ROS-20261002-73-0090

The vulnerability of the ascii function in the PostgreSQL database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261001-73-0015

The vulnerability in perl-YAML-Syck is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261001-73-0021

The vulnerability in rclone relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260930-73-0147

The vulnerability in the fs/f2fs/node.c module of the Linux operating system is related to incorrect synchronization due to an improper check of the ISCHECKPOINTED flag. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0073

The vulnerability in the schedd/actife.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0078

The vulnerability of the schteql component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

ROS-20260930-73-0014

The vulnerability of the nvmettcphandleh2cdatapdu function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0067

The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260929-73-0149

The vulnerabilities of the functions ksmbdtreeconnconnect, ksmbdtreeconnect PUT, and ksmbdtreeconndisconnect in the module fs/smb/server/mgmt/treeconnect.c, as well as the function smb2treedisconnect in the module fs/smb/server/smb2pdu.c, are related to the reuse of previously freed memory due to...

ROS-20260929-73-0104

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

ROS-20260929-73-0033

The vulnerability of the handleauthsessionkey function in the net/ceph/authx.c module, which is part of the Linux kernel’s networking functions, relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260928-73-0053

The vulnerability of the net/sctp component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260928-73-0097

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0092

The vulnerability of the fs/orangefs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0026

The vulnerability in the modules include/net/iptunnels.h, net/ipv4/iptunnel.c, and net/ipv6/ip6tunnel.c of the Linux operating system is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failur...

ROS-20260925-73-0015

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260925-73-0008

The vulnerability of the Linux operating system’s Qualcomm driver relates to the use of previously freed memory due to competitive access to resources during device disconnection in the emacremove function within the drivers/net/ethernet/qualcomm/emac/emac.c module. Exploiting this vulnerability...

ROS-20260925-73-0049

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260925-73-0089

The vulnerability of the vti6initnet function in the net/ipv6/ip6vti.c module of the Linux kernel’s IPv6 implementation is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260924-73-0002

The vulnerability of the peakusbupdatetsnow function in the drivers/net/can/usb/peakusb/pcanusbcore.c file of the Linux network device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260924-73-0092

The vulnerability of the vdecmsgqueueinit function in the drivers/media/platform/mediatek/vcodec/vdecmsgqueue.c file of the Linux kernel-based multimedia device driver leads to unlimited resource allocation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260924-73-0049

The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260924-73-0055

The vulnerability of the ntfsnew inode function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

ROS-20260924-73-0054

The vulnerability of the hciremoveadvmonitor function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0048

The vulnerability of the ncmbind function in the drivers/usb/gadget/function/fncm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0094

The vulnerability of the smb2findcontextvals function in the fs/smb/server/oplock.c module of the SMB subsystem in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain access to...

ROS-20260923-73-0044

The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260923-73-0043

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260923-73-0002

The vulnerability in python-black is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

ROS-20260923-73-0059

The vulnerability of the unregisternvdimmpmu function in the drivers/nvdimm/ndperf.c module of the Linux operating system’s memory device drivers related to the distribution of resources without restrictions and regulation. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260917-73-0012

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260915-73-0038

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

ROS-20260915-73-0089

The vulnerability of the File System Access component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

ROS-20260915-73-0011

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0010

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

ROS-20260908-73-0009

The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260904-73-0001

The vulnerabilities of the Branch Target Buffer BTB and Indirect Branch Predictor IBP in Intel microprogramming devices stem from the state of the race within the pipeline. Exploiting these vulnerabilities can allow attackers to disclose protected information by executing specially crafted...

ROS-20260904-73-0005

The vulnerability of Intel microprogramming software is related to insufficient protection of system data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

ROS-20260825-73-0010

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

ROS-20260824-73-0018

Vulnerability of .NET software platforms and the Microsoft .NET Framework is related to insufficient verification of data authenticity. Exploitation of this vulnerability can allow attackers operating remotely to bypass existing security mechanisms...

ROS-20260821-73-0010

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260820-73-0005

The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...

ROS-20260819-73-0033

The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260818-73-0011

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260817-73-0003

The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ROS-20260810-73-0003

The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

ROS-20260810-73-0010

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

ROS-20260806-73-0031

The vulnerability of the i40evsirequestirqmsix function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect index. Exploiting this vulnerability could allow an attacker to compromi...

ROS-20260803-73-0007

The vulnerability of the act Runner component in the Git repository management system Gitea is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

ROS-20260729-73-0036

The vulnerability in GIMP is related to errors that occur when a string or array is terminated with the null character. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...