ROS-20260812-73-0018

The vulnerability in dnsdist relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CORS Component Confidential Data Access

The vulnerability of the CORS component in Google Chrome and Microsoft Edge relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to access confidential data through a specially created HTML page...

Glances XML-RPC Data Compromise

The vulnerability of the XML-RPC server used by the Glances monitoring tool is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

Firefox Thunderbird Code Execution

The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client is related to the use of an untrusted network policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Glances Monitoring Tool Untrusted Policy Unauthorized Access

The vulnerability of the application programming interface of the Glances monitoring tool is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260515-73-0049

A vulnerability in the ChromeDriver component of Google Chrome for Android browser is related to the use of an untrusted cross-domain policy file. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions...

ChromeDriver Bypass

The vulnerability of the ChromeDriver component of the Google Chrome browser for Android is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

Safari WebKit Unauthenticated Access Disclosure

The vulnerability of the Web page rendering module in Safari web browsers, operating systems iOS, and iPadOS relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

WebKit XSS

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of an untrusted intermediate policy file during the processing of Canvas elements. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protecte...

ROS-20250929-12

Vulnerability in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to with an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code Vulnerability in JavaScript Engine...

ROS-20250922-02

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect code generation control. code generation control. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code Vulnerability in Mozilla Firefox, Firefox ESR...

Layout component Code Execution

The vulnerability of the Layout component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Canvas2D Component Data Compromise

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...

IBM DevOps Velocity Untrusted Policy File Access Privilege Escalation

The vulnerability of the IBM DevOps Velocity lifecycle management platform previously known as IBM UrbanCode Velocity is related to the use of an untrusted inter-domain policy file. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and...

IBM Power Systems PowerSC Privilege Escalation

The vulnerability of the IBM PowerSC microprocessor architecture is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows attackers to perform privileged actions and extract confidential information...

PT-2023-8059 · Siemens · Totally Integrated Automation Portal +5

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V2407 Opcenter Quality versions prior to V2312 SIMATIC PCS neo versions prior to V4.1 SINEC NMS versions prior to V2.0 SP1 Totally Integrated Automation Portal TIA Portal V14 Totally Integrated...

SIMATIC PCS neo Process Management Web Code Execution

The vulnerability of the SIMATIC PCS neo technology process management web system is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firefox Confidential Data Access

The vulnerability in the Firefox web browser is related to the use of an untrusted cookie file. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Google Chrome Isolated iframe Bypass Access

The vulnerability in the isolated iframe environment of Google Chrome relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to protected information through a...

Google Chrome Intents Bypass

The vulnerability of Google Chrome’s Intents API for Android is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...