Firefox Interface Component Data Compromise

The vulnerability of the Firefox interface component for people with limited browser capabilities is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

HR-Link employment electronic document management platform Authentication Bypass

The vulnerability of the HR-Link talent electronic document management platform lies in the insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

SAP Plug-In Basis Plugin Unauthorized Access

The vulnerability of the SAP Plug-In Basis component of the SAP Business Warehouse system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

SAP NetWeaver ABAP Unprotected Access

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to insufficient protection of the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SAP NetWeaver ABAP Authentication Bypass

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Linux scsi ses_intfremove Heap Buffer Overflow Info Disclosure

The vulnerability of the sesintfremove function in the Linux kernel’s SCSI component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

IBM Engineering Requirements Management DOORS Disclosure

The vulnerability of the IBM Engineering Requirements Management DOORS Next software exists because measures to protect the website structure have not been implemented. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

SAP NetWeaver Application Server ABAP Privilege Bypass

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Linux ntfs3 Run Unpack Heap Buffer Overflow

The vulnerability of the rununpack function in the ntfs3 component of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to protected information...

SAP NetWeaver Buffer Overflow

The vulnerability of SAP NetWeaver web application servers, such as the SAP NetWeaver Internet Communication Manager and the SAP Content Server, as well as the SAP Web Dispatcher, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the...

SAP NetWeaver Internet Communication Manager Web Dispatcher Data Compromise

The vulnerability of the SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher web applications is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging purposes. Exploiting this vulnerability can allow attackers to compromise the...

IBM Planning Analytics Local Unauthorized Access

The vulnerability of the IBM Planning Analytics Local software is related to improper verification of syntax correctness in input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

IBM Concert Software Heap Buffer Overflow Info Disclosure

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to improper cleaning of dynamic memory. Exploiting this vulnerability can allow attackers to compromise the accessibility of protected information...

Rockwell Automation FactoryTalk View SE HMI Library Disclosure

The vulnerability of the hmiisapi.dll library in the Rockwell Automation FactoryTalk View SE HMI software is related to insufficient protection of operational data during the processing of the GetHMIProjectPaths parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive...

Cisco Identity Services Engine Unauthorized Access

The vulnerability of the Cisco Identity Services Engine ISE administration portal is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20251223-7318

Vulnerability in jenkins related to a flaw in the authorization procedure. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20251222-7301

A vulnerability in the Golang programming language is related to input validation errors when processing directory traversal sequences in filenames. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

BlueZ OBEX DoS

The vulnerability of the OBEX protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data outside of the allowed range. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

Audio Profile AVRCP Component BlueZ Unauthorized Access

The vulnerability of the Audio Profile AVRCP component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the allowed range. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

tpm2_checkquote Component Access

The vulnerability of the tpm2checkquote component in the Trusted Platform Module tools repository is related to incorrect data regarding changes. Exploiting this vulnerability can allow an attacker to gain access to protected information through specially crafted queries...