The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures, allowing attackers to circumvent security restrictions.

The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

The vulnerability of the SAML SSO library in Ruby SAML and the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to bypass authentication.

The vulnerability of the SAML SSO library in Ruby SAML and the Git-based software platform for collaborative code development on GitLab CE/EE is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass authentication processes...

The vulnerability of the filtering function for outgoing packets in IPv4 and IPv6 on the Cisco IOS XR operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the IPv4 and IPv6 outgoing packet filtering function in the Cisco IOS XR operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

The vulnerability of the Cisco IOS XR operating system, related to deficiencies in access control, allows attackers to circumvent security restrictions.

The vulnerability of the Cisco IOS XR operating system is related to deficiencies in access control based on access control lists ACLs. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the DNN CMS system, related to insufficient checking of unusual or exceptional states, allows attackers to circumvent existing security restrictions.

The vulnerability of the DNN CMS system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the software platform for developing and managing Adobe Commerce B2B stores relates to deficiencies in authentication mechanisms, allowing attackers to circumvent existing security restrictions.

The vulnerability of the software platform for developing and managing Adobe Commerce B2B is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511 Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

The vulnerability of the software platform for developing and managing Adobe Commerce B2B platforms, related to deficiencies in authentication mechanisms, allows attackers to circumvent security restrictions.

The vulnerability of the software platform for developing and managing Adobe Commerce B2B is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

VulnCheck KEV: CVE-2024-53704

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication...

The vulnerability of the Passwords component in the Safari browser for macOS operating systems allows a hacker to bypass security restrictions.

The vulnerability of the Passwords component in the Safari browser on macOS operating systems involves the disclosure of information through registration log files. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Basic HTTP Authentication module in Drupal CMS systems allows attackers to circumvent existing security restrictions.

The vulnerability of the Basic HTTP Authentication module in Drupal CMS systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the AutoGPT library, related to its failure to take measures to neutralize special elements, allows a violator to bypass the restrictions on shell commands.

The vulnerability of the AutoGPT library is related to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to bypass the restrictions in the botnet’s command list...

The vulnerability of Drupal’s REST & JSON API Authentication in the Drupal CMS system, related to incorrect authentication procedures, allows attackers to bypass existing security restrictions.

The vulnerability of Drupal’s REST & JSON API Authentication in the Drupal CMS system is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Node Access Rebuild component in Drupal CMS systems, related to deficiencies in access control, allows attackers to bypass security restrictions.

The vulnerability of the Node Access Rebuild component in Drupal CMS systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

The vulnerability of Adobe Connect web conference software lies in the redirection of URLs to an unreliable website, allowing attackers to circumvent existing security restrictions.

The vulnerability of Adobe Connect web conferencing software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to inadequate access control mechanisms, allows attackers to circumvent existing security restrictions.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to deficiencies in access control, allows attackers to bypass security restrictions.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

PT-2024-9553 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to an Improper Authorization vulnerability in Adobe Experience Manager, which could result in a Security feature bypass. A low-privileged attacker could...

The vulnerability of the application programming interface of the Trellix Enterprise Security Manager (ESM) system, which allows a threat actor to circumvent security restrictions.

The vulnerability of the application programming interface of the Trellix Enterprise Security Manager ESM system for monitoring, analyzing, and managing security threats is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow ...