The vulnerability of the Repo.clone_from() function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the local development servers for Vite and Vite+ relates to incorrect path name restrictions for the catalog, which allows attackers to expose protected information.

The vulnerability of the Vite and Vite+ application development local servers is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

ROS-20260615-73-0021

The vulnerability of the xfAppUpdateWindowFromSurface function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the VMware Workstation hypervisor arises from reading data outside of the permitted range in memory, resulting in unauthorized access to protected information.

The vulnerability of VMware Workstation’s hypervisor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the `__ieee80211_scan_completed()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the verify() and decrypt() functions in the npm OpenPGP library allows a perpetrator to obtain a valid message signature and disclose the protected information.

The vulnerability of the verify and decrypt functions in the npm OpenPGP library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to obtain a valid signature for a message and disclose the protected information...

The vulnerability of the mask_secret() function in the Apache Airflow network programming environment allows a hacker to gain unauthorized access to protected information.

The vulnerability of the masksecret function in the Apache Airflow network programming environment is related to insufficient protection of operational data when processing template fields. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the handle_misaligned_load() function in the arch/riscv/kernel/traps_misaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system allows a attacker to access protected information.

The vulnerability of the handlemisalignedload function in the arch/riscv/kernel/trapsmisaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s microchip, allows attackers to enhance their privileges and expose protected information.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

The vulnerability of the cmaCancelRoute() function in the drivers/infiniband/core/cma.c module of the Linux operating system’s kernel driver allows a hacker to gain access to protected information.

The vulnerability of the cmaCancelRoute function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the fq_pie_qdisc_enqueue() function in the net/sched/sch_fq_pie.c module of the network/sched subsystem in the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the fqpieqdiscenqueue function in the net/sched/schfqpie.c module of the network/sched subsystem in the Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to access protected information or cause service failure...

EUVD-2018-16918

Malware in sbrugna...

The vulnerability of the f_strflocaltime() function in the programming language JQ, which allows attackers to compromise the accessibility of protected information

The vulnerability of the fstrflocaltime function in the JavaScript programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability in the web interface of the software for monitoring social networks on the Cisco Customer Collaboration Platform (formerly Cisco SocialMiner) allows a perpetrator to disclose protected information.

The vulnerability of the web interface of the software for monitoring social networks on the Cisco Customer Collaboration Platform formerly Cisco SocialMiner is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries during file processing for PRC formats. Exploiting this vulnerability can allow attackers to disclose protected...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

Vulnerability of the sja1105_setup() function in the drivers/net/dsa/sja1105/sja1105_main.c module – the Linux kernel’s NXP SJA1105 switch support driver allows a hacker to gain access to protected information.

Vulnerability of the sja1105setup function in the drivers/net/dsa/sja1105/sja1105main.c module – The Linux operating system’s NXP SJA1105 switch support driver is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability can allow an...

Vulnerability of the uss720_probe() function in the drivers/usb/misc/uss720.c module – The driver for supporting USB devices in Linux kernel allows a hacker to gain access to protected information.

Vulnerability of the uss720probe function in the drivers/usb/misc/uss720.c module – The Linux kernel’s USB device support driver is vulnerable to security-related errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...