OpenBao secret encryption management system Name Reference DoS

The vulnerability of the OpenBao encryption and secret management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to cause service failures...

BuildKit DoS

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

FreeRDP Zero Division DoS

The vulnerability of the RDP client FreeRDP is related to division by zero errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Kibana Machine Learning Data Compromise

The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

Kibana Data Visualization Service Access Control Unauthorized Access

The vulnerability of the access control mechanism of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FFmpeg vf_hqdn3d Heap Buffer Overflow DoS

The vulnerability of the video processing filter vfhqdn3d in the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

FFmpeg QR-code Processing Heap Buffer Overflow DoS

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...

Synthetics Plugin Bypass Security Restrictions

The vulnerability of the Synthetics plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions while operating remotely...

Fleet Server Host Service Identification Processing Bypass

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

MongoDB Collection Schema Unauthorized Access

The vulnerability of the journal message formation mechanism, when checking the schema of the MongoDB database management system’s collection, is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

dogtag-pki Authentication Bypass

The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...

Erlang/OTP Path Traversal Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Etcd RBAC Permission Bypass

The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

MinIO Privilege Escalation

The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

MinIO Privilege Escalation

The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

Netty Insufficient Randomness Unauthorized Access

The vulnerability of the framework used for developing network applications, servers, and client protocols based on Netty lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Erlang/OTP Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...