ROS-20250515-01

A vulnerability in the PHP Twig template language is due to sandbox security checks not being executed under certain circumstances. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the implemented security restrictions. remotely to bypass the implemented securit...

CVE-2025-29842

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...

SUSE CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the NextCloud calendar application, a cloud-based software for creating and using NextCloud storage, relates to improper authentication procedures. This vulnerability allows attackers to bypass authentication checks.

The vulnerability of the Nextcloud calendar application, a cloud-based software for creating and using Nextcloud data storage, is related to improper authentication procedures. Exploiting this vulnerability allows an attacker to bypass authentication checks remotely...

The vulnerability of the RPAC component in operating systems such as MacOS Sequoia, tvOS, visionOS, iOS, and iPadOS allows attackers to circumvent existing security restrictions.

The vulnerability of the RPAC component in macOS Sequoia, tvOS, visionOS, iOS, and iPadOS relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of access control mechanisms. This allows attackers to circumvent existing security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions...

HPESBCR04848 rev.1 - HPE Cray XD670 Server Using SSH, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Unauthenticated Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to BMC v1.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-48795 |...

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on the path to the restricted catalog, allowing attackers to bypass security restrictions.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures, allowing attackers to circumvent security restrictions.

The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

The vulnerability of the SAML SSO library in Ruby SAML and the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to bypass authentication.

The vulnerability of the SAML SSO library in Ruby SAML and the Git-based software platform for collaborative code development on GitLab CE/EE is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass authentication processes...

The vulnerability of the Cisco IOS XR operating system, related to deficiencies in access control, allows attackers to circumvent security restrictions.

The vulnerability of the Cisco IOS XR operating system is related to deficiencies in access control based on access control lists ACLs. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the filtering function for outgoing packets in IPv4 and IPv6 on the Cisco IOS XR operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the IPv4 and IPv6 outgoing packet filtering function in the Cisco IOS XR operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

The vulnerability of the DNN CMS system, related to insufficient checking of unusual or exceptional states, allows attackers to circumvent existing security restrictions.

The vulnerability of the DNN CMS system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the software platform for developing and managing Adobe Commerce B2B stores relates to deficiencies in authentication mechanisms, allowing attackers to circumvent existing security restrictions.

The vulnerability of the software platform for developing and managing Adobe Commerce B2B is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511 Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

The vulnerability of the software platform for developing and managing Adobe Commerce B2B platforms, related to deficiencies in authentication mechanisms, allows attackers to circumvent security restrictions.

The vulnerability of the software platform for developing and managing Adobe Commerce B2B is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

VulnCheck KEV: CVE-2024-53704

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication...

The vulnerability of the Passwords component in the Safari browser for macOS operating systems allows a hacker to bypass security restrictions.

The vulnerability of the Passwords component in the Safari browser on macOS operating systems involves the disclosure of information through registration log files. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Basic HTTP Authentication module in Drupal CMS systems allows attackers to circumvent existing security restrictions.

The vulnerability of the Basic HTTP Authentication module in Drupal CMS systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...