ROS-20260729-73-0029

The vulnerability of the Go programming language’s crypto/x509 package is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out “man-in-the-middle” attacks...

ROS-20260728-73-0002

The vulnerability in freerdp3 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260728-73-0018

The vulnerability in python-PyPDF2 is related to errors in processing XML entities. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260728-73-0017

The vulnerability of the Browser Tree and Explain Visualizer modules in the pgAdmin 4 database management tool exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

ROS-20260728-73-0016

The vulnerability of the FileBackedSessionManager mechanism in the pgAdmin 4 database management tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20260728-73-0004

The vulnerability in mongodb-org is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260728-73-0021

The vulnerability in python-PyPDF2 is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260728-73-0022

The vulnerability in python-PyPDF2 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260728-73-0001

The vulnerability in freerdp3 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260728-73-0010

The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...

ROS-20260728-73-0008

The vulnerability in Grafana is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260728-73-0003

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260728-73-0020

The vulnerability in python-PyPDF2 is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260728-73-0014

The vulnerability in Grafana is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ROS-20260728-73-0015

The vulnerability of the Maintenance Tool component in the pgAdmin 4 database management tool is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20260728-73-0019

The vulnerability in python-PyPDF2 is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260728-73-0011

The vulnerability in Grafana is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ROS-20260728-73-0012

The vulnerability in Grafana is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ROS-20260728-73-0013

The vulnerability in Grafana relates to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20260728-73-0009

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260728-73-0007

The vulnerability in the mongo-c-driver is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260728-73-0005

The vulnerability in mongodb-org is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...

ROS-20260728-73-0006

The vulnerability in mongodb-org is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20260727-73-0024

A vulnerability in httpd related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their privileges...

ROS-20260727-73-0021

A vulnerability in the modheaders and modmime modules of the Apache HTTP Server is related to out-of-bounds memory reads. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

ROS-20260727-73-0017

A vulnerability in Gitea related to a lack of protection for internal data. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260727-73-0022

A vulnerability in the modlda module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service...

ROS-20260727-73-0027

A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0023

A vulnerability in httpd related to information disclosure in an invalid data area. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...

ROS-20260727-73-0005

A vulnerability in the MariaDB database management system is related to incorrect behavior. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0009

A vulnerability in apache-activemq related to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...

ROS-20260727-73-0012

A vulnerability in the message broker administration console of the Apache ActiveMQ software platform is related to flaws in the code generation control mechanism. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260727-73-0010

A vulnerability in apache-activemq related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to bypass ACL security restrictions and gain unauthorized access to protected information...

ROS-20260727-73-0001

A vulnerability in the Itemdirectviewref::derivedfieldtransformerforwhere function of the MariaDB database management system is related to incorrect behavior. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0014

A vulnerability in apache-activemq related to an integer overflow. Exploitation of this vulnerability could allow an attacker to cause a denial of service...

ROS-20260727-73-0016

A vulnerability in the phpseclib cryptographic protocols library is related to information disclosure due to a timing inconsistency. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...

ROS-20260727-73-0015

A vulnerability in httpd related to a buffer overflow in dynamic memory. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260727-73-0011

A vulnerability in apache-activemq related to uncontrolled resource consumption. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0020

A vulnerability in httpd related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260727-73-0019

A vulnerability in Gitea related to flaws in the authorization mechanism. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...

ROS-20260727-73-0006

A vulnerability in the MariaDB database management system is related to incorrect behavior. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0030

A vulnerability in the Apache HTTP Server's modproxyhtml module is related to a dynamic memory buffer overflow. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0026

A vulnerability in the modxml2enc module of the Apache HTTP Server is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0004

A vulnerability in the MariaDB database management system is related to incorrect behavior. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0029

A vulnerability in the Apache HTTP Server is related to a buffer overflow at the start of the buffer. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0028

A vulnerability in the modhttp2 module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0013

A vulnerability in apache-activemq related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260727-73-0025

A vulnerability in the Apache HTTP Server's modproxyftp module is related to an infinite loop with no exit condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0018

A vulnerability in Gitea related to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to carry out an SSRF attack...

ROS-20260727-73-0008

A vulnerability in apache-activemq related to an incorrect restriction on the path name to a restricted directory. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...