ROS-20250822-05

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

ROS-20250822-04

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

Storage Port Driver Disclosure

The vulnerability of the Storage Port Driver driver for Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Windows Routing and Remote Access Disclosure Information

The vulnerability of the Windows Routing and Remote Access service RRAS on Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

Google Chrome File Picker Unauthorized Access

The vulnerability of the File Picker component in the Google Chrome browser is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

NTFS Disclosure

The vulnerability of the NTFS file system in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

AviaBit-Airport Password Reset Disclosure

The vulnerability of the password-reset module of the WEB application of the “AviaBit-Airport” system is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor to disclose protected information by sending a specially crafted POST request...

EvaProject Carbon ERP IDOR

The vulnerability of the EvaProject Carbon ERP enterprise management system is related to the use of a potentially insecure direct reference to an object IDOR. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

SUSE CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

Linux Distros Unpatched Vulnerability : CVE-2024-11931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.6.4, from 17.7 prior to 17.7.3, and from 17.8 prior to 17.8.1...

PT-2025-34154

Name of the Vulnerable Software and Affected Versions: Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...

Business Chat Function Disclosure Protected Information

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Apache Superset Data Access

The vulnerability of Apache Superset’s data visualization software lies in the lack of protection for operational data at the final point/chart/data level. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Substance 3D Stager Buffer Overflow Unauthorized Access

The vulnerability of the Substance 3D Stager software lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Azure Virtual Machines Information Disclosure

The vulnerability of Azure Virtual Machines is related to the exposure of information. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Business Chat Function Disclosure Protected Information

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

BIT-GITLAB-2025-5819 Incorrect Permission Assignment for Critical Resource in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances...

CVE-2025-5296

CWE-59: Improper Link Resolution Before File Access 'Link Following' vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent...

CVE-2025-5296

CWE-59: Improper Link Resolution Before File Access 'Link Following' vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent...

Linux Distros Unpatched Vulnerability : CVE-2023-5198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16....