IBM Watson Query Privilege Bypass Information Disclosure

The vulnerability of IBM Watson Query on Cloud Pak for Data relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitLab Synchronization Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

macOS Storage Unauthorized Access

The vulnerability of macOS storage operations is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

SAP Plug-In Basis Plugin Auth Bypass

The vulnerability of the SAP Plug-In Basis component of the SAP Business Warehouse system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PROFINET Disclosure Information

The vulnerability of the PROFINET protocol implementation in the modular safety system SIRIUS 3RK3 and the safety relay software SIRIUS 3SK2 lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an intruder to remotely exploit the syst...

Milestone XProtect Disclosure

The vulnerability of the Milestone XProtect video surveillance software installer is related to the lack of data encryption measures. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

PROFINET Disclosure Information Disclosure

The vulnerability of the PROFINET protocol implementation in the modular safety system SIRIUS 3RK3 and the safety relay software SIRIUS 3SK2 is related to a weak password obfuscation during data transmission. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose t...

Cisco WebEx Meetings Data Compromise

The vulnerability of Cisco Webex Meetings software client services relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

messaging video conferencing Path Traversal Information Disclosure

The vulnerability of the Message and Video Conference Messaging tool is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

D-Link DIR-816 Data Compromise

The vulnerability in the /goform/form2lansetup.cgi microprogramming system of D-Link DIR-816 relates to the issue of data being written outside the buffer in memory during the processing of the IP parameter. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

Microsoft 365 Copilot Disclosure

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Web Access Component Data Compromise

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Oracle Advanced Outbound Telephony Region Mapping Data Compromise

The vulnerability of the Region Mapping component in the Oracle Advanced Outbound Telephony application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

CVE-2025-35940 Hard-coded ArchiverSpaApi JWT Signing Key

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints...

CVE-2025-35940

The CVE-2025-35940 entry concerns ArchiverSpaApi (ASP.NET) that uses a hard-coded JWT signing key. The information across sources indicates an unauthenticated attacker can generate a verifiable JWT token to access protected ArchiverSpaApi endpoints (e.g., /api/v1/login, /users/{id}). The Red Hat ...

HPE Aruba Networking Private 5G Core security vulnerabilities

HPE Aruba Networking Private 5G Core is a 5G core from HPE America. A security vulnerability exists in HPE Aruba Networking Private 5G Core that stems from an API that could expose sensitive information and could result in the download of protected system files...

Apache InLong Deserialization Unauthorized Access

The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by sending specially crafted data...

Apache Superset SQL Injection

The vulnerability of the Apache Superset data visualization software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...

zpa2326_fill_sample_buffer Heap Buffer Overflow DoS

Vulnerability of the zpa2326fillsamplebuffer function in the drivers/iio/pressure/zpa2326.c module – The driver for supporting various types of embedded sensors in the Linux operating system involves the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to...