Erlang/OTP Unauthenticated Access Disclosure

The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Jenkins URL Redirection Phishing

The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...

libssh Heap Overflow DoS

The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

BuildKit DoS

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Kibana Cloud Connect Data Compromise

The vulnerability of the Cloud Connect component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

FFmpeg QR-code Processing Heap Buffer Overflow DoS

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...

Vim Code Execution

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Kubernetes Cluster Privilege Escalation

The vulnerability of the Kubernetes cluster management software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

fetchmail DoS

The vulnerability of the fetchmail email reception and forwarding client involves incorrect handling of value separators. Exploiting this vulnerability can allow a remote attacker to cause service failures...

BuildKit Command Injection

The vulnerability of the BuildKit container-building software lies in the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

dogtag-pki Authentication Bypass

The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...

Jenkins HTTP Handler Bypass

The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

Trivy Unlimited Resource Distribution DoS

The vulnerability of the Trivy scanner is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Erlang/OTP Privilege Escalation

The vulnerability of the Erlang/OTP software platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Gitea Authentication Bypass Info Disclosure

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Perl-DBI Resource Exhaustion DoS

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Kibana Authentication Bypass Unauthorized Access

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Server Host Service Identification Processing Bypass

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

Erlang/OTP Uncontrolled Resource Consumption DoS

The vulnerability of the Erlang programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

FreeRDP Buffer Overflow DoS

The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...