10060 matches found
ROS-20260713-73-0004
The vulnerability of the net/textproto component in the Go programming language is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260710-73-0015
The vulnerability of the Go programming language’s MIME component is related to its algorithmic complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using a specially created MIME header...
ROS-20260710-73-0017
The vulnerability of the Parse function in the net-url component of the Go programming language is related to improper validation of syntax correctness in input. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
ROS-20260710-73-0032
The vulnerability of the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...
ROS-20260710-73-0030
The vulnerability of the Go programming language’s crypto/x509 component is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20260710-73-0034
The vulnerability of the Go programming language is related to incorrect encoding or escaping of output data when processing the tag’s type attribute. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...
ROS-20260710-73-0022
The vulnerability of the Equal function in the crypto-x509 component of the Go programming language is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
ROS-20260710-73-0011
The vulnerability of the built-in reverse proxy server in the Go programming language is related to insufficient checking of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
ROS-20260710-73-0001
The vulnerability of the Golang programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260710-73-0005
The vulnerability of the Go programming language’s crypto-x509 component is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260710-73-0016
The vulnerability of the Go programming language is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20260710-73-0025
The vulnerability of the Reader.ReadResponse function in the Go programming language is related to an uncontrolled resource consumption resulting from incorrect connection handling during the creation of a response string. Exploiting this vulnerability can allow a malicious actor to cause service...
ROS-20260710-73-0010
The vulnerability of the ParseAddress, ParseAddressList, and ParseDate functions in the Go programming language is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260709-73-0029
The vulnerability in portainer-ce is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260709-73-0015
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0033
The vulnerability in libcaca is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260709-73-0023
The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...
ROS-20260708-73-0048
The vulnerability in dovecot is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260708-73-0079
The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...
ROS-20260708-73-0004
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0067
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0026
The vulnerability of the Grafana Live messaging system in real-time mode, a platform for monitoring and surveillance, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted...
ROS-20260708-73-0024
The vulnerability of the PostgreSQL database management system is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
ROS-20260708-73-0055
The vulnerability in jq is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0020
The vulnerability of the PostgreSQL database management system is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
ROS-20260708-73-0044
The vulnerability in ImageMagick is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260708-73-0082
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0005
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0009
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
ROS-20260708-73-0021
The vulnerability of the PostgreSQL database management system is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
ROS-20260708-73-0075
The vulnerability in ImageMagick 7 is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260708-73-0052
The vulnerability of the jvparsesized function in the programming language jq is related to reading data beyond the allowable range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260708-73-0034
The vulnerability of the RESTORE command in the Redis database management system is related to buffer overflows in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
ROS-20260707-73-0001
The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
ROS-20260707-73-0024
The vulnerability of the system’s application programming interface for aggregating and storing Loki logs is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...
ROS-20260707-73-0023
The vulnerability of the sshrsakexfreekey function in the PuTTY cryptographic protection tool is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
ROS-20260707-73-0014
The vulnerability of the gdiCacheToSurface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause a service failure by sending specially crafted RDPGFX packets...
ROS-20260707-73-0004
The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user opens a specially crafted link...
ROS-20260707-73-0003
The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
ROS-20260706-73-0001
The vulnerability of the pgcreatesubscriber function in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
ROS-20260706-73-0032
The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...
ROS-20260706-73-0018
The vulnerability of the timeofday function in the PostgreSQL database management system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260706-73-0061
The vulnerability in python-virtualenv is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260706-73-0060
The vulnerability in Python-Starlette is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260706-73-0002
The vulnerability of the pgcreatesubscriber function in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
ROS-20260706-73-0009
The vulnerability of the CREATE TYPE command in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL functions remotely...
ROS-20260706-73-0063
The vulnerability of the gfmediagetcolorinfo function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260706-73-0045
The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260706-73-0007
The vulnerability of the CREATE TYPE command in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL functions remotely...