12916 matches found
ROS-20260714-73-0060
The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...
ROS-20260714-73-0059
The vulnerabilities of the ngxhttpproxyv2module and ngxhttpgrpcmodule modules in NGINX Plus and NGINX Open Source web servers are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause...
ROS-20260714-73-0057
The vulnerability in libtiff relates to the execution of operations beyond the buffer boundaries in memory. The vulnerability can be exploited remotely...
ROS-20260714-73-0049
The vulnerability of the PostgreSQL PgBouncer connection pool software relates to the assignment of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260714-73-0042
The vulnerability of the Poppler library for displaying PDF files is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260714-73-0063
The vulnerability in Grafana relates to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260714-73-0051
The vulnerability in poppler is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260714-73-0064
The vulnerability in Grafana relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260714-73-0055
The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...
ROS-20260713-73-0006
The vulnerability of the File.ReadDir and File.Readdir functions in the Go programming language is related to improper restrictions on the path to a limited directory. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...
ROS-20260713-73-0044
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260713-73-0016
The vulnerability is related to excessive resource consumption within the cycle. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260713-73-0019
The vulnerability of the Pillow image processing library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ROS-20260713-73-0011
The vulnerability is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
ROS-20260713-73-0046
The vulnerability in GitPython relates to an incorrect limitation on the path name for restricted access directories. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260713-73-0050
The vulnerability in GitPython is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260710-73-0020
The vulnerability of the crypto-x509 component in the Go programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
ROS-20260710-73-0026
The vulnerability of the Go programming language is related to shortcomings in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...
ROS-20260710-73-0017
The vulnerability of the Parse function in the net-url component of the Go programming language is related to improper validation of syntax correctness in input. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
ROS-20260710-73-0014
The vulnerability of the consumePhrase function in the Go programming language is related to insufficient validation of input data during the analysis of email addresses. Exploiting this vulnerability could allow a remote attacker to cause service failures...
ROS-20260710-73-0004
The vulnerability of the url.Parse function in the host/authority component of the Go programming language is related to improper syntax validation of input. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
ROS-20260710-73-0030
The vulnerability of the Go programming language’s crypto/x509 component is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20260710-73-0015
The vulnerability of the Go programming language’s MIME component is related to its algorithmic complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using a specially created MIME header...
ROS-20260710-73-0007
The vulnerability of the LookupCNAME function in the Go programming language is related to a memory reclamation error when processing CNAME records. Exploiting this vulnerability can allow an attacker to cause service interruptions...
ROS-20260710-73-0016
The vulnerability of the Go programming language is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20260710-73-0010
The vulnerability of the ParseAddress, ParseAddressList, and ParseDate functions in the Go programming language is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260710-73-0006
The vulnerability of the Go programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
ROS-20260710-73-0019
The vulnerability of the Go programming language component tar Reader is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ROS-20260709-73-0029
The vulnerability in portainer-ce is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260709-73-0037
The vulnerability of Nomad application orchestrators is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260709-73-0002
The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...
ROS-20260709-73-0025
The vulnerability in Portainer-CE is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260709-73-0030
The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...
ROS-20260709-73-0008
The vulnerability of the .NET software platform is related to authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges...
ROS-20260709-73-0009
The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ROS-20260709-73-0023
The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...
ROS-20260708-73-0067
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0043
The vulnerability in ImageMagick 7 is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260708-73-0040
The vulnerability in ImageMagick is related to incorrect input of configuration data. The vulnerability can be exploited remotely...
ROS-20260708-73-0026
The vulnerability of the Grafana Live messaging system in real-time mode, a platform for monitoring and surveillance, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted...
ROS-20260708-73-0028
The vulnerability of the Grafana monitoring and observation platform’s plugin is related to the unlimited distribution of resources when processing requests to the endpoint. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ROS-20260708-73-0081
The vulnerability of the loexport, loread, lolseek64, and lotell64 functions in the PostgreSQL database management system’s client library is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to remotely rewrite the pgdump or psql stack...
ROS-20260708-73-0003
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0024
The vulnerability of the PostgreSQL database management system is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
ROS-20260708-73-0002
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0008
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0055
The vulnerability in jq is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0044
The vulnerability in ImageMagick is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260708-73-0020
The vulnerability of the PostgreSQL database management system is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
ROS-20260708-73-0010
The vulnerability of the loexport, loread, lolseek64, and lotell64 functions in the PostgreSQL database management system’s client library is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to remotely rewrite the pgdump or psql stack...