Apache bRPC authorization issue vulnerability

Versions of Apache bRPC prior to 1.18.0 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks; certain protobuf-based protocol distribution paths fail to enforce restrictions defined by the securitymode flag. As a result, remote attackers can...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992459 advisory. In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runti...

Mailpit -- Performance information disclosure

Ralph Slooten Mailpit developer reports: An HTTP endpoint was found which exposed expvar runtime information memory usage, goroutine counts, GC behavior, uptime and potential runtime flags due to the Prometheus client library dependency...

EUVD-2022-5584

Malicious code in bioql PyPI...

EUVD-2024-3384

Malicious code in bioql PyPI...

PT-2023-26325 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.6.4 Description: The issue allows unauthorized users to obtain sensitive information about the system's runtime environment and features they have no permissions to access. Recommendations: For versions...

CVE-2023-35316

Remote Procedure Call Runtime Information Disclosure Vulnerability...

Information disclosure

Remote Procedure Call Runtime Information Disclosure Vulnerability...

CVE-2020-27483

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided...

CVE-2017-2600

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...

CVE-2017-2600

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...

CVE-2017-2600

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...

CVE-2017-2600

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...