ROS-20260707-73-0007

The vulnerability in zabbix7-lts is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260707-73-0006

The vulnerability in zabbix-lts is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development on GitLab EE/CE allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the Splunk MCP Server application for data processing and analysis lies in the insufficient protection of registration data, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Splunk MCP Server data processing and analysis application is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development on GitLab EE/CE, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development in GitLab EE/CE, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 management platforms lies in the insufficient protection of registration data, allowing unauthorized access by attackers to protected information.

The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 control platforms relates to insufficient protection for registration data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

PT-2026-54577

Уязвимость инструмента Duo Workflows программной платформы на базе git для совместной работы над кодом GitLab EE/ CE связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой...

The vulnerability of the software for data integration and analytics in Hitachi Vantara Pentaho Data Integration & Analytics lies in the insufficient protection of registration data, allowing unauthorized access to protected information by attackers.

The vulnerability of the Hitachi Vantara Pentaho Data Integration & Analytics software for data integration and analytics is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

ROS-20260624-73-0038

The vulnerability in curl is related to insufficient protection of registration data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerabilities of SAP HANA Cockpit and SAP HANA Database Explorer tools, related to insufficient protection of registration data, allow attackers to compromise the confidentiality of protected information.

The vulnerability of SAP HANA Cockpit and SAP HANA Database Explorer tools is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the Apache Tomcat application server, related to insufficient protection of registration data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Dell PowerScale OneFS operating system, related to insufficient protection of registration data, allows attackers to compromise the confidentiality and accessibility of data.

The vulnerability of the Dell PowerScale OneFS operating system is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of data...

@axonflow/openclaw fix introduces plugin cache and credential-file permission hardening

Summary Two related permission defects in this AxonFlow plugin allowed registration credentials and cache state to be readable by other local users on hosts where the calling user's home directory was at the conventional 0755 mode. Affected versions Versions 1.3.2 and below. Impact 1. Cache and...

ROS-20260506-73-0033

Vulnerability in tomcat11 related to insufficient protection of registration data. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

ROS-20260506-73-0031

Vulnerability in tomcat related to insufficient protection of registration data. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

ROS-20260506-73-0032

Vulnerability in tomcat10 related to insufficient protection of registration data. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

The vulnerability of the reporting subsystem of the “Red Database” database management system allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the reporting subsystem of the “Red Database” database management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to insufficient protection of registration data, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the protected information...

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps exposes operating systems running on Windows to exploitation. This allows attackers to escalate their privileges.

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps, when operating on Windows operating systems, is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain elevat...

The vulnerability of the Windows Kernel component of the Windows operating system allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows Kernel component of the Windows operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information...