Windows QoS Packet Scheduler Info Disclosure

The vulnerability of the Windows QoS Packet Scheduler in the operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

ROS-20260720-73-0006

The vulnerability of the GPU Video component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a...

CVE-2024-58367 SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions

SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized users to access unauthorized field values through various query techniques. Attackers can exploit SELECT VALUE operations, field aliasing, function argument...

Microsoft Office Buffer Overflow Info Disclosure

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft SharePoint Server Office 365 Apps for Enterprise Disclosure Information

The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these system...

Windows Push Notification Service Disclosure

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

Windows HID Disclosure

The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft Excel editors Information Disclosure

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Django UpdateCacheMiddleware Unauthorized Access

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Windows WLAN Host system Data Compromise

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is caused by buffer overflows in the stack. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

libcurl Unauthorized Access

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

cURL Certificate Validation Unauthorized Access

The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ImageMagick IPTC Metadata Data Compromise

The vulnerability of the IPTC writing module in the console-based image editing tool ImageMagick is related to the escape of operations from the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected...

ROS-20260714-73-0044

The vulnerability in MinIO is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Django Session Cookie Unauthorized Access

The vulnerability of the Django web application framework relates to the ability to send session cookies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260713-73-0026

The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

ROS-20260713-73-0053

The vulnerability of the RDP client FreeRDP relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260713-73-0042

The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Splunk Web Unauthorized Access

The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

aiohttp HTTP Client Disclosure

The vulnerability of the aiohttp HTTP client is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...