. The vulnerability is due to improper handling of DDM structure field labels in the Asset Publisher configuration UI within the Source.js module, where values are inserted into the DOM using innerHTM...

The vulnerability of the pREST component of the PostgreSQL database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pREST component of the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the web page structure when processing the alias parameter of the scheduledevents.shtm endpoint. Exploiting this vulnerability allows a remote attacker to perform cross-site...

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the structure of the web page when processing the parameter “name” of the final point “publisheredit.shtm”. Exploiting this vulnerability allows a remote attacker to perform...

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the structure of the web page when processing parameters for the end-point mailinglists.shtm. Exploiting this vulnerability allows a remote attacker to perform cross-site...

The vulnerability of the PHP class for generating PDF documents, TCPDF, is related to the lack of protective measures for website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the PHP class for generating PDF documents via TCPDF is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2025-44131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's crypto component related to context allocation and freeing operations within the compression framework. A discrepancy in the definition and order of...

CVE-2025-38703

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

atm: clip: Fix memory leak of struct clip_vcc.

...

bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable

...

net/ncsi: Disable the ncsi work before freeing the associated structure

...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to increase their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges...

The vulnerability of the JetBrains YouTrack project management and task management software arises from the lack of security measures to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the JetBrains YouTrack project management and task management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...