The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

The vulnerability of the VMware ESXi hypervisor, related to deficiencies in authentication procedures, allows attackers to bypass the authentication process.

The vulnerability of the VMware ESXi hypervisor is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to bypass the authentication process...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of JetBrains TeamCity is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of JetBrains TeamCity is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the DHCP protocol lies in the lack of authentication for the critical function, allowing attackers to manipulate routes to redirect VPN traffic.

The vulnerability of the DHCP protocol lies in the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to remotely manipulate routing mechanisms, thereby redirecting VPN traffic...

The vulnerability of the OpenMetadata metadata management platform, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the OpenMetadata metadata management platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending specially crafted requests...

The vulnerability of the microprogramming software for UniLogic Studio programmable logic controllers of the UniStream series, related to deficiencies in authentication procedures, allows attackers to circumvent security restrictions.

The vulnerability of the microprogramming software for UniLogic Studio series UniStream is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to circumvent security restrictions remotely...

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems lies in the lack of authentication procedures, which allow attackers to gain full access to devices controlled by the vulnerable operating system.

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to devices controlled by the vulnerable operating syste...

The vulnerability of the XWiki platform, caused by deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the XWiki platform stems from deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the system administration program Sudo, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the system administration program Sudo is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...

PT-2023-6938 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authorization in some Zoom clients, which may allow an authorized user to conduct an escalation of privilege via network access. This is due to deficiencies in...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication mechanisms. This allows attackers to access information about arbitrary user accounts.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to access and disclose information about arbitrary user...

The vulnerability of the SAP CommonCryptoLib library, related to deficiencies in authentication procedures, allows attackers to read, modify, or delete data with limited access.

The vulnerability of the SAP CommonCryptoLib library is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to read, modify, or delete data with limited access...

The vulnerability of the EisBaer SCADA system, caused by deficiencies in the authentication process, allows a intruder to execute arbitrary commands.

The vulnerability of the SCADA system EisBaer is due to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to circumvent existing security restrictions.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The administration panel of the Ivanti Sentry integrated mobile security firewall has vulnerabilities. These vulnerabilities allow a intruder to modify configurations, execute system commands, or write files to the system.

The vulnerability of the administration panel of the Ivanti Sentry integrated mobile security gateway is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to modify configurations, execute system commands, or write files to the syst...

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to disclose protected information.

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms lies in the lack of authentication procedures, which allow attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP software integration platforms is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to remotely enhance their privileges and gain unauthorized access to protected information...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to carry out TCP/IP hijacking attacks.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to carry out a TCP/IP hijacking attack remotely...