ROS-20260429-73-0042

A vulnerability in the ngxstreamsslmodule module of the NGINX Plus and NGINX Open Source HTTP server is related to a flaw in the authorization procedure. Exploitation of the vulnerability may allow a remote intruder to bypass security restrictions and gain unauthorized access to protected...

Flatpak Symbolic Link Tracking

The vulnerability of the application management tools and Flatpak environments relates to the tracking of symbolic links in UNIX. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information and execute arbitrary code...

Cisco Unity Connection Unauthorized Access

The vulnerability of the Web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rbendcommit function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Windows Shell Unauthorized Access

The vulnerability of the Windows Shell component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

FortiSandbox Threat Detection Unauthorized Access

The vulnerability of the FortiSandbox threat detection and mitigation system lies in the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CUPS Server Unauthorized Access

The vulnerability of the cupsd server printing service in CUPS is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6addrlblputmsg function in the net/ipv6/addrlabel.c module of the Linux operating system’s IPv6 kernel implementation is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause...

ROS-20260420-73-0025

Vulnerability in python-aiohttp related to lack of service data protection. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Jenkins Automation Server Unauthorized Access

The vulnerability of the Jenkins automation server lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Fastify rewriteRequestHeaders() Unauthenticated Access Modification

The vulnerability of the rewriteRequestHeaders function in the Fastify framework, a Node.js software platform, is related to HTTP request processing flaws. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

GitHub Copilot Chat Extension Disclosure

The vulnerability of the GitHub Copilot Chat Extension of the source code editor Microsoft Visual Studio Code is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Package Catalog Disclosure Protected Information

The vulnerability of the Package Catalog component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Synology SSL VPN Client File Access

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

Flare file-sharing platform Authentication Bypass

The vulnerability of the Flare file-sharing platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to influence the confidentiality of the protected information...

Microsoft Dynamics 365 Access Control Disclosure

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to access control errors. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

Linux configfs_create_dir Buffer Overflow DoS

The vulnerability of the configfscreatedir function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

ROS-20260414-73-0061

A vulnerability in the f2fsdecompresscluster function of the fs/f2fs/compress.c module of the F2FS file system of the Linux kernel is related to insufficient resource locking. Exploitation of the vulnerability may allow an intruder to affect the integrity and availability of protected information...

OpenEMR zhAclCheck Authentication Bypass

The vulnerability of the zhAclCheck function in the OpenEMR medical documentation system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

OpenEMR Authentication Bypass Data Compromise

The vulnerability of the OpenEMR system for managing medical documents involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...