golang-x-image Resource Exhaustion DoS

The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

Erlang/OTP Incorrect Comparison Bypass Security Restrictions

The vulnerability of the Erlang/OTP software platform is related to an incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...

Kibana Policy Privilege Escalation

The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Erlang/OTP Unauthenticated Access Disclosure

The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Jenkins URL Redirection Phishing

The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...

libssh Heap Overflow DoS

The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

BuildKit DoS

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Kibana Cloud Connect Data Compromise

The vulnerability of the Cloud Connect component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

Kibana Visualization Unauthorized Access

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FFmpeg QR-code Processing Heap Buffer Overflow DoS

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...

Vim Code Execution

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GitPython Service Data Access

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana XSS

The vulnerability of the Kibana data visualization service is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Kubernetes Cluster Privilege Escalation

The vulnerability of the Kubernetes cluster management software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

fetchmail DoS

The vulnerability of the fetchmail email reception and forwarding client involves incorrect handling of value separators. Exploiting this vulnerability can allow a remote attacker to cause service failures...

BuildKit Command Injection

The vulnerability of the BuildKit container-building software lies in the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

dogtag-pki Authentication Bypass

The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...

Etcd gRPC Authorization Bypass

The vulnerability of the gRPC authentication mechanism for Etcd configuration stores is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

golang-x-net Clickjacking

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

Jenkins HTTP Handler Bypass

The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...