ROS-20260529-73-0013

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise storage platforms relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2026-34109

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager Connector version 12.2.1.4.0 Description An issue in the Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTPS to compromise the system. This can lead to unauthorize...

The vulnerability of the hfscorrect_next_unused_CNID() function in the fs/hfs/catalog.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hfscorrectnextunusedCNID function in the fs/hfs/catalog.c module of the Linux operating system’s kernel relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability in the driver *drivers/acpi/acpica/psopcode.c* of the ACPI driver (an extended configuration and power management interface for the Linux kernel) allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/acpi/acpica/psopcode.c driver of the ACPI framework an extended configuration and power management interface for Linux kernels involves accessing memory beyond the permissible buffer data boundaries due to a violation of the specifications for data transmitted to...

The vulnerability of the rxe_srq_from_attr() function in the drivers/infiniband/sw/rxe/rxe_srq.c file of the Linux operating system’s kernel driver InfiniBand allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxesrqfromattr function in the drivers/infiniband/sw/rxe/rxesrq.c file of the Linux operating system’s InfiniBand driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the `__drm_kunit_helper_alloc_drm_device()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmkunithelperallocdrmdevice function in the Linux kernel module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the devlink_notify_unregister() function in the net/devlink/leftover.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the devlinknotifyunregister function in the net/devlink/leftover.c module, which is part of the Linux kernel’s networking functions, is related to the improper generation of crash reports. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the PowerDNS Recursor DNS server, related to the failure to take measures to neutralize special elements in the output data, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the PowerDNS Recursor DNS server relates to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

The vulnerability of the opj_jp2_read_header function in the OpenJPEG library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opjjp2readheader function in the OpenJPEG image encoding and decoding library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the nfs3_proc_create() function in the fs/nfs/nfs3proc.c module of the Linux file system support module allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the nfs3proccreate function in the fs/nfs/nfs3proc.c module of the Linux file system support module is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...

The vulnerability of the `ice_sriov_set_msix_vec_count()` function in the `drivers/net/ethernet/intel/ice/ice_sriov.c` file of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the icesriovsetmsixveccount function in the drivers/net/ethernet/intel/ice/icesriov.c file of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibili...

The vulnerability of the cleanup_bearer() function in the net/tipc/udp-media.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cleanupbearer function in the net/tipc/udp-media.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the distributed database management system Apache Cassandra, related to improper handling of privileges, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the distributed database management system Apache Cassandra is related to improper handling of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the TTF_RenderText_Solid() function in the SDL_ttf library allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TTFRenderTextSolid function in the SDLttf library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the cleanup_net() function in the include/net/net_namespace.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cleanupnet function in the include/net/netnamespace.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the mgmt_set_powered_complete() function in the net/bluetooth/mgmt.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mgmtsetpoweredcomplete function in the net/bluetooth/mgmt.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the EFI loader in microprogrammed software for SIMATIC IPC devices, SIMATIC PC tablets, and SIMATIC Field PG notebooks allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the EFI loader in microprogrammed software for SIMATIC IPC devices, SIMATIC PC tablets, and SIMATIC Field PG notebooks is related to the breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

The vulnerability of the accountablemapping() function in the mm/mmap.c module of the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the accountablemapping function in the mm/mmap.c module of the Linux kernel is related to improper control of resource identifiers “resource leakage”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the Core server component of Oracle WebLogic Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Oracle WebLogic Server application server’s Core component is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...