373 matches found
EUVD-2015-3811
Malware in sbrugna...
EUVD-2019-3298
Malware in sbrugna...
EUVD-2025-1499
Malicious code in bioql PyPI...
EUVD-2024-3475
Malicious code in bioql PyPI...
The vulnerability of the server in the OpenSSH encryption protection tool allows a attacker to perform a MITM attack.
The vulnerability of the OpenSSH server security tool is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to perform a MITM attack remotely...
ROS-20250904-02
The vulnerability of the corosync/pacemaker PCS program configuration utility is related to flaws in the procedure of of authentication. Exploitation of the vulnerability could allow an attacker acting remotely to elevate their privileges...
The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. This vulnerability allows a perpetrator to cause service interruptions.
The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to trigger service failures through specially crafted HTTP requests...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the mod_ssl function in the Apache HTTP Server’s web server allows a hacker to cause a service failure.
The vulnerability of the modssl function in the Apache HTTP Server is related to deficiencies in the authentication process when processing the SSLEngine option. Exploiting this vulnerability allows a malicious actor to cause service failures using the TLS protocol...
Vulnerability of the MySQL Server component: This component is part of the Database Management System, allowing attackers to cause service failures.
The vulnerability of the MySQL Server component involves deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
The vulnerability of the InnoDB component in the MySQL Database Management System allows a attacker to cause service failures or gain unauthorized access for data modification, addition, and deletion.
The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows an attacker to cause service failures or gain unauthorized access for data modification, addition, and deletion...
The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain read, modify, and delete access to data.
The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...
The vulnerability of the Multiplatform Sync Errors component of the Oracle Mobile Field Service management platform, a system for automating business operations within the Oracle E-Business Suite. This component allows attackers to gain access to read, modify, and delete information.
The vulnerability of the Multiplatform Sync Errors component in the Oracle Mobile Field Service management platform, part of the Oracle E-Business Suite enterprise automation system, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server relates to improper authorization, allowing a perpetrator to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to improper authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Modbus TCP Packet Handler component in the Ethernet module software for WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows a hacker to execute arbitrary commands.
The vulnerability of the Modbus TCP Packet Handler component in the Ethernet module software of WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the HarmonyOS operating system, related to deficiencies in authentication procedures, allows a perpetrator to gain access to the camera without notifying the user.
The vulnerability of the HarmonyOS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the camera without notifying the user...
The vulnerability of the container management system and the virtual machine manager Incus, related to deficiencies in the authentication mechanism, allows attackers to circumvent existing security restrictions and perform spear-phishing attacks.
The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication mechanism, resulting from incorrect rule generation based on the access control list. Exploiting this vulnerability allows a malicious actor to bypass existi...
The vulnerability of the Blitz Identity Provider software, related to deficiencies in authentication mechanisms, allows attackers to elevate their privileges and gain unauthorized access to protected information.
The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite stems from deficiencies in authentication mechanisms, allowing unauthorized access to protected information.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability of the Xiaomi Mi Connect Service device’s software, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to the device.
The vulnerability of the Xiaomi Mi Connect Service device management software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device...