12727 matches found
ROS-20260625-73-0001
The vulnerability of the gnutlspkcs11tokeninit function lib/pkcs11write.c in the GnuTL library is related to buffer overflows in the stack during token PKCS11 initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260625-73-0024
The vulnerability in Docker CE is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260625-73-0028
The vulnerability in ffmpeg is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260625-73-0029
The vulnerability of the FFmpeg multimedia library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a corrupted audio file...
ROS-20260625-73-0011
The vulnerability in gnutls is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260625-73-0012
The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260625-73-0005
The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...
ROS-20260625-73-0007
The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260625-73-0006
The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...
ROS-20260625-73-0014
The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...
ROS-20260625-73-0008
The vulnerability in gnutls is related to manipulating an unknown input, resulting in a time mismatch. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260625-73-0004
The vulnerability in gnutls is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...
ROS-20260625-73-0022
The vulnerability in Apache Kafka is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260625-73-0016
The vulnerability of the ASN.1 library Libtasn1 is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260625-73-0018
The vulnerability in frr is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260625-73-0027
The vulnerability in ffmpeg is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
ROS-20260625-73-0025
The vulnerability in Docker CE is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260625-73-0026
The vulnerability in ffmpeg is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260625-73-0020
The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo involves the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260624-73-0040
The vulnerability in curl is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...
ROS-20260624-73-0018
The vulnerability in jpegxl is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260624-73-0014
The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of the hypervisor or other virtual machines. This can be achieved by implementing attacks through secondary channels, allowing...
ROS-20260624-73-0049
The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0036
The vulnerability in curl is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260624-73-0045
The vulnerability in python-aiohttp is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0031
The vulnerability in Netty is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260624-73-0007
The vulnerability of the tag in QML and Qt Quick for Qt6 is related to the provision of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260624-73-0015
The vulnerability in LXC is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260624-73-0017
The vulnerability in python-pip relates to unlimited downloading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260624-73-0010
The vulnerability in libde265 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260624-73-0021
The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...
ROS-20260624-73-0043
The vulnerability in python-aiohttp is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0022
The vulnerability in Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0013
The vulnerability in Python-Django is related to errors in processing parameter lengths of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0033
The vulnerability in Netty is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0028
The vulnerability in Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0026
The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...
ROS-20260624-73-0024
The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...
ROS-20260624-73-0044
The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0034
The vulnerability in curl is related to the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260624-73-0042
The vulnerability in python-aiohttp is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0037
The vulnerability in curl is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0038
The vulnerability in curl is related to insufficient protection of registration data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0027
The vulnerability in Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0008
The vulnerability in freerdp3 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260624-73-0012
The vulnerability in Python-Django relates to the possibility of sending a session cookie file. Exploiting this vulnerability could allow an attacker to intercept a user’s session...
ROS-20260624-73-0016
The vulnerability in golang-opentelemetry-otel is related to the use of an unreliable search path. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260624-73-0009
The vulnerability of the gdisurfacebits function in the RDP client of FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260624-73-0006
The vulnerability of the tag in QML and Qt Quick for Qt6 is related to the provision of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...