Rlottie Library Buffer Overflow

The vulnerability of the Rlottie library for reproducing Lottie animations involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

MinIO Cryptographic Signature Data Compromise

The vulnerability of the MinIO object storage server is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

MinIO Authentication Data Compromise

The vulnerability of the MinIO object storage server is related to deficiencies in the authentication process when processing the sshPublicKey parameter. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

PT-2025-43369

Уязвимость системы мониторинга и оповещения Nightingale связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность и целостность защищаемой информации...

PT-2025-43370

Уязвимость системы мониторинга и оповещения Nightingale связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность и целостность защищаемой информации...

GNU screen Resolution Data Compromise

The vulnerability of the GNU screen terminal multiplexer is related to the incorrect use of standard resolutions. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Linux sch_prio Heap Buffer Overflow DoS

The vulnerability of the net/sched/schprio.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its integrity, and cause...

SALT.BOX Symbolic Link

The vulnerability of the SALT.BOX software complex is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to influence the integrity, accessibility, and confidentiality of the protected information...

ROS-20250922-02

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect code generation control. code generation control. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code Vulnerability in Mozilla Firefox, Firefox ESR...

IBM Maximo Asset Management Unauthorized Access Info Disclosure

The vulnerability of the IBM Maximo Asset Management software system for managing corporate assets is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

GLPI URL Redirection

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the redirection of URLs to an unreliable website during the processing of the redirect parameter. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and...

CVE-2025-59410

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing th...

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication

Impact The Manager disables TLS certificate verification in two HTTP clients figures 3.1 and 3.2. The clients are not configurable, so users have no way to re-enable the verification. golang func getAuthTokenctx context.Context, header http.Header string, error skipped client := &http.Client...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the getAuthToken function. An attacker can cause denial of service and compromise file integrity by performing a network-level man-in-the-middle attack that provides invalid data to the process. Remediation...

Linux Distros Unpatched Vulnerability : CVE-2023-53317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix WARNING in mbfindextent Syzbot found the following issue: EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioreadnolock,...

The Bastion 安全漏洞

The Bastion is an open source authentication system from OVHcloud. A security vulnerability exists in The Bastion that stems from a script that fails to properly sign a file, potentially leading to data integrity issues...

DjVuLibre MMRDecoder scanruns Data Compromise

The vulnerability of the MMRDecoder::scanruns method in the viewing, creation, and editing of DjVu files in the DjVuLibre library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PARSEC security subsystem Load Path Disclosure

The vulnerability of the loadpath function in the PARSEC security subsystem is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

CVE-2022-50273 f2fs: fix to do sanity check on destination blkaddr during recovery

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on destination blkaddr during recovery As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 loop5: detected capacity change from 0 to 131072 F2FS-fs loop5:...

BIT-NIFI-2021-20190

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...