9339 matches found
ROS-20260626-73-0036
The vulnerability in ImageMagick is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260626-73-0038
The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
ROS-20260626-73-0042
The vulnerability of the ngxhttpscgimodule and ngxhttpuwsgimodule modules in NGINX Plus and NGINX Open Source web servers is related to uncontrolled memory consumption. Exploiting this vulnerability can allow a malicious actor to perform a “man-in-the-middle” attack remotely...
ROS-20260626-73-0012
The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...
ROS-20260625-73-0028
The vulnerability in ffmpeg is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260625-73-0002
The vulnerability in gnutls is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260625-73-0001
The vulnerability of the gnutlspkcs11tokeninit function lib/pkcs11write.c in the GnuTL library is related to buffer overflows in the stack during token PKCS11 initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260625-73-0010
The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...
ROS-20260625-73-0003
The vulnerability in gnutls is related to errors that occur when a string or array is terminated with the null character. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
ROS-20260625-73-0009
The vulnerability in gnutls relates to the swapping of a pointer with an expired validity period. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260625-73-0013
The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260625-73-0021
The vulnerability in Postfix is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260625-73-0023
The vulnerability in Docker CE is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260625-73-0015
The vulnerability of the comparestrings function in the GnuTLS library is related to shortcomings in the mechanism for handling register-dependent data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20260625-73-0024
The vulnerability in Docker CE is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260625-73-0017
The vulnerability in frr is related to the swapping of the zero pointer. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260625-73-0019
The vulnerability of the DOM component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protecte...
ROS-20260625-73-0005
The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...
ROS-20260625-73-0007
The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260625-73-0011
The vulnerability in gnutls is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260625-73-0012
The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260625-73-0029
The vulnerability of the FFmpeg multimedia library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a corrupted audio file...
ROS-20260625-73-0016
The vulnerability of the ASN.1 library Libtasn1 is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260625-73-0018
The vulnerability in frr is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260625-73-0008
The vulnerability in gnutls is related to manipulating an unknown input, resulting in a time mismatch. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260625-73-0022
The vulnerability in Apache Kafka is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260625-73-0020
The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo involves the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260625-73-0014
The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...
ROS-20260625-73-0027
The vulnerability in ffmpeg is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
ROS-20260625-73-0025
The vulnerability in Docker CE is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260625-73-0026
The vulnerability in ffmpeg is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260625-73-0006
The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...
ROS-20260625-73-0004
The vulnerability in gnutls is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...
ROS-20260624-73-0015
The vulnerability in LXC is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260624-73-0013
The vulnerability in Python-Django is related to errors in processing parameter lengths of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0010
The vulnerability in libde265 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260624-73-0018
The vulnerability in jpegxl is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260624-73-0049
The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0043
The vulnerability in python-aiohttp is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0040
The vulnerability in curl is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...
ROS-20260624-73-0045
The vulnerability in python-aiohttp is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0036
The vulnerability in curl is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260624-73-0014
The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of the hypervisor or other virtual machines. This can be achieved by implementing attacks through secondary channels, allowing...
ROS-20260624-73-0007
The vulnerability of the tag in QML and Qt Quick for Qt6 is related to the provision of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260624-73-0017
The vulnerability in python-pip relates to unlimited downloading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260624-73-0033
The vulnerability in Netty is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0031
The vulnerability in Netty is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260624-73-0021
The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...