163811 matches found
ROS-20260925-73-0138
The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...
ROS-20260925-73-0056
The vulnerability of the ipv6rplsrhrcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to compromise t...
Vim Code Execution
The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Erlang/OTP Type of Man-in-the-Middle
The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...
ROS-20260925-73-0110
The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...
golang-x-net Clickjacking
The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...
golang-x-net Clickjacking
The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...
golang-x-image Resource Exhaustion DoS
The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
etcd gRPC Authorization Bypass
The vulnerability in the gRPC authorization mechanism of the Etcd configuration store relates to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to bypass security restrictions...
Fleet Plugin Unauthorized Access
The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Fleet Plugin Unauthorized Access
The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Kibana Dashboard Bypass Security
The vulnerability of the dashboard management mechanism of the Kibana data visualization service is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
Etcd RBAC Permission Bypass
The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
MinIO Privilege Escalation
The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
MinIO Privilege Escalation
The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
Netty Insufficient Randomness Unauthorized Access
The vulnerability of the framework used for developing network applications, servers, and client protocols based on Netty lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Python-daphne HTTP Request Smuggling
The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...
Erlang/OTP SSRF
The vulnerability of the Erlang/OTP software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...
Kibana APM Unauthorized Access
The vulnerability of the Application Performance Monitoring APM component of the Kibana data visualization service is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protecte...
Erlang/OTP Unauthenticated Access Disclosure
The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...