GitLab Session Token Handler Unauthorized Access

The vulnerability of the Session Token Handler component in the Git-based software development platform, which is used for collaborative code development on GitLab, is related to context switching errors during privilege handling. Exploiting this vulnerability can allow an attacker, operating...

IBM Cognos Controller Error Report Unauthorized Access

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

Ivanti EPM Path Traversal

The vulnerability of the Ivanti EPM endpoint management software is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Drupal REST Views Unprotected Access

The vulnerability of the REST Views module in the Drupal CMS system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Dell VxRail Information Disclosure

The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...

PT-2025-1164 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Kerberos protocol implementation in Windows, which is associated with insufficient protection of service data. This can allow a remote attacker to disclose...

IBM Cognos Controller Error Report Unauthorized Access

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

Container Storage Interface CSI Data Compromise

The vulnerability of the Container Storage Interface CSI component in the Nomad application orchestrator is related to improper authentication. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

Moodle Information Disclosure

The vulnerability in the virtual learning environment Moodle is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Geovision GV-ASManager Authentication Bypass Info Disclosure

The vulnerability of the software for controlling the Geovision GV-ASManager access control system is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Ruijie Reyee OS MQTT Broker Unauthorized Access

The vulnerability of the MQTT broker in the Ruijie Reyee OS operating system is related to the lack of measures taken to neutralize substitution or matching symbols. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Veeam Backup & Replication Remote Disclosure

The vulnerability of the remote management interface of the Veeam Backup & Replication software for cloud, virtual, and physical systems is related to insufficient protection of registration data. Exploiting these vulnerabilities could allow a malicious actor to disclose the protected information...

I-O Data Device UD-LT1/EX Permission Bypass

The vulnerability of the I-O Data Device UD-LT1 and UD-LT1/EX router microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

WwanSvc Unauthorized Access

The vulnerability of the Wireless Wide Area Network Service WwanSvc in Microsoft Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Webservice API Endpoint Disclosure Protected Information

The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform is related to the transmission of data in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Now Platform IT infrastructure Unauthorized Access

The vulnerability of the Now Platform IT infrastructure management system is related to the failure to take measures to neutralize specific elements of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2024-9389 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to incorrect restriction of XML external entities in Microsoft SharePoint, which can be exploited by a remote attacker to gain unauthorized access to...

JetBrains YouTrack Auth Bypass

The vulnerability of the JetBrains YouTrack project and task management software lies in the absence of an authentication process when processing query parameters. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

NextCloud Mail Improper Access Disclosure

The vulnerability of NextCloud Mail’s email client stems from insufficient access control. Exploiting this vulnerability allows a malicious actor to disclose protected information from a remote location...

NextCloud Mail Disclosure

The vulnerability of NextCloud Mail’s email client stems from improper automatic configuration. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...