The vulnerability of the CI/CD system’s registration data protection mechanism in TeamCity allows unauthorized access by attackers, enabling them to obtain unauthorized access to protected information.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE lies in the improper handling of logical operations, which allows attackers to compromise the integrity and confidentiality of protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the improper handling of logical operations. Exploiting this vulnerability allows a malicious actor to compromise the integrity and confidentiality of the protected information...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to the lack of authentication, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the sev_receive_start() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the sevreceivestart function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Synology Router Manager operating system, related to insufficient protection of service data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Synology Router Manager operating system is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability in the virtual learning environment Moodle, related to bypassing authentication using a user-controlled key, allows intruders to elevate their privileges and gain unauthorized access to protected information.

The vulnerability in the virtual learning environment Moodle relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder to increase their privileges and gain unauthorized access to protected information...

The vulnerability of the Synology Router Manager operating system, related to insufficient protection of service data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Synology Router Manager operating system is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Apache SeaTunnel data processing software lies in its authentication procedures’ deficiencies, which allow attackers to gain unauthorized access to protected information.

The vulnerability of the Apache SeaTunnel data processing platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Cisco Nexus Dashboard, a control panel for analyzing and automating cloud-based data center operations, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Cisco Nexus Dashboard, a control panel for analyzing and automating cloud-based data center operations, is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to insufficient restrictions on communication channels for specified endpoints, allows attackers to gain unauthorized access to protected information.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain unauthorized acce...

The vulnerability of the Brickfield component in the virtual learning environment Moodle, which allows a perpetrator to influence the integrity of the protected information

The vulnerability of the Brickfield component in the Moodle virtual learning environment is related to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the protected information...

The vulnerability of the FreeIpa server, related to insufficient protection of service data, allows attackers to circumvent existing security restrictions and disclose the protected information.

The vulnerability of the FreeIpa server is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and disclose the protected information...

The vulnerability of the Jenkins automation server, related to insufficient protection of service data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the CHOCO TEI WATCHER mini’s microprogramming software, related to weak password requirements, allows attackers to perform brute-force attacks and gain unauthorized access to protected information.

The vulnerability of the CHOCO TEI WATCHER mini camera’s microprogramming software is related to weak password requirements. Exploiting this vulnerability could allow an attacker to perform a brute-force attack and gain unauthorized access to protected information...

The vulnerability of the SSH plugin of the JetBrains Toolbox, a set of development tools, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the SSH plugin of the JetBrains Toolbox developer’s tools is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SSH protocol implementation in the JetBrains Toolbox, a set of development tools, allows attackers to expose protected information.

The vulnerability of the SSH protocol implementation in the JetBrains Toolbox suite of tools is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...

ROS-20250424-14

Vulnerability in Apache Tomcat application server's JNDIRealm module implementation is related to flaws in the authentication mechanism. authentication mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information. Unauthorized...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to deficiencies in authentication procedures, allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the PHP library TCPDF, related to incorrect pathname restrictions for restricted access directories, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PHP library TCPDF lies in the incorrect path limitation for the access to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of SAP Capital Yield Tax Management software lies in incorrect restrictions on the path to the catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the SAP Capital Yield Tax Management software relates to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...