The vulnerability of the Amiro.CMS content management system lies in the lack of measures taken to protect the website structure, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Amiro.CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the toolset for interacting with MariaDB MCP MariaDB Server arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the tools for interacting with MariaDB MCP MariaDB Server stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of IBM OpenPages, a risk management platform for enterprises, relates to the disclosure of system data by unauthorized parties in the controlled area. This allows attackers to expose protected information.

The vulnerability of IBM OpenPages, a risk management platform for enterprises, involves the disclosure of system data that is not accessible to authorized personnel in the controlled area. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose protected informatio...

The vulnerability of the JetBrains YouTrack project and task management software, related to bypassing authentication using a user-controlled key, allows unauthorized access to protected information.

The vulnerability of the JetBrains YouTrack project and task management software relates to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of SAP NetWeaver web application servers’ Internet Communication Manager and SAP Web Dispatcher, related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher web applications is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging purposes. Exploiting this vulnerability can allow attackers to compromise the...

The vulnerability of the SAP Plug-In Basis plugin of the SAP Business Warehouse system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Plug-In Basis component of the SAP Business Warehouse system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the hmi_isapi.dll library in the Rockwell Automation FactoryTalk View SE HMI software allows a attacker to disclose protected information.

The vulnerability of the hmiisapi.dll library in the Rockwell Automation FactoryTalk View SE HMI software is related to insufficient protection of operational data during the processing of the GetHMIProjectPaths parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive...

The vulnerability of the tpm2_checkquote component in the Trusted Platform Module tools allows a perpetrator to access protected information.

The vulnerability of the tpm2checkquote component in the Trusted Platform Module tools repository is related to incorrect data regarding changes. Exploiting this vulnerability can allow an attacker to gain access to protected information through specially crafted queries...

The vulnerability of the “Health check-up” platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows unauthorized access by attackers to protected information.

The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2025-43514

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data...

CVE-2025-43514

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data...

CVE-2025-46278

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data...

ROS-20251217-7306

A vulnerability in the Omnibox component of the Google Chrome browser is related to the implementation of an incorrect control flow. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information...

The vulnerability of the WebSocket component in the Mattermost instant messaging application allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebSocket component in the Mattermost instant messaging application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to errors in information processing, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information during the processing of the user ID parameter...

The vulnerability of the Mattermost instant messaging application’s API component, which allows a hacker to compromise the confidentiality of protected information

The vulnerability of the Mattermost instant messaging application’s API component is related to deficiencies in the authentication process when processing the teamid parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of the Mattermost instant messaging application relates to an overly restrictive mechanism for blocking user accounts. This allows a malicious actor to disclose protected information and block external LDAP accounts.

The vulnerability of the Mattermost instant messaging application is related to an overly restrictive mechanism for blocking user accounts. Exploiting this vulnerability could allow a malicious actor to disclose protected information and block external LDAP accounts...

ROS-20251216-7336

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an access control flaw. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information...

The vulnerability of the SAP NetWeaver AS ABAP software integration platform lies in the lack of password masking for fields, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver AS ABAP software integration platform is related to the absence of password field masking. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the AuthN component of the distributed storage system for NVIDIA AIStore-based AI applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the AuthN component in the NVIDIA AIStore distributed storage system for AI-based applications involves a lack of authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...