The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to deficiencies in authentication mechanisms. This allows unauthorized individuals to gain access to protected information.

The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow unauthorized actors to gain...

ROS-20251020-03

Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...

The vulnerability of the Jenkins automation server, related to improper access control, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the software solution for comprehensive enterprise management, Idea Platform Service Manager, arises from insufficient validation of input data. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the software solution for comprehensive enterprise management, Idea Platform Service Manager, is related to insufficient verification of input data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected...

PT-2025-54581

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Digital Credentials component of the Google Chrome browser due to improper restriction of rendered user interface layers. Remote attackers may be able to compromise...

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `bnxt_re_remove()` function in the drivers/infiniband/hw/bnxt_re/main.c file of the Linux kernel’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bnxtreremove function in the drivers/infiniband/hw/bnxtre/main.c file of the Linux kernel’s InfiniBand driver is related to the re-use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2025-42746

Name of the Vulnerable Software and Affected Versions GitLab affected versions not specified Description A security issue exists in the GitLab code collaboration platform due to a missing authorization procedure. Remote attackers may be able to gain unauthorized access to protected information by...

ROS-20250925-02

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of restricted directory. Python programming language interpreter CPython functions TarFile.extractall and...

The vulnerability of the pdf_write_cmap function in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the pdfwritecmap function in the software for processing, transforming, and generating Ghostscript documents is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the cairodebugresetstatic_data() function in the Poppler PDF rendering library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the cairodebugresetstaticdata function in the Poppler PDF rendering library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to deficiencies in handling exception states, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) and the software for remote management and monitoring of the Intel Server Platform Services (SPS) are related to manipulating an unknown input, resulting in a timing mismatch that allows a perpetrator to disclose protected information.

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME and the software for remote management and monitoring of the Intel Server Platform Services SPS are related to manipulating an unknown input, resulting in a timin...

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server Mod_auth_openidc, related to information disclosure, allows attackers to expose the protected information.

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Modauthopenidc, is related to the disclosure of information. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

ROS-20250912-09

Vulnerability in the implementation of the CORS mechanism of the Python PyPi language software product repository is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information. remotely to disclose protected...

The vulnerability of the GNOME graphical interface library libsoup, related to insufficient registry checks, allows attackers to compromise the integrity of the protected information.

The vulnerability of the GNOME graphical interface library libsoup is related to insufficient registration checks. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the Kerberos authentication network protocol arises from the use of an algorithm that does not meet security requirements for hash functions. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Kerberos authentication network protocol lies in the use of an algorithm that does not meet security requirements for the hash function. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the TrueConf Server software, related to errors in processing the relative path to the directory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the TrueConf Server software is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...