ROS-20260505-73-0046

A vulnerability in the urllib.request.DataHandler component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability may allow a remote attacker to affect the integrity of protected information...

HRBOX Cross-site Request Forgery

The vulnerability of the HRBOX business platform relates to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

tar-fs Package Data Compromise

The vulnerability of the tar-fs package from the tar-stream library relates to an incorrect pathname limitation for the restricted-access directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

SEV microprogramming software components

The vulnerability of the SEV microprogramming software for AMD graphics processors is related to improper prevention of bit modification of the lock bits. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

AMD graphics processor Privilege Escalation

The vulnerability of AMD’s microprogrammed graphics processor software is related to the improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

SEV-SNP Data Compromise

The vulnerability of the SEV-SNP security mechanism implemented in AMD’s graphics processors is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

AnyDesk Authentication Bypass

The vulnerability of AnyDesk remote access and management software relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...

Python tarfile Data Compromise

The vulnerability of the tarfile module in the Python programming language is related to the incorrect definition of symbolic links during access to files. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

Ghostscript pdf_write_cmap Buffer Overflow

The vulnerability of the pdfwritecmap function in the software for processing, transforming, and generating Ghostscript documents is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

RUGGEDCOM RST2428P Load Configuration from Local PC Data Compromise

The vulnerability of the “Load Configuration from Local PC” web interface component of the microprogramming software platform for routing and switching devices, RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Serie...

Zoom Workplace Cross-site Request Manipulation

The vulnerability of Zoom Workplace, a software product for conducting video conferences, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow an attacker to influence the integrity of the protected information...

Nomad Application Hypertext Link Data Compromise

The vulnerability of Nomad application developers is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Mozilla Firefox Information Representation

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected information...

SharedFileList Component Data Compromise

The vulnerability of the SharedFileList component in MacOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Python os.path.normpath() Zero Byte Bypass

The vulnerability of the os.path.normpath function in the Python interpreter relates to the handling of permission lists when shortening a path by inserting a zero byte. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of protected information...

Juniper Networks’ Junos OS Evolved Data Compromise Bypass

The vulnerability of RPD operating systems such as Juniper Networks’ Junos OS Evolved and Junos is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to influence the integrity of protected information...

Mozilla Firefox fetch Resource Management Data Compromise

The vulnerability of the Mozilla Firefox browser’s fetch function is related to resource management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

Google Chrome Full-screen Mode Data Compromise

The vulnerability of the full-screen browser mode implementation in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information by installing a malicious...

Google Chrome Autofill Data Compromise

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows an attacker to influence the integrity of protected information by loading a specially created HTML page...