The vulnerability of the Cloud Connect component of the Kibana data visualization service allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Cloud Connect component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the mechanism for working with identifiers of objects in the Kibana visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the lack of protection for service data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the journal message formation mechanism during the check of the MongoDB database system’s collection schema allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the journal message formation mechanism, when checking the schema of the MongoDB database management system’s collection, is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 8 vulnerabilities (USN-8784-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8784-1 advisory. Kai Aizen discovered that the Networking component of OpenJDK 8 did not correctly handle user...

The vulnerability of the Linux operating system’s kernel, related to insufficient resource control during its existence, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Kubernetes cluster management software lies in synchronization errors when using shared resources, allowing a malicious actor to escalate their privileges.

The vulnerability of the Kubernetes cluster management software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Erlang/OTP software platform, related to errors in processing the relative path to the directory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Erlang/OTP software platform is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the golang-x-net package in the Golang programming language, which involves uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the golang-x-net package in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Fleet plugin of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the MinIO object storage server, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability of the golang-x-image package, a programming language, arises from insufficient resource control during its existence, allowing attackers to trigger a service failure.

The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Erlang/OTP software platform, related to inconsistencies in responses to incoming requests, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers allows a violator to gain unauthorized access to protected information.

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

The vulnerability of the WORKDIR processing mechanism of the OCI-container management and launch software Podman allows a attacker to circumvent security restrictions.

The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...

The vulnerability of the RDP client FreeRDP, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the libssh library, related to uncontrolled memory allocation, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the libssh library, related to improper checking of the return value of functions, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to improper checking of the return value of a function. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library allows a intruder to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...

The vulnerability of the Vim text editor, related to the use of an incomplete black list, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...