RustFS http_auth.rs Unauthorized Access

The vulnerability of the httpauth.rs script in the distributed RustFS storage system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Incoming Goods Suite Unauthorized Access

The vulnerability of the Incoming Goods Suite registration tool is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2025-12129

CVE-2025-12129 affects the CubeWP – All-in-One Dynamic Content Framework WordPress plugin (versions up to and including 1.1.27). Unauthenticated attackers can exfiltrate data from password-protected, private, or draft posts via the REST endpoints /cubewp-posts/v1/query-new and /cubewp-posts/v1/qu...

GitLab GraphQL Query Execution Environment Data Compromise

The vulnerability of the GraphQL query execution environment of a Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity and...

Windows Hello Data Compromise

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...

Windows File Explorer Disclosure

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

SAP NetWeaver Java Application Server Unauthorized Access

The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Radware Cloud Special Character Handler Disclosure

The vulnerability of the Special Character Handler component in the Radware Cloud software firewall is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created HTTP request...

CVE-2019-2119

In multiple functions of keystoreservice.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information disclosure of protected data with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2023-29103

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1, SIMATIC Cloud Connect 7 CC716 All versions V2.1. The affected device uses a hard-coded password to protect the diagnostic files. This could allow an authenticated attacker to access protected dat...

CVE-2024-34644

Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability...

CVE-2024-34610

Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data...

CVE-2024-34643

Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability...

Grafana Databricks Data Source Plugin Information Disclosure

The vulnerability of the data source plugin for open-source platforms for monitoring and observation by Grafana Databricks is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

libmysqlclient Disclosure Protected Information

The vulnerability of the client library libmysqlclient used by the logical backup copy tool MyDumper MySQL is related to insufficient protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...

Changed-files Unauthorized Access

The vulnerability of the changed-files software package for CI/CD automation processes is related to the presence of undeclared capabilities. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

PI Integrator for Business Analytics Information Disclosure

The vulnerability of the PI Integrator for Business Analytics software relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Linux file system Userfaultfd Writeprotect Data Compromise

The vulnerability of the userfaultfdwriteprotect function in the fs/userfaultfd.c module of the Linux file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

NAKIVO Director Unauthorized Access

The vulnerability of the Director component in NAKIVO’s backup, replication, and virtual machine recovery system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

Amiro.CMS Unauthorized Access

The vulnerability of the Amiro.CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...