LibSSH sftphandle() Unauthorized Access

The vulnerability of the sftphandle function in the LibSSH library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

DDK rgxfw_hwr_log_info Buffer Overflow

The vulnerability of the rgxfwhwrloginfo function in the Driver Development Kit DDK involves a pointer being moved beyond the allocated memory area when processing the psHWRInfoBuf parameter. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected...

seg6 Component Data Compromise

The vulnerability of the seg6 component in the Linux operating system’s kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Docker Desktop Diagnostic Logs Unauthorized Access

The vulnerability of the diagnostic logs of the Docker Desktop platform for developing and delivering container applications is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

GitLab Access Control Unauthorized Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GitLab Authentication Bypass Info Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

yiisoft/yii2-redis Exposed Information

The vulnerability of the yiisoft/yii2-redis framework in Yii is related to the exposure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose protected information through the AUTH parameter...

Insufficiently Protected Credentials

Overview org.opencastproject:opencast-kernel is a free and open source solution for automated video capture and distribution at scale. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the process of fetching MediaPackage elements included in a...

JQ f_strflocaltime() Compromise Protected Information

The vulnerability of the fstrflocaltime function in the JavaScript programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

WeGIA Access Control Error Vulnerability

WeGIA is a web manager for welfare organizations. WeGIA has an access control error vulnerability that can be exploited by an attacker to cause an unauthenticated user to access protected functionality...

CVE-2025-26397

SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication fro...

NetworkServlet Backup Database Unauthorized Access

The vulnerability of the NetworkServlet.backupDatabase function in the system for centrally managing network devices and ports of the Advantech iView family is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker to gain unauthorized...

Oracle Database Server Java VM Unauthorized Access

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Android isemtelephony Unauthorized Access

The vulnerability of IsemTelephony operating systems for Android is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Alerts & IRM Platform Disclosure

The vulnerability of the Alerts & IRM platform’s notification service for monitoring and surveillance in Grafana relates to insufficient protection of operational data when connected to the DingDing contact point. Exploiting this vulnerability can allow a malicious actor to disclose protected...

Mobile Security Framework Privilege Bypass

The vulnerability of the Mobile Security Framework for mobile application security research lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Zoom Video Conferencing Control Flow Disclosure

The vulnerability of Zoom video conferencing software is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

Zoom Video Conferencing Authentication Bypass

The vulnerability of Zoom’s video conferencing software is related to errors in the authentication process for verifying certificate authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Core server component Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using protocols such as T3 and II...

TP-Link Archer C50 config.xml Unauthorized Access

The vulnerability of the config.xml file in TP-Link Archer C50 Wi-Fi routers lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...