Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

MFlash file-sharing platform Information Disclosure

The vulnerability of the MFlash file-sharing platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

ROS-20251022-01

Authentication and authorization module for Apache 2.x HTTP server Modauthopenidc vulnerability is related to an information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information...

Tab Component Microsoft Edge Google Chrome Unauthorized Access

The vulnerability of the Tab component in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

MapUrlToZone Disclosure

The vulnerability of the MapUrlToZone method in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

XWiki Platform SQL Injection

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...

PyTorch bitwise_right_shift Information Disclosure

The vulnerability of the torch.bitwiserightshift interface in the PyTorch machine learning framework is related to the execution of the operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

Trassir Cloud Unauthenticated Access

The vulnerability of the Trassir Cloud cloud-based video surveillance platform is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

SMB Clients Windows Unauthorized Access

The vulnerability of SMB clients of Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

GLPI Access Control Unauthorized Access

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and delete protected information...

SAP Business Warehouse Auth Bypass Info Disclosure

The vulnerability of the SAP Business Warehouse data management and analytics system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the system...

SAP Business Warehouse Auth Bypass Info Disclosure

The vulnerability of the SAP Business Warehouse data management and analytics system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...

SAP NetWeaver AS Java Unencrypted Information Disclosure

The vulnerability of SAP NetWeaver AS Java software-based integration platforms lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose the protected data...

Argo Workflows updateConfig() Unauthorized Access

The vulnerability of the updateConfig function in the declarative tool for continuous delivery of GitOps for Kubernetes Argo Workflows is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

Data Protection Software Path Traversal Disclosure

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

Data Domain OS Path Traversal

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

Linux kernel xfrmi_xmit() Data Compromise

The vulnerability of the xfrmixmit function in the net/xfrm/xfrminterfacecore.c module, which implements network functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ELAARA Elikon-TS Web Interface Unauthorized Access

The vulnerability of the ELAARA Elikon-TS web server’s web interface is related to the absence of filtering for the path transmitted to the client. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Zabbix Authentication Bypass

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Cisco Nexus Dashboard Fabric Controller REST API Unauthorized Access

The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...