Perl-DBI Code Execution

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

BuildKit Command Injection

The vulnerability of the BuildKit container-building software lies in the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Erlang/OTP Path Traversal Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PHP-phpseclib Time Mismatch Unauthorized Access

The vulnerability of the PHP-phpseclib interpreter lies in manipulating an unknown input, which leads to a time mismatch vulnerability. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

MinIO Privilege Escalation

The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

golang-x-image Resource Exhaustion DoS

The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

Fleet Plugin Bypass Security Restrictions

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Erlang/OTP Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Jenkins HTTP Handler Bypass

The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

Erlang/OTP Uncontrolled Resource Consumption DoS

The vulnerability of the Erlang programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Erlang/OTP Type of Man-in-the-Middle

The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

Gitea Authentication Bypass Info Disclosure

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

libssh Resource Exhaustion DoS

The vulnerability of the libssh library is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Kibana Authentication Bypass Unauthorized Access

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Machine Learning Data Compromise

The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

Elastic Defend Unauthorized Access

The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vim Code Execution

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Kibana Data Visualization Token Timestamp Disclosure

The vulnerability of the Kibana data visualization service is related to the improper processing of token timestamps. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

Kibana Connectors SSRF

The vulnerability of the Kibana Connector request execution mechanism of the Kibana visualization service is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

etcd gRPC Authorization Bypass

The vulnerability in the gRPC authorization mechanism of the Etcd configuration store relates to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to bypass security restrictions...