The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to access confidential information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma involves the proxy server sending a response back to another unknown client. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential information...

PT-2025-2093 · Drupal · Diff

Name of the Vulnerable Software and Affected Versions: Diff versions 0.0.0 through 1.8.0 Description: The issue is related to an incorrect authorization vulnerability in the Diff module of the Drupal content management system. This vulnerability allows for functionality misuse. A remote attacker...

The vulnerability of the /cgi-bin/widget_api.cgi file of the Web Management Interface component of the D-Link DNS-320 router’s microprogramming system allows a hacker to disclose confidential information.

The vulnerability of the /cgi-bin/widgetapi.cgi file of the Web Management Interface component of the D-Link DNS-320 router software relates to the disclosure of information. Exploiting this vulnerability could allow an attacker to disclose confidential information by manipulating the...

The vulnerability of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to the issue of re-liberating memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to repeated memory reclamation. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Blink web browser component in Google Chrome allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Blink web browser component in Google Chrome is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially creat...

The vulnerability of the Blink web browser component in Google Chrome, which allows a hacker to access confidential data

The vulnerability of the Blink web browser component in Google Chrome is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability in the Google Chrome web browser, related to data type conversion errors, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Google Chrome web browser is related to errors in data type conversion. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created HTML page...

The vulnerability of the WebRTC component in Google Chrome browsers, related to recording beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

ROS-20240927-05

Vulnerability in the afunix component's unixreleasesock/unixstreamsendmsg function is related to competitive access to a resource race condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the drivers/media/test-drivers/vidtv/vidtvpsi...

Mozilla: User API Key leakage in Github commit leads to unauthorized access to sql.telemetry.mozilla.org

A Mozilla employee's API token for https://sql.telemetry.mozilla.org was leaked in one of the Github repos. The token provided access to the service dashboard which contained confidential data. The API token was rotated and removed from the service...

The vulnerability of Intel Software Guard processor extensions, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of Intel Software Guard processor extensions in Intel microcode relates to the disclosure of information. Exploiting this vulnerability allows a perpetrator to gain access to confidential data...

The vulnerability of the did_set_spelllang function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the image_load_jpeg() function in the image.cxx component of the HTMLDOC document conversion tool involves pointer arithmetic errors. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the imageloadjpeg function in the image.cxx component of the HTMLDOC conversion tool is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ps-pdf.cxx component of the HTMLDOC document conversion tool allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ps-pdf.cxx component of the HTMLDOC document conversion tool is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of information, allows attackers to access confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the disclosure of information. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of AMD64 Microcode, related to the use of cryptographic algorithms containing defects, allows attackers to gain access to confidential data.

The vulnerability of AMD64 Microcode processors relates to the use of cryptographic algorithms that contain defects. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is released, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the GLib library set, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the GLib library set is related to the exposure of information. Exploiting this vulnerability allows an attacker to gain access to confidential data...