10200 matches found
ROS-20260708-73-0035
The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260708-73-0029
The vulnerability of the Auth Proxy function of the Grafana monitoring and logging platform relates to the default use of addresses with a mask of /32 when using a list of allowed IP addresses. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
ROS-20260708-73-0017
The vulnerability of the loexport, loread, lolseek64, and lotell64 functions in the PostgreSQL database management system’s client library is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to remotely rewrite the pgdump or psql stack...
ROS-20260708-73-0053
The vulnerability of the strlen function in thejq programming language is related to errors that occur when a string or array is terminated with a NULL character. Exploiting this vulnerability can allow an attacker to influence the integrity and accessibility of the protected information...
ROS-20260708-73-0038
The vulnerability in glibc is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
ROS-20260708-73-0037
The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260708-73-0027
The vulnerability of the Snapshot API interface of the Grafana monitoring and observation platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to read and delete data...
ROS-20260708-73-0077
The vulnerability in ImageMagick 7 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260708-73-0075
The vulnerability in ImageMagick 7 is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260708-73-0058
The vulnerability in jq is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0057
The vulnerability in jq is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0056
The vulnerability in jq is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260708-73-0072
The vulnerability in ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260708-73-0052
The vulnerability of the jvparsesized function in the programming language jq is related to reading data beyond the allowable range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260708-73-0051
The vulnerability of the functions jvsetpath, jvgetpath, and delpathssorted in the programming language jq is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260708-73-0039
The vulnerability in glibc is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260708-73-0066
The vulnerability in ImageMagick 7 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0031
The vulnerability in Python-Django is related to insufficient registry checks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0033
The vulnerability in openbao is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260707-73-0030
The vulnerability in Python-Django is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code...
ROS-20260707-73-0029
The vulnerability in Python-Django is related to incomplete comparisons with missing factors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...
ROS-20260707-73-0056
The vulnerability of the Annotations API interface of the Grafana monitoring and observation platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to data...
ROS-20260707-73-0041
The vulnerability in dovecot is related to manipulating an unknown input, resulting in a time mismatch vulnerability. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260707-73-0040
The vulnerability in dovecot is related to bypassing the authentication process. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
ROS-20260707-73-0036
The vulnerability of the Go programming language’s crypto/x509 component is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20260707-73-0048
The vulnerability in gpac is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0020
The vulnerability of the cliprdrserverreceivepdu function in the RDP client FreeRDP is related to buffer overflows in dynamic memory during the processing of the capabilitySetLength parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service...
ROS-20260707-73-0013
The vulnerability in libexif is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260707-73-0001
The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
ROS-20260707-73-0034
The vulnerability of Nomad application orchestrators is related to the incorrect definition of symbolic links before accessing files. Exploiting this vulnerability allows an attacker to gain access to and read/write arbitrary files...
ROS-20260707-73-0010
The vulnerability in rubygem-yard is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
ROS-20260707-73-0009
The vulnerability in jq is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260707-73-0016
The vulnerability in gpac is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0021
The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
ROS-20260707-73-0006
The vulnerability in zabbix-lts is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260707-73-0049
The vulnerability in gpac is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0035
The vulnerability in dovecot is related to the lack of protection for service data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
ROS-20260707-73-0044
The vulnerability in dovecot is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260707-73-0053
The vulnerability in gpac is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0058
The vulnerability of the pgbasebackup and pgrewind utilities in the PostgreSQL database management system is related to deficiencies in the mechanism for handling symbolic references. Exploiting this vulnerability allows a malicious actor to rewrite any files remotely...
ROS-20260707-73-0051
The vulnerability in gpac is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260707-73-0045
The vulnerability in dovecot is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260707-73-0012
The vulnerability in ImageMagick7 is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260707-73-0015
The vulnerability in gpac is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260707-73-0019
The vulnerability in freerdp3 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260707-73-0024
The vulnerability of the system’s application programming interface for aggregating and storing Loki logs is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...
ROS-20260707-73-0007
The vulnerability in zabbix7-lts is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260707-73-0018
The vulnerability in freerdp3 is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260707-73-0022
The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...