Netty Insufficient Randomness Unauthorized Access

The vulnerability of the framework used for developing network applications, servers, and client protocols based on Netty lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Erlang/OTP Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Erlang/OTP SSRF

The vulnerability of the Erlang/OTP software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...

Kibana Policy Privilege Escalation

The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Jenkins URL Redirection Phishing

The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...

Jenkins HTTP Handler Bypass

The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

Erlang/OTP Uncontrolled Resource Consumption DoS

The vulnerability of the Erlang programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Podman WORKDIR Security Restriction Bypass

The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...

Erlang/OTP Type of Man-in-the-Middle

The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

Perl-DBI Resource Exhaustion DoS

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

BuildKit indefinite resource distribution DoS

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Kibana Cloud Connect Data Compromise

The vulnerability of the Cloud Connect component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

Kibana Authentication Bypass Unauthorized Access

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Visualization Unauthorized Access

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Elastic Defend Unauthorized Access

The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitPython Service Data Access

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Plugin Bypass Security Restrictions

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Erlang/OTP Incorrect Comparison Bypass Security Restrictions

The vulnerability of the Erlang/OTP software platform is related to an incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...

Kibana APM Unauthorized Access

The vulnerability of the Application Performance Monitoring APM component of the Kibana data visualization service is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protecte...