ROS-20261029-73-0010

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to a lack of proper data security mechanisms. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise data integrity by using a specially crafted HTM...

ROS-20261029-73-0002

The Input component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise data integrity via a specially crafted HTML page...

ROS-20261029-73-0004

The vulnerability in the TabStrip component of Google Chrome and Microsoft Edge is related to improper memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

ROS-20261029-73-0006

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise data integrity...

ROS-20261029-73-0008

The vulnerability in the Serial component of Google Chrome and Microsoft Edge web browsers is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise data integrity by using a specially...

ROS-20261029-73-0012

The File System Access component vulnerability in Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise data integrity via a specially crafted PDF file...

ROS-20261028-73-0006

The sshd vulnerability in the OpenSSH cryptographic suite is related to access control flaws. Exploitation of this vulnerability enables a local attacker to escalate privileges by utilizing undefined vectors associated with serverloop.c, thereby creating a Unix domain transfer socket as a superus...

ROS-20261028-73-0021

The Codium vulnerability stems from insufficient resource control during its existence. Exploitation of this vulnerability could allow an attacker to cause a denial of service...

ROS-20261028-73-0004

The vulnerability in the sshpacketreadpoll2 function within the packet.c file of the OpenSSH cryptographic library is caused by a buffer overflow. Exploitation of this vulnerability enables a remote attacker to cause a denial of service memory read beyond bounds, application termination via...

ROS-20261028-73-0008

The client-side vulnerability in the OpenSSH cryptographic protection mechanism is related to security configuration errors. Exploitation of this vulnerability allows a remote attacker to gain trusted privileges when interacting with an X11 server by exploiting an improperly generated cookie for ...

ROS-20261028-73-0010

The vulnerability in the authpassword function auth-passwd.c of the sshd service within OpenSSH stems from insufficient input validation mechanisms—specifically, no length restrictions are applied to authentication passwords. Exploitation of this vulnerability enables a remote attacker to cause a...

ROS-20261028-73-0029

The vulnerability in OpenSSH relates to improper initialization and processing of the GSSAPIStrictAcceptorCheck configuration directive in Windows Active Directory environments. Exploitation of this vulnerability may allow a remote attacker to bypass established authentication restrictions,...

ROS-20261028-73-0022

The vulnerability in the Visual Studio Code source code editor is related to access control flaws. Exploiting this vulnerability could allow an attacker to escalate their privileges...

ROS-20261028-73-0002

The vulnerability in the kexinputkexinit function within the OpenSSH cryptographic protection module. Exploitation of this vulnerability allows a remote attacker to cause a denial-of-service condition by sending multiple identical KEXINIT requests...

ROS-20261028-73-0020

The vulnerability in the dosetupenv function session.c within the sshd service of OpenSSH is related to access control flaws. Exploitation of this vulnerability could allow an attacker to escalate their privileges...

ROS-20261028-73-0023

The vulnerability in the Remote Development Extension package for the Visual Studio Code source code editor is related to improper handling of code generation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

ROS-20261028-73-0018

The vulnerability in the roamingread and roamingwrite functions of the OpenSSH cryptographic library is caused by a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261028-73-0027

The vulnerability in rabbitmq-server relates to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261028-73-0016

The vulnerability in the authfile.c component of the sshd service within the OpenSSH cryptographic suite is related to key management errors. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information...

ROS-20261028-73-0025

The vulnerability in tomcat-native is related to an out-of-bounds memory operation. Exploitation of this vulnerability may allow an attacker to disclose protected information...

ROS-20261028-73-0014

The vulnerability related to the shared memory manager of the sshd daemon in OpenSSH is caused by buffer overflow in memory. Exploitation of this vulnerability enables a local attacker to escalate privileges by gaining access to an isolated privilege separation process associated with the mzback...

ROS-20261028-73-0012

Multiple vulnerabilities in the session.c sshd function of the OpenSSH cryptographic library exist due to the lack of safeguards against CRLF sequence handling carriage return followed by a newline. Exploitation of these vulnerabilities enables a remote attacker to bypass command interpreter...

ROS-20261027-73-0045

The vulnerability in rabbitmq-server is related to flaws in the authorization mechanism. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0023

The vulnerability in openssh involves buffer overflow in memory. Exploitation of this vulnerability can be carried out remotely...

ROS-20261027-73-0021

The vulnerability in the openssh package of the OpenSUSE operating system can be exploited to compromise the confidentiality, integrity, and availability of protected information. Exploitation of this vulnerability can be carried out remotely by an authenticated attacker...

ROS-20261027-73-0011

The vulnerability in the kbdintnextdevice function within the sshd service of the OpenSSH cryptographic suite is related to access control flaws in handling the oKbdInteractiveDevices parameter, which contains a list of methods for authenticating via an interactive keyboard. Exploitation of this...

ROS-20261027-73-0047

The vulnerability in rabbitmq-server is related to a lack of protection for sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0093

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploiting this vulnerability could allow a remote attacker to gain access to sensitive data via a specially crafted HTML...

ROS-20261027-73-0017

Multiple vulnerabilities exist in the openssh-askpass package version 5.3p1 for Red Hat Enterprise Linux; exploitation of these vulnerabilities may result in a breach of confidentiality and integrity of protected information. Exploitation of these vulnerabilities can be carried out remotely...

ROS-20261027-73-0099

The Media component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

ROS-20261027-73-0097

The vulnerability in the DigitalCredentials component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

ROS-20261027-73-0103

The vulnerability in the Metrics component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...

ROS-20261027-73-0027

The vulnerability in OpenSSH is related to an integer overflow. Exploitation of this vulnerability can be carried out remotely...

ROS-20261027-73-0043

The vulnerability in rabbitmq-server is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

ROS-20261027-73-0101

The vulnerability in the Browser component of Google Chrome and Microsoft Edge is related to improper use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

ROS-20261027-73-0030

The vulnerability in the OpenSSH cryptographic agent SSH agent is related to insufficient validation of loaded modules based on the PKCS11 encryption standard. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

ROS-20261027-73-0086

The vulnerability in the microprogramming software of the SIMATIC CN 4100 communication gateway is related to buffer overflow. Exploitation of this vulnerability may allow a remote attacker to cause a service outage...

ROS-20261027-73-0037

A vulnerability in rabbitmq-server related to improper restriction of the path name for directories. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0015

Multiple vulnerabilities in the openssh package versions prior to 6.6p1-r1 of the Gentoo Linux operating system; exploitation of these vulnerabilities may result in a breach of confidentiality, integrity, and availability of protected information. Exploitation of these vulnerabilities can be...

ROS-20261027-73-0065

The vulnerability in Tomcat 11 is related to improper comparison of connection counts. Exploitation of this vulnerability may allow a remote attacker to bypass existing security restrictions...

ROS-20261027-73-0013

The vulnerability in the OpenSSH cryptographic protection tool is related to privilege management errors. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information...

ROS-20261027-73-0085

The vulnerability in the microprogramming software of the SIMATIC CN 4100 communication gateway is related to buffer overflow. Exploitation of this vulnerability may allow a remote attacker to cause a service outage...

ROS-20261027-73-0095

The Media component vulnerability in Google Chrome is related to insecure privilege management. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

ROS-20261027-73-0019

The vulnerability in the sshd server functions kex.c and packet.c of the OpenSSH cryptographic library is an error that leads to dereferencing a null pointer when processing an incoming NEWKEYS message. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261027-73-0083

The vulnerability in Tomcat 11 involves unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261027-73-0039

The vulnerability in rabbitmq-server relates to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261027-73-0003

The vulnerability in the resendbytes function roamingcommon.c of the OpenSSH cryptographic library is related to errors in managing cryptographic keys. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0088

The EaxDecrypt function vulnerability in Wireshark’s computer network traffic analyzer is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261027-73-0041

The vulnerability in rabbitmq-server is related to flaws in the authorization mechanism. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0105

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...