Kibana Policy Privilege Escalation

The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Erlang/OTP Unauthenticated Access Disclosure

The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Trivy Unlimited Resource Distribution DoS

The vulnerability of the Trivy scanner is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Erlang/OTP Privilege Escalation

The vulnerability of the Erlang/OTP software platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

FreeRDP Buffer Overflow RCE

The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Gitea Authentication Bypass Info Disclosure

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

libssh Heap Buffer Overflow DoS

The vulnerability of the libssh library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libssh Authentication Bypass Info Disclosure

The vulnerability of the libssh library is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

BuildKit indefinite resource distribution DoS

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

FreeRDP Zero Division DoS

The vulnerability of the RDP client FreeRDP is related to division by zero errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Kibana Data Visualization Service Access Control Unauthorized Access

The vulnerability of the access control mechanism of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Elastic Defend Unauthorized Access

The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Server Host Service Identification Processing Bypass

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

GitPython Command Execution

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

GitPython Service Data Access

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

BuildKit DoS

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

dogtag-pki Authentication Bypass

The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...

Etcd RBAC Permission Bypass

The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

Etcd gRPC Authorization Bypass

The vulnerability of the gRPC authentication mechanism for Etcd configuration stores is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...