The vulnerability of Zoom’s video conferencing software, related to insufficient validation of input data, allows attackers to disclose sensitive information that should be protected.

The vulnerability of Zoom video conferencing software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

ROS-20240412-04

A vulnerability in Salt's configuration management and remote execution system is related to the copying a script along a predictable path. Exploitation of the vulnerability could allow an attacker, acting remotely to run their own script. A vulnerability in the symbolic.py component of the Pytho...

ROS-20240412-02

A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection negotiation process and remove an arbitrary number of SSH service messages. during the connection negotiation process and cause an arbitrary number of SSH service...

The vulnerability of the Meeting Chat component of Zoom’s video conferencing software, which allows a intruder to disclose protected information

The vulnerability of the Zoom software’s meeting chat component relates to the improper processing of logical operations. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

ROS-20240410-23

A vulnerability in the opencryptoki package is related to the processing of RSA PKCS1 augmented ciphertexts. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...

The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems allows a intruder to disclose protected information.

The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

PT-2024-3015 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Local Security Authority Subsystem Service LSASS of Windows operating system...

PT-2024-3023 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a memory boundary read and can allow an attacker to disclose protected information. There is no information provided about the estimated number of potentially affect...

The vulnerability of the hevc_parse_vps_extension() function in the media_tools/av_parsers.c file of the GPAC multimedia platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hevcparsevpsextension function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the SportsTeams extension of the software for implementing the MediaWiki hypertext environment allows a hacker to compromise the integrity of the protected information.

The vulnerability of the SportsTeams extension of the MediaWiki software, which is used to implement a hypertext environment, relates to the lack of permission checking. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity of the protected informati...

The vulnerability of the SportsTeams extension of the software for implementing the MediaWiki hypertext environment allows a hacker to compromise the integrity of the protected information.

The vulnerability of the SportsTeams extension of the software for implementing the hypertext environment MediaWiki is related to the lack of checks for the anti-CSRF token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams. Exploiting this vulnerability could allow a malicious actor t...

ROS-20240409-05

Vulnerability of nfconntrackdccppacket function of net/netfilter/nfconntrackprotodccp.c module of Linux kernel is related to memory overrun. of Linux operating system is related to memory overrun. Exploitation of the vulnerability could allow an intruder to gain access to protected information...

The vulnerability of the Apache Aurora task scheduling framework, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Aurora task scheduler framework is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in its ability to disclose information through a server error message, allowing an intruder to expose the protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the disclosure of information through a server error message. Exploiting this vulnerability allows an attacker to remotely disclose the protected information...

ROS-20240408-13

A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection negotiation process and remove an arbitrary number of SSH service messages. during the connection negotiation process and cause an arbitrary number of SSH service...

The vulnerability of the cURL command-line utility, related to errors in protocol deletion logic, allows a hacker to gain access to protected information.

The vulnerability of the cURL command-line utility is related to errors in the logic of protocol deletion. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

ROS-20240408-15

A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection negotiation process and remove an arbitrary number of SSH service messages. during the connection negotiation process and cause an arbitrary number of SSH service...

The vulnerability of the logging function of the Kibana data visualization service allows a perpetrator to disclose protected information.

The vulnerability of the logging function of the Kibana data visualization service is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Mastodon web application for deploying distributed social networks relates to the incorrect expiration time of the session, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the Mastodon web application for deploying distributed social networks is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

ROS-20240405-12

A vulnerability in the Commons FileUpload component of Apache Tomcat application server exists due to incomplete cleanup of temporary or auxiliary resources. clearing of temporary or auxiliary resources. Exploitation of the vulnerability could allow an attacker , acting remotely, to cause a denia...