The vulnerability of the Monster Menus module in the Drupal CMS system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Monster Menus module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information and compromise the integrity of that information...

The vulnerability of the Technology Foundation component of the Oracle Project Foundation software, a system for automating business operations in enterprises, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Technology Foundation component of the Oracle Project Foundation software in the Oracle E-Business Suite relates to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

The vulnerability of SAP NetWeaver Java Application Server web applications stems from deficiencies in the authentication process, allowing attackers to gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the social_group_flexible_group configuration in the Drupal Open Social CMS system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the socialgroupflexiblegroup configuration in the Drupal Open Social CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

[SECURITY] [DLA 4021-1] 389-ds-base security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4021-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura January 19, 2025 https://wiki.debian.org/LTS -...

The vulnerability of the implementation of the authorization mechanism for microprogramming software in Moxa EDS-508A switches allows a intruder to gain unauthorized access to the device’s configuration files.

The vulnerability of the authentication mechanism for Microprogramming Software on Moxa EDS-508A switches lies in the exploitation of vulnerabilities in the identification/authentication mechanism. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized acces...

The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Pages Restriction Access module in the Drupal CMS system, related to deficiencies in the authentication mechanism, allows attackers to bypass security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Pages Restriction Access module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

The vulnerability of the Apache Superset data visualization software lies in its authentication procedures’ flaws, which allow unauthorized users to gain unauthorized access to read, modify, or delete data.

The vulnerability of Apache Superset’s data visualization software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to read, modify, or delete data by sending specially crafted request...

The vulnerability of the upgrademysqlstatus() function in the CyberPanel web hosting control panel allows a hacker to escalate their privileges and execute arbitrary commands.

The vulnerability of the upgrademysqlstatus function in the CyberPanel web hosting control panel is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary commands remotely...

PT-2024-9527 · Microsoft · Windows Virtualization-Based Security (Vbs) Enclave +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS Enclave affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Virtualization-Based Security VBS Enclave of Microsoft Windows operating...

The vulnerability of the virtual learning environment Moodle, related to deficiencies in authentication procedures, allows unauthorized users to gain access to system elements.

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to system components...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE is related to deficiencies in the authentication mechanism. This allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerabilities of the Fortinet FortiManager software for centralized device management, the FortiPAM system for account management, the FortiProxy proxy server for protecting against internet attacks, the FortiSwitchManager local management platform, the Fortinet FortiPortal security analytics and management tool, and the FortiOS operating system, allow attackers to send network packets to internal resources.

The vulnerabilities of the Fortinet FortiManager software for centralized device management, the FortiPAM system for account management, the FortiProxy proxy server for protecting against internet attacks, the FortiSwitchManager local management platform, the Fortinet FortiPortal security analyti...

Vulnerabilities of the plugins Really Simple Security Free, Really Simple Security Pro, and Really Simple Security Pro Multisite of the WordPress content management system, which allow attackers to increase their privileges.

The vulnerabilities of the Really Simple Security Free, Really Simple Security Pro, and Really Simple Security Pro Multisite plugins of the WordPress content management system are related to authentication process flaws. Exploiting these vulnerabilities can allow attackers to increase their...

The vulnerability of the ConsumerPullTransferTokenValidationApiController component in the data-processing and information ecosystem software for Eclipse EDC allows a perpetrator to bypass token expiration checks.

The vulnerability of the ConsumerPullTransferTokenValidationApiController component in the data-processing and information ecosystem of Eclipse EDC is related to authentication procedures’ flaws. Exploiting this vulnerability could allow a malicious actor to bypass token expiration checks...

The vulnerability of TOTOLINK LR350 router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to circumvent security restrictions.

The vulnerability of TOTOLINK LR350 router microprogramming software is related to deficiencies in the authentication process when processing the authCode parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...