The vulnerability of the FortiSandbox threat detection and mitigation system, related to the use of files and directories accessible from external parties, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FortiSandbox threat detection and mitigation system lies in the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the graphical user interface of Fortinet’s FortiNDR and FortiVoice software solutions for intrusion detection and prevention allows attackers to gain unauthorized access to protected information.

The vulnerability of the graphical user interface of Fortinet FortiNDR and FortiVoice, software solutions for corporate telephony, is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR allows a hacker to obtain the user’s password.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to the transmission of critical information in open text. Exploiting this vulnerability...

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to the transmission of critical information in open text. Exploiting this vulnerability...

The vulnerability of the XWiki platform for creating collaborative web applications lies in the shortcomings of the security measures used to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the XWiki Platform lies in the shortcomings of the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Bluetooth interface of microprogrammed handheld barcode scanners and Honeywell Handheld Scanners allows a intruder to execute arbitrary code.

The vulnerability of the Bluetooth interface in microprogrammed handheld barcode scanners and Honeywell Handheld Scanners lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Neo4jVectorFilterExpressionConverter component in the Spring AI development framework allows attackers to execute arbitrary SQL commands.

The vulnerability of the Neo4jVectorFilterExpressionConverter component in the Spring AI development framework relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API gateway allows a hacker to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API lies in the improper handling of CRLF sequences. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by sending specially crafted...

The vulnerability of the Apache Airflow network software, related to the lack of authentication, allows a perpetrator to gain unauthorized access to HITL’s processes.

The vulnerability of the Apache Airflow network software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the HITL processes...

The vulnerability of the endpoint of the M-Files Server API for document automation allows a perpetrator to trigger a service failure.

The vulnerability of the endpoint API of the M-Files Server automation platform for document processing is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the cupsd server daemon in the CUPS printing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the cupsd server in the CUPS printing system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion interpreter lies in its insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code in the context of the current user, by loading a malicious file...

The vulnerability of the Apache Airflow network software, related to the disclosure of information in the erroneous data area, allows a perpetrator to gain unauthorized access to user sessions.

The vulnerability of the Apache Airflow network software is related to the disclosure of information in the error data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to user sessions...

The vulnerability of the Microsoft.NET Framework, related to synchronization errors when using shared resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft.NET Framework is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Fortinet FortiManager Cloud software for centralized device management, as well as the FortiAnalyzer Cloud software for security event monitoring and analysis, arises from a buffer overflow in the dynamic memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Fortinet FortiManager Cloud device management software and the FortiAnalyzer Cloud security event monitoring and analysis software is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using special...

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR arises from incorrect restrictions on the path to the catalog. This allows attackers to influence the confidentiality of the protected information.

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the command-line interface of FortiWeb web applications, which allows a hacker to execute arbitrary code.

The vulnerability of the command-line interface of FortiWeb web applications is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to insufficient validation of requests on the server side. Exploiting this vulnerabilit...

The vulnerability of the get_options function in the CUPS printing server allows a attacker to execute arbitrary code.

The vulnerability of the getoptions function in the CUPS printing server is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiManager Cloud, as well as the security event monitoring and analysis tools Fortinet’s FortiAnalyzer and FortiAnalyzer Cloud, stems from the lack of protection for the SQL query structure. This allows attackers to execute arbitrary commands or code.

The vulnerability of the Fortinet FortiManager, FortiManager Cloud, and the Fortinet FortiAnalyzer/FortiAnalyzer Cloud devices for event monitoring and analysis solutions is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to...

The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiManager Cloud, as well as the security event monitoring and analysis tools Fortinet’s FortiAnalyzer and FortiAnalyzer Cloud, stems from incorrect restrictions on the path to the restricted directory. This allows attackers to delete any files they desire.

The vulnerability of the Fortinet FortiManager, FortiManager Cloud, and the Fortinet FortiAnalyzer/FortiAnalyzer Cloud devices for monitoring and analyzing security events lies in incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an...

The vulnerability of the go-git library is related to the lack of integrity checks, which allows attackers to trigger a service failure.

The vulnerability of the go-git library is related to the lack of integrity checks. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Adobe Connect web conference software, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of Adobe Connect web conference software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the Apache Airflow network software lies in the improper assignment of permissions for critical resources, allowing attackers to bypass existing security mechanisms.

The vulnerability of the Apache Airflow network software relates to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

The vulnerability in the web interface for supporting Web MIDI devices allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for supporting Web MIDI devices in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the sub_401F80() function in the microprogramming software for Wavlink WL-WN579A3 allows attackers to carry out XSS attacks.

The vulnerability of the sub401F80 function in the microprogramming software for Wavlink WL-WN579A3 relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to perform XSS attacks...

The vulnerability of the UPS management application lies in its uncontrolled search mechanism, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UPS management application is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a malicious user to gain unauthorized access and modify protected information.

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access and modify protected information...

The vulnerability of the library for working with the Protocol Buffers protocol protobufjs, related to incorrect code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The software’s vulnerability regarding the coordination of security systems’ operations and the real-time management of incident responses in Fortinet FortiSOAR, related to the storage of passwords in a recoverable format, allows attackers to influence the confidentiality of protected information.

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR lies in the storage of passwords in a recoverable format. Exploiting this vulnerability can allow an attacker, operating remotely, to...

The vulnerability of the application software interface of the Fortinet FortiSOAR solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the application software interface of the software platform for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to deficiencies in authentication procedures. Exploiting this vulnerability could...

The vulnerability of the Mattermost instant messaging application, related to synchronization errors when using a shared resource (“Race Situation”), allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Mattermost instant messaging application is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to insufficient protection of registration data, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the protected information...

The vulnerability of the virtual storage device in the cloud backup system, created using the NetWorker software, allows a hacker to increase their privileges.

The vulnerability of the virtual storage device for backup stored using the NetWorker software, the Dell CloudBoost Virtual Appliance, involves unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to gain elevated privileges remotely...

The vulnerability of the FortiSandbox threat detection and mitigation system lies in its failure to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using specially crafted HTTP requests...

The vulnerability of the FortiSandbox threat detection and mitigation system lies in its ability to bypass the restricted access catalog, allowing attackers to increase their privileges.

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the possibility of bypassing the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows Print Spooler daemon in operating systems like Windows allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to print queues involves the disclosure of sensitive information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) server lies in the use of a strictly encrypted cryptographic key, which allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Jenkins automation server relates to the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Jenkins automation server relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Network Packetbeat analyzer lies in the fact that data is written beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Packetbeat network packet analyzer lies in the writing beyond buffer boundaries into memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the ColdFusion interpreter, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of PowerShell command interpreters on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of PowerShell command interpreters on Windows operating systems is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the driver for auxiliary functions in Windows Sockets operating systems allows attackers to increase their privileges.

The vulnerability of the WinSock auxiliary function driver in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in the Google Chrome browser is related to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s CSS component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the ANGLE library in Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ANGLE library in Google Chrome browsers is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ip6addrlbl_putmsg() function in the net/ipv6/addrlabel.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to access protected information or cause a service failure.

The vulnerability of the ip6addrlblputmsg function in the net/ipv6/addrlabel.c module of the Linux operating system’s IPv6 kernel implementation is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause...