ROS-20260819-73-0043

The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Cisco IOS XE operating systems, related to incorrect calculations, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

The vulnerability of Cisco IOS XE operating systems, related to insufficient validation of input data, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

The vulnerability of Cisco IOS XE operating systems, related to operations beyond the buffer in memory, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

The vulnerability of Cisco IOS XE operating systems, related to insufficient control over resources during their existence, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of Cisco IOS XE operating systems, related to the implementation of incorrect control flow, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) relates to deficiencies in access control, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the fore200e_shutdown() function in the drivers/atm/fore200e.c module of the Linux network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fore200eshutdown function in the drivers/atm/fore200e.c module of the Linux network adapter driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the parse_audio_unit() function in the sound/usb/mixer.c module exposes the security of USB audio devices supported by the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the __sbi_store() and f2fs_sbi_show() functions in the fs/f2fs/sysfs.c file of the F2FS file system driver for the Linux operating system allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the sbistore and f2fssbishow functions in the fs/f2fs/sysfs.c file of the F2FS file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

The vulnerability of the decode_choice() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter kernel in the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the decodechoice function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter kernel in the Linux operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...

The vulnerability of the ImageMedium::watermark() function in the Grav CMS system allows a hacker to disclose protected information.

The vulnerability of the ImageMedium::watermark function in the Grav CMS system is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the go-git library, related to unvalidated array indexing, allows attackers to compromise the accessibility of protected information.

The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

The vulnerability of the YAML syntax analysis and parsing library js-yaml lies in the uncontrolled modification of object prototype attributes, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the YAML parsing library js-yaml is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the buildid_show() function in the drivers/xen/privcmd.c file of the Linux kernel device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildidshow function in the drivers/xen/privcmd.c module of the Linux kernel device driver library is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Python library for working with Git Dulwich repositories lies in the incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the f_audio_out_ep_complete() function in the drivers/usb/gadget/function/f_uac1_legacy.c file of the Linux operating system’s gadget driver framework allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the faudiooutepcomplete function in the drivers/usb/gadget/function/fuac1legacy.c file of the Linux operating system’s device drivers is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the Google Chrome browser’s Navigation function allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Sqlalchemy mako Python template library relates to incorrect path name restrictions for restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the rxgk_verify_response() function in the net/rxrpc/rxgk.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information within the RxRPC session support of the Linux operating system’s kernel.

The vulnerability of the rxgkverifyresponse function in the net/rxrpc/rxgk.c module, which is part of the RxRPC session support for Linux operating systems, involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to...