ROS-20261002-73-0007

The vulnerability of the psql utility in the PostgreSQL database management system lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Microsoft Outlook Code Execution

The vulnerability of the Microsoft Outlook email client is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Microsoft Outlook Code Execution

The vulnerability of the Microsoft Outlook email client is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

EMACS MIME Protocol DoS

The vulnerability of the EMACS text editor’s MIME protocol implementation lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a perpetrator to cause service failures...

NVIDIA NeMo Code Execution

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow attackers to execute arbitra...

IBM Verify Identity Access Code Execution

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access lies in the fact that its functions are integrated into an unverified controlled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Windows Hyper-V Code Execution

The vulnerability of the Windows Hyper-V hardware virtualization system is related to the activation of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OffscreenCanvas Bypass Security Restrictions

The vulnerability of the OffscreenCanvas interface in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the activation of functions from an unverified controlled area. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Tp-Link Wireless Access Point Tp-Link AC1350 N300 Arbitrary Command Execution

The vulnerability of the tddpd function in the Enabletestmode microprogramming system of Tp-Link AC1350 and Tp-Link N300 wireless access points is related to the activation of functions from an unverified controlled area. Exploiting this vulnerability allows a malicious actor to send arbitrary...

HDFS Apache Airflow HDFS Provider Arbitrary Package Loading

The vulnerability of the network-based software for automating data processing tasks in HDFS and Apache Airflow’s HDFS Provider is related to the inclusion of functions from an unverified controlled area during the processing of PyPI package names. Exploiting this vulnerability allows a malicious...

Autolink CKEditor Plugin DoS

The vulnerability of the Autolink plugin for the CKEditor WYSIWYG editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Thunderbird email clients CORS Unauthorized Access

The vulnerability of the CORS mechanism implementation in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is related to the activation of functions from an unverified controlled area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

PHPMailer Code Execution

The vulnerability of the validateAddress function in the PHPMailer library is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

IBM Cognos Analytics Data Compromise

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...