160015 matches found
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Elastic Defend component of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Synthetics plugin of the Kibana data visualization service allows a hacker to bypass security restrictions.
The vulnerability of the Synthetics plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions while operating remotely...
The vulnerability of the Apache Tomcat application server, related to incorrect session duration, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Tomcat application server is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Python library for interacting with Git repositories, GitPython, relates to the implementation or modification of arguments, allowing attackers to execute arbitrary commands.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the fetchmail email reception and forwarding client software allows a hacker to induce a service failure.
The vulnerability of the fetchmail email reception and forwarding client involves incorrect handling of value separators. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the Perl-Crypt-DSA digital signature package relates to the number of surfaces that are subject to attacks, with their quantitative measure exceeding the desired maximum. This allows attackers to compromise the confidentiality of the protected information.
The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...
The vulnerability of the Perl-DBI interface for connecting to and working with databases lies in the use of externally controlled input data for selecting classes. This allows a malicious actor to execute arbitrary code.
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the PKI-based infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, relates to bypassing authentication procedures through alternative pathways or channels. This allows attackers to circumvent existing security restrictions.
The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the RBAC permission checking mechanism when processing embedded transactions for Etcd configuration stores allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
The vulnerability of the authorization verification mechanism for gRPC APIs of Etcd storage servers allows attackers to circumvent security restrictions.
The vulnerability of the gRPC authentication mechanism for Etcd configuration stores is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...
The vulnerability of the PHP-phpseclib interpreter, related to manipulating an unknown input, leads to a time mismatch vulnerability. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the PHP-phpseclib interpreter lies in manipulating an unknown input, which leads to a time mismatch vulnerability. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Erlang/OTP software platform, related to the lack of protection for operational data, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Erlang/OTP software platform, related to insufficient validation of incoming requests, allows a hacker to perform a SSRF attack.
The vulnerability of the Erlang/OTP software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...
The vulnerability of the Erlang/OTP software platform, related to incorrect comparison of the number of connections, allows attackers to circumvent existing security restrictions.
The vulnerability of the Erlang/OTP software platform is related to an incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...
The vulnerability of the Perl-DBI interface for connecting to and working with databases, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Machine Learning plugin of the Kibana data visualization service allows a attacker to compromise the integrity of the protected information.
The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...
The vulnerability of Jenkins’ HTTP handler for canceling queue elements allows a hacker to bypass security restrictions.
The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...
The vulnerability of OpenBao’s secret and encryption management system, related to the use of a name with an incorrect reference, allows attackers to trigger a service failure.
The vulnerability of the OpenBao encryption and secret management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the Erlang/OTP software platform, related to the choice of a less secure algorithm during reconciliation processes, allows attackers to execute a type of “man-in-the-middle” attack.
The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...