Linux Distros Unpatched Vulnerability : CVE-2022-0172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction fo...

The vulnerability of the Milestone XProtect software installer allows a intruder to disclose protected information.

The vulnerability of the Milestone XProtect video surveillance software installer is related to the lack of data encryption measures. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

CVE-2019-12431

An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access the metadata of private milestones through the Search API. It has Improper Access Control...

PT-2025-17403 · Undefined · Undefined

One year ago, I was hoping to get a CVE Today, it’s real — CVE-2025-43927. 🚀 It might seem small, but for me, it’s so much. Showing up every day got me here. This is just the start. BugBounty CVE bugbountytips...

CVE-2025-1688

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

CVE-2025-1688

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

CVE-2025-1688 System configuration password reset

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

CVE-2025-1688 System configuration password reset

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

CVE-2025-1688

CVE-2025-1688 affects Milestone XProtect installer behavior where upgrading from older versions using 2024 R1/R2 installers resets the Management Server’s system configuration password. The vulnerability is triggered during upgrade processes and could bypass password protection, potentially impac...

Milestone XProtect 安全漏洞

Milestone XProtect is a video management software from Milestone. A security vulnerability exists in Milestone XProtect versions 2024 R1 through 2024 R2, which originates from resetting the system configuration password during the upgrade process, which could lead to a security configuration...

CVE-2024-43107

Improper Certificate Validation CWE-295 in the Gallagher Milestone Integration Plugin MIP permits unauthenticated messages e.g. alarm events to be sent to the Plugin. This issue effects Gallagher MIPS Plugin v4.0 prior to v4.0.32, all versions of v3.0 and prior...

CVE-2024-43107

Improper Certificate Validation CWE-295 in the Gallagher Milestone Integration Plugin MIP permits unauthenticated messages e.g. alarm events to be sent to the Plugin. This issue effects Gallagher MIPS Plugin v4.0 prior to v4.0.32, all versions of v3.0 and prior...

CVE-2024-43107

Improper Certificate Validation CWE-295 in the Gallagher Milestone Integration Plugin MIP permits unauthenticated messages e.g. alarm events to be sent to the Plugin. This issue effects Gallagher MIPS Plugin v4.0 prior to v4.0.32, all versions of v3.0 and prior...

CVE-2024-43107

Improper Certificate Validation CWE-295 in the Gallagher Milestone Integration Plugin MIP permits unauthenticated messages e.g. alarm events to be sent to the Plugin. This issue effects Gallagher MIPS Plugin v4.0 prior to v4.0.32, all versions of v3.0 and prior...

CVE-2024-43107

CVE-2024-43107 concerns the Gallagher Milestone Integration Plugin (MIP). The issue arises from improper certificate validation (CWE-295) in MIP, allowing unauthenticated messages (such as alarm events) to be sent to the plugin. Affected products include Gallagher MIP versions prior to 4.0.32 and...

Gallagher Milestone Integration Plugin 信任管理问题漏洞

Gallagher Milestone Integration Plugin Gallagher MIP is an integration plugin from Gallagher New Zealand. A security vulnerability exists in Gallagher Milestone Integration Plugin versions prior to v4.0.32 and v3.0 and prior, which stems from improper certificate validation and could result in...

CVE-2025-27148 Gradle vulnerable to local privilege escalation through system temporary directory

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

CVE-2025-27148 Gradle vulnerable to local privilege escalation through system temporary directory

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

CVE-2025-27148

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

CVE-2025-27148 Gradle vulnerable to local privilege escalation through system temporary directory

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...