8586 matches found
ROS-20260709-73-0043
The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
ROS-20260709-73-0037
The vulnerability of Nomad application orchestrators is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260709-73-0010
The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...
ROS-20260709-73-0007
The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...
ROS-20260709-73-0002
The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...
ROS-20260709-73-0014
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0012
The vulnerability in MediaWiki relates to the disclosure of information in erroneous data fields. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...
ROS-20260709-73-0003
The vulnerability of the .NET software platform is related to authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges...
ROS-20260709-73-0001
The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260709-73-0023
The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...
ROS-20260709-73-0027
The vulnerability in portainer-ce is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260709-73-0028
The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0026
The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0029
The vulnerability in portainer-ce is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260709-73-0025
The vulnerability in Portainer-CE is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260709-73-0033
The vulnerability in libcaca is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260709-73-0024
The vulnerability in portainer-ce is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260709-73-0013
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0017
The vulnerability in MediaWiki is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260709-73-0018
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0019
The vulnerability in libtiff is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260709-73-0039
The vulnerability in openbao is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260709-73-0038
The vulnerability in openbao is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260709-73-0009
The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ROS-20260709-73-0006
The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ROS-20260709-73-0005
The vulnerability of the .NET software platform is related to authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges...
ROS-20260709-73-0004
The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ROS-20260709-73-0016
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0015
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0011
The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260709-73-0021
The vulnerability of the net/http2 library in the Go programming language is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
ROS-20260709-73-0022
The vulnerability in portainer-ce is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260709-73-0008
The vulnerability of the .NET software platform is related to authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges...
ROS-20260709-73-0030
The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...
ROS-20260709-73-0036
The vulnerability in openssh is related to incorrect handling of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260709-73-0020
The vulnerability in ImageMagick7 is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
ROS-20260709-73-0034
The vulnerability in python-pip relates to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
ROS-20260708-73-0048
The vulnerability in dovecot is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260708-73-0030
The vulnerability of the Grafana monitoring and observation platform lies in the reimporting of access control lists due to data import from the monitoring panel. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
ROS-20260708-73-0029
The vulnerability of the Auth Proxy function of the Grafana monitoring and logging platform relates to the default use of addresses with a mask of /32 when using a list of allowed IP addresses. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
ROS-20260708-73-0037
The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260708-73-0026
The vulnerability of the Grafana Live messaging system in real-time mode, a platform for monitoring and surveillance, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted...
ROS-20260708-73-0032
The vulnerability of the sqlExpressions function on the Grafana monitoring and observation platform relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...
ROS-20260708-73-0035
The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260708-73-0034
The vulnerability of the RESTORE command in the Redis database management system is related to buffer overflows in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
ROS-20260708-73-0033
The vulnerability of the Grafana monitoring and observation platform relates to incorrect access to the account after the token’s expiration period. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected information...
ROS-20260708-73-0036
The vulnerability of the processCommandAndResetClient function in the Redis database management system is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260708-73-0031
The vulnerability of the $timeGroup macro built into the Grafana monitoring and observation platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ROS-20260708-73-0074
The vulnerability in ImageMagick 7 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260708-73-0071
The vulnerability in ImageMagick7 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...