14502 matches found
ROS-20260721-73-0017
The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HT...
ROS-20260721-73-0021
The vulnerability of the File System Access API interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...
ROS-20260721-73-0011
The vulnerability of the Shared Storage API interface in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...
ROS-20260720-73-0004
The vulnerability of the WebHID Human Interface Device interface of the Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code by connecting to HID...
ROS-20260720-73-0040
The vulnerability of Google Chrome’s Codecs component relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260720-73-0073
The vulnerability of the Sanitizer API on Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
ROS-20260720-73-0063
The vulnerability of the Google Chrome browser’s Runtime component is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260717-73-0019
The vulnerability in the rendering mode of Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
ROS-20260717-73-0006
The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260717-73-0009
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted HTML page from a remote location...
ROS-20260717-73-0016
The vulnerability of the DevTools suite for web development in the Google Chrome web browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions through a specially created HTML page...
ROS-20260716-73-0074
The vulnerability in the isolated iframe environment of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on file downloads by using a specially created HTML page...
ROS-20260716-73-0013
The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20260716-73-0021
The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to a data protection mechanism flaw. Exploiting this vulnerability allows an attacker to bypass security restrictions by downloading malicious extensions remotely...
ROS-20260716-73-0005
The vulnerability of Google Chrome’s WebRTC technology is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created web page...
ROS-20260715-73-0008
The vulnerability of the moddavlock module in the Apache HTTP Server is related to pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a denial-of-service attack...
ROS-20260715-73-0009
The vulnerability of the ajpparsedata function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...
ROS-20260715-73-0024
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260714-73-0059
The vulnerabilities of the ngxhttpproxyv2module and ngxhttpgrpcmodule modules in NGINX Plus and NGINX Open Source web servers are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause...
ROS-20260714-73-0061
The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...
ROS-20260714-73-0022
The vulnerabilities of the functions dissectsmb2notifydataout and dissectsmb2filefulleainfo in the SMB2 protocol analyzer tool Wireshark involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow attackers to cause service failures...
ROS-20260714-73-0026
The vulnerability of the Monero protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a hacker to cause a service failure...
ROS-20260714-73-0009
The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, Wireshark, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...
ROS-20260714-73-0044
The vulnerability in MinIO is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
ROS-20260714-73-0043
The vulnerability in MinIO is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers who operate remotely to increase their privileges...
ROS-20260714-73-0017
The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...
ROS-20260714-73-0035
The vulnerability of the mbimdissecttlvielist function in the Wireshark computer network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...
ROS-20260714-73-0071
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260714-73-0042
The vulnerability of the Poppler library for displaying PDF files is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260714-73-0057
The vulnerability in libtiff relates to the execution of operations beyond the buffer boundaries in memory. The vulnerability can be exploited remotely...
ROS-20260713-73-0049
The vulnerability of the Repo.clonefrom, Remote.fetch, Remote.pull, and Remote.push functions in the GitPython library for interacting with git repositories is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to...
ROS-20260713-73-0034
The vulnerability in Python-Relenv relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260713-73-0035
The vulnerability in Python-Relenv relates to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260713-73-0041
The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260710-73-0015
The vulnerability of the Go programming language’s MIME component is related to its algorithmic complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using a specially created MIME header...
ROS-20260710-73-0013
The vulnerability of the net.Dial and net.LookupPort functions in the Go programming language for Windows operating systems is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ROS-20260709-73-0038
The vulnerability in openbao is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260709-73-0006
The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ROS-20260709-73-0041
The vulnerability of the gfisomaddtrackkind function in the isomedia/isomwrite.c file, belonging to the MP4Box encoder of the GPAC multimedia platform, is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures through the use of a...
ROS-20260709-73-0028
The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260708-73-0079
The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...
ROS-20260707-73-0006
The vulnerability in zabbix-lts is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260707-73-0017
The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause a service failure by sending specially crafted RDPGFX packets...
ROS-20260707-73-0028
The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of a supervisor machine or other virtual machines. This can be achieved by implementing attacks through secondary channels,...
ROS-20260706-73-0022
The vulnerability of the timeofday function in the PostgreSQL database management system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260706-73-0034
The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...
ROS-20260706-73-0005
The vulnerability of the pgrestoreattributestats function in the PostgreSQL database management system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by this function...
ROS-20260706-73-0042
The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260706-73-0007
The vulnerability of the CREATE TYPE command in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL functions remotely...
ROS-20260706-73-0010
The vulnerability of the CREATE TYPE command in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL functions remotely...