Lucene search
+L

293 matches found

Redos
Redos
•added 2026/10/05 12:00 a.m.•10 views

ROS-20261005-73-0068

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

6.3AI score0.00216EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•12 views

The vulnerability of the parseKeyString() function in the models/asymkey/ssh_key_parse.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the parseKeyString function in the models/asymkey/sshkeyparse.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service failures...

6.2CVSS8.1AI score0.00174EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•11 views

The vulnerability of the IsMigrateURLAllowed() function in the services/migrations/migrate.go file of the Git repository management system Gitea allows a attacker to expose protected information.

The vulnerability of the IsMigrateURLAllowed function in the services/migrations/migrate.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

6.8CVSS6.3AI score0.00426EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•8 views

The vulnerability of the `handleOAuth2SignIn()` function in the routers/web/auth/oauth.go file of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the handleOAuth2SignIn function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protecte...

8.5CVSS6.2AI score0.00413EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•8 views

The vulnerability of the IntrospectOAuth() function in the routers/web/auth/oauth2_provider.go file of the Git repository management system Gitea allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the IntrospectOAuth function in the routers/web/auth/oauth2provider.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

4.3CVSS6.1AI score0.00331EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•10 views

The vulnerability lies in the `getStarredRepos()` function in the `routers/api/v1/user/star.go` file and the `ListMyTrackedTimes()` function in the `routers/api/v1/repo/issue_tracked_time.go` file of the Git repository management system Gitea. This vulnerability allows a malicious individual to disclose protected information.

The vulnerability of the getStarredRepos function in the routers/api/v1/user/star.go file and the ListMyTrackedTimes function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability...

4.3CVSS6.2AI score
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•9 views

The vulnerability of the ChangeTargetBranch() function in the services/pull/pull.go file of the Git repository management system Gitea allows a attacker to increase their privileges or bypass security restrictions.

The vulnerability of the ChangeTargetBranch function in the services/pull/pull.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges or circumvent security restrictio...

8.5CVSS6.5AI score0.00525EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•10 views

The vulnerability of the CheckAuthToken() function in the services/auth/auth_token.go file of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the CheckAuthToken function in the services/auth/authtoken.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

9.4CVSS6.3AI score0.00479EPSS
SaveExploits0References11Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•10 views

The vulnerability in the oauth2UpdateAvatarIfNeed() function of the routers/web/auth/oauth.go file in the Git repository management system Gitea allows a hacker to disclose protected information.

The vulnerability of the oauth2UpdateAvatarIfNeed function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

3.1CVSS6.4AI score0.0029EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•8 views

The vulnerability of the AddTime() function in the routers/api/v1/repo/issue_tracked_time.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

3.3CVSS6.2AI score0.00458EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•10 views

The vulnerability of the DeleteIssueLabel() function in the routers/api/v1/repo/issue_label.go file of the Git repository management system Gitea allows a attacker to expose protected information.

The vulnerability of the DeleteIssueLabel function in the routers/api/v1/repo/issuelabel.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected...

3.3CVSS6.1AI score0.00366EPSS
SaveExploits0References6Affected Software2
Redos
Redos
•added 2026/09/25 12:00 a.m.•13 views

ROS-20260925-73-0137

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

8.4CVSS6.3AI score0.00166EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/23 12:00 a.m.•13 views

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in access control. This allows attackers to bypass existing security mechanisms.

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass existing security mechanisms remotely...

10CVSS6.2AI score0.00533EPSS
SaveExploits0References3Affected Software2
Redos
Redos
•added 2026/09/08 12:00 a.m.•15 views

ROS-20260908-73-0006

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

6.5CVSS6.5AI score0.00287EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/10 12:00 a.m.•16 views

The vulnerability of the Linuxulator component in the kernel of FreeBSD operating systems allows a hacker to increase their privileges.

The vulnerability of the Linuxulator component in the kernel of FreeBSD operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS6.4AI score0.00126EPSS
SaveExploits1References2Affected Software1
Redos
Redos
•added 2026/07/28 12:00 a.m.•18 views

ROS-20260728-73-0008

The vulnerability in Grafana is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

3.1CVSS6AI score0.00227EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/23 12:00 a.m.•15 views

The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers, due to access control deficiencies, allows attackers to trigger service interruptions.

The vulnerability of the dovecot-acl file of Dovecot and OX Dovecot Pro is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...

4.3CVSS6.2AI score0.0029EPSS
SaveExploits0References9Affected Software6
Redos
Redos
•added 2026/07/14 12:00 a.m.•19 views

ROS-20260714-73-0071

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

8.1CVSS8.2AI score0.00426EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•14 views

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility o...

10CVSS6.1AI score0.00508EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•19 views

The vulnerability of the Web Runtime Security component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Web Runtime Security component of the JD Edwards EnterpriseOne Tools system management tool for resources involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete dat...

10CVSS6.1AI score0.00353EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder