The vulnerability of the kfree() function in Linux operating system kernels, which allows a attacker to compromise the accessibility of protected information

The vulnerability of the kfree function in Linux operating system kernels is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the application management tools and Flatpak environments relates to the tracking of UNIX-style symbolic links. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the application management tools and Flatpak environments relates to the tracking of symbolic links in UNIX. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information and execute arbitrary code...

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the rb_end_commit() function in the Linux operating system’s kernel allows a attacker to compromise the accessibility of protected information.

The vulnerability of the rbendcommit function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the cupsd server daemon in the CUPS printing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the cupsd server printing service in CUPS is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows Shell component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Shell component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the rewriteRequestHeaders() function in the Fastify framework, a Node.js software platform, allows a malicious actor to gain unauthorized access and modify protected information.

The vulnerability of the rewriteRequestHeaders function in the Fastify framework, a Node.js software platform, is related to HTTP request processing flaws. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

The vulnerability of the FortiSandbox threat detection and mitigation system, related to the use of files and directories accessible from external parties, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FortiSandbox threat detection and mitigation system lies in the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the ip6addrlbl_putmsg() function in the net/ipv6/addrlabel.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to access protected information or cause a service failure.

The vulnerability of the ip6addrlblputmsg function in the net/ipv6/addrlabel.c module of the Linux operating system’s IPv6 kernel implementation is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause...

The vulnerability of the Jenkins automation server lies in the lack of protection for service data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the Jenkins automation server lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

ROS-20260420-73-0025

Vulnerability in python-aiohttp related to lack of service data protection. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Package Catalog component in the Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the Package Catalog component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the GitHub Copilot Chat Extension of the source code editor Microsoft Visual Studio Code allows a hacker to disclose protected information.

The vulnerability of the GitHub Copilot Chat Extension of the source code editor Microsoft Visual Studio Code is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Flare file-sharing platform, related to bypassing authentication using a user-controlled key, allows attackers to influence the confidentiality of protected information.

The vulnerability of the Flare file-sharing platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to influence the confidentiality of the protected information...

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties, allowing a hacker to gain access to protected information.

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to access control errors, allows a perpetrator to disclose protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to access control errors. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the `configfs_create_dir()` function in the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the configfscreatedir function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

ROS-20260414-73-0061

A vulnerability in the f2fsdecompresscluster function of the fs/f2fs/compress.c module of the F2FS file system of the Linux kernel is related to insufficient resource locking. Exploitation of the vulnerability may allow an intruder to affect the integrity and availability of protected information...

The vulnerability of the OpenEMR system for managing medical documents, related to bypassing authentication using a user-controlled key, allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the OpenEMR system for managing medical documents involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...

The vulnerability of the zhAclCheck() function in the OpenEMR medical documentation system, related to deficiencies in the authentication process, allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the zhAclCheck function in the OpenEMR medical documentation system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...