The vulnerability of the Perl-DBI interface for connecting to and working with databases, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Perl-DBI interface for connecting to and working with databases lies in the use of externally controlled input data for selecting classes. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Reporting component of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reporting component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Fleet plugin of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Erlang/OTP software platform, related to the choice of a less secure algorithm during reconciliation processes, allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

ROS-20260925-73-0059

The vulnerability of the rdsmessagepurge function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the number of surfaces that are subject to attacks, with their quantitative measure exceeding the desired maximum. This allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...

The vulnerability of the MinIO object storage server, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability of the Kibana data visualization service, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260925-73-0191

The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Erlang/OTP software platform, related to synchronization errors when using shared resources, allows attackers to increase their privileges.

The vulnerability of the Erlang/OTP software platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the mechanism for working with identifiers of objects in the Kibana visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the golang-x-net package in the Golang programming language arises from an improper limitation on the visible layers of the user interface. This allows attackers to carry out clickjacking attacks.

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

The vulnerability of the Fleet plugin of the Kibana data visualization service allows a hacker to bypass security restrictions.

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

HPESBGN05140 rev.1 - HPE OneView, Multiple Vulnerabilities

Potential Security Impact: Remote: Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - Prior to v11.40 HPE Synergy Composer - Prior to v11.40 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-76718 |...

CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

The vulnerability of the Kibana data visualization service, related to insufficient testing of queries on the server side, allows a perpetrator to execute an SSRF attack.

The vulnerability of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the libssh library, related to uncontrolled memory allocation, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Kubernetes cluster management software lies in synchronization errors when using shared resources, allowing a malicious actor to escalate their privileges.

The vulnerability of the Kubernetes cluster management software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the golang-x-net package in the Golang programming language arises from an improper limitation on the visible layers of the user interface. This allows attackers to carry out clickjacking attacks.

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...