14946 matches found
Authentication Bypass
Kimai is vulnerable to Authentication Bypass. The vulnerability is due to the REST API accepting the KIMAISESSION cookie as authenticated before TOTP verification is completed, which allows an attacker with a valid account password to bypass two-factor authentication and access protected API...
CVE-2024-58367
SurrealDB before 2.0.4 has an improper authorization flaw in field permissions during SELECT, UPDATE, and DELETE, allowing an authorized user to leak protected field values through techniques such as SELECT VALUE, field aliasing, function arguments, WHERE filters, RETURN BEFORE, and SET clause re...
CVE-2024-58367 SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions
SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized users to access unauthorized field values through various query techniques. Attackers can exploit SELECT VALUE operations, field aliasing, function argument...
EUVD-2026-45230
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality Forced Browsing vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints...
The vulnerability of the raw image format component in the console-based graphic editor ImageMagick allows a hacker to exploit it to disclose protected information.
The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Cisco RoomOS operating system, related to the lack of measures for data encryption, allows a intruder to disclose protected information.
The vulnerability of the Cisco RoomOS operating system is related to the lack of measures for data encryption. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module on the Django web application software platform allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the node.js library SAP Approuter, related to redirecting URLs to unreliable websites, allows attackers to gain unauthorized access to protected information.
The vulnerability of the SAP Approuter library in Node.js involves redirecting URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Windows operating systems with HID technology allows attackers to disclose sensitive information.
The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR allows a intruder to gain unauthorized access to protected information.
The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to disclose protected information
The vulnerability of the Windows File Explorer driver in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.
The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to disclose protected information.
The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise software allows a perpetrator to disclose protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these system...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.
The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...
PT-2026-60815
Name of the Vulnerable Software and Affected Versions HCL DevOps Loop affected versions not specified Description Improper authorization checks allow unauthorized users to access restricted administrative functionality through forced browsing, which involves directly accessing protected applicati...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the issue of buffer overflows. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...