147363 matches found
Fleet Plugin Unauthorized Access
The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
MongoDB ldapQueryPassword Unauthorized Access
The vulnerability of the ldapQueryPassword parameter processing mechanism in the MongoDB database management system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
ROS-20260925-73-0191
The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Kibana Authentication Bypass Unauthorized Access
The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Netty Insufficient Randomness Unauthorized Access
The vulnerability of the framework used for developing network applications, servers, and client protocols based on Netty lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Netty Encryption Unauthorized Access
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
PT-2026-99003
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...
BuildKit Path Traversal
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...
Erlang/OTP Unauthorized Access
The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Jenkins Confidential Data Storage Unauthorized Access
The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration is related to the lack of measures taken to encrypt secret data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...
SUSE SLES12 Security Update : hplip (SUSE-SU-2026:4335-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4335-1 advisory. - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of...
PHP-phpseclib Time Mismatch Unauthorized Access
The vulnerability of the PHP-phpseclib interpreter lies in manipulating an unknown input, which leads to a time mismatch vulnerability. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2026-99076
Name of the Vulnerable Software and Affected Versions GLPI versions 0.85 through 10.0.25 GLPI versions 11.0.0 through 11.0.7 Description A low-privileged authenticated user can create, update, or delete knowledge base comments and translations without the required authorization for the affected...
PT-2026-99089
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description The External Data Source feature, which retrieves records from external systems, fails to properly verify user permissions before including record details in requests. An authenticated user with basic...
CVE-2026-67420: Missing Authorization
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked runtime tags. when an existing AMQP connection refreshes from an OAuth token that grants the impersonator tag to a valid same-username toke...
Apache Tomcat Session Duration Unauthorized Access
The vulnerability of the Apache Tomcat application server is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-67233
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2...
GitPython Service Data Access
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
Erlang/OTP Path Traversal Unauthorized Access
The vulnerability of the Erlang/OTP software platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Erlang/OTP Path Traversal Unauthorized Access
The vulnerability of the Erlang/OTP software platform is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...