12789 matches found
ROS-20260827-73-0020
The vulnerability of the intelgetcrtcnewencoder function in the drivers/gpu/drm/i915/display/inteldisplay.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system...
ROS-20260825-73-0010
The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...
ROS-20260824-73-0008
The vulnerability in freerdp3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260824-73-0006
The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260824-73-0026
The vulnerability in gpac is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260824-73-0011
The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260824-73-0016
The vulnerability in gobgp is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...
ROS-20260824-73-0022
The vulnerability in libde265 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260824-73-0020
Vulnerability of .NET software platforms and the Microsoft .NET Framework is related to insufficient verification of data authenticity. Exploitation of this vulnerability can allow attackers operating remotely to bypass existing security mechanisms...
ROS-20260821-73-0046
The vulnerability of the xfrmixmit function in the net/xfrm/xfrminterfacecore.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20260821-73-0047
The vulnerability of the dbAllocDmapLev function in the Linux operating system’s kernel is related to incorrect calculation of the index. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260821-73-0049
The vulnerability of the ksetregister function in the lib/kobject.c module of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260820-73-0006
The vulnerability of the MagicYUV decoder on the FFmpeg media processing platform relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious media file...
ROS-20260819-73-0068
The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
ROS-20260812-73-0023
The vulnerability in Wireshark is related to overflowing of buffers in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
ROS-20260810-73-0024
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260810-73-0003
The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...
ROS-20260729-73-0035
The vulnerability of the cupsdDeleteTemporaryPrinters function in a CUPS printing server relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260724-73-0043
The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260724-73-0025
The vulnerability in dotnet10.0 is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260724-73-0027
The vulnerability in dotnet10.0 is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260724-73-0032
The vulnerability in dotnet10.0 is related to incorrect validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20260722-73-0002
The vulnerability of the nhmldmxsendsample function in the MP4Box multimedia platform’s utility library, related to the assignment of the null pointer during data reading fread, allows a malicious actor to cause service interruptions...
ROS-20260722-73-0015
The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...
ROS-20260722-73-0017
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...
ROS-20260721-73-0049
The vulnerability of the FedCM component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...
ROS-20260721-73-0052
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ROS-20260721-73-0043
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260721-73-0053
The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface...
ROS-20260720-73-0065
The vulnerability in the Google Chrome web browser for iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...
ROS-20260717-73-0038
The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...
ROS-20260715-73-0007
The vulnerability of the Apache HTTP Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
ROS-20260715-73-0022
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260715-73-0026
The vulnerability of the WebML component in Google Chrome relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260715-73-0003
The vulnerability of the modauthdigest module in the Apache HTTP Server is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
ROS-20260715-73-0016
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...
ROS-20260715-73-0023
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260714-73-0002
The vulnerability of the RTSP protocol analyzer and the network traffic analyzer in Wireshark is related to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service failures...
ROS-20260714-73-0065
The vulnerability in Grafana relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260714-73-0048
The vulnerability of the KILLCLIENT command in the PostgreSQL PgBouncer connection pool software is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ROS-20260714-73-0045
The vulnerability in MinIO is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers who operate remotely to increase their privileges...
ROS-20260714-73-0059
The vulnerabilities of the ngxhttpproxyv2module and ngxhttpgrpcmodule modules in NGINX Plus and NGINX Open Source web servers are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause...
ROS-20260714-73-0061
The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...
ROS-20260714-73-0060
The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...
ROS-20260714-73-0057
The vulnerability in libtiff relates to the execution of operations beyond the buffer boundaries in memory. The vulnerability can be exploited remotely...
ROS-20260714-73-0049
The vulnerability of the PostgreSQL PgBouncer connection pool software relates to the assignment of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260714-73-0042
The vulnerability of the Poppler library for displaying PDF files is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260714-73-0063
The vulnerability in Grafana relates to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260714-73-0051
The vulnerability in poppler is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260714-73-0064
The vulnerability in Grafana relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...