The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a dangerous method or function that allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a dangerous method or function. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality and integrity of the protected...

The vulnerability of the Crypt::NaCl::Sodium library, related to integer overflow, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Crypt::NaCl::Sodium library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability in the script/cgi-bin/wireless.cgi of the Wavlink WL-WN579A3 router software, which allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of Novakon P Series human-machine interface programming software lies in the lack of authentication procedures, allowing attackers to gain access to the upload and download of arbitrary files.

The vulnerability of Novakon P Series human-machine interface programming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to the ability to download and save any arbitrary files...

The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.

The vulnerability of the backup server of the Veeam Backup & Replication solution for cloud, virtual, and physical systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.

The vulnerability of the backup server of the Veeam Backup & Replication solution for cloud, virtual, and physical systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the npm xrpl package on the Node.js software platform, related to malicious code embedded within it, allows attackers to gain unauthorized access to protected information.

The vulnerability of the npm xrpl package on the Node.js software platform is related to malicious code embedded within it. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Employee Management System lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code and trigger service failures.

The vulnerability of software for collecting, storing, and managing files and documents in an Employee Record Management System is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and cause...

The vulnerability of the Comindware Platform for business process management lies in the incorrect limitation of the path name to the restricted access catalog, allowing a hacker to execute arbitrary code.

The vulnerability of the Comindware Platform for business process management is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Honeywell CCTV surveillance camera software lies in the lack of authentication for critical functions, allowing intruders to gain unauthorized access to protected information.

The vulnerability of Honeywell CCTV video surveillance software lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters name, qq, and time. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a...

The vulnerability in the web-based tool for centralized control and configuration of QLogic adapters in the Marvell QConvergeConsole system exists due to an incorrect limitation on the path name to the restricted access catalog. This vulnerability allows attackers to disclose sensitive information that is protected by this system.

The vulnerability of the web-based tool for centralized control and configuration of QLogic adapters in the Marvell QConvergeConsole is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to disclose...

The vulnerability of the Gogs self-managed Git repository creation software lies in its insufficient verification of data authenticity, allowing a violator to re-archive LFS objects.

The vulnerability of the Gogs self-managed Git repository creation software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-archive LFS objects...

The vulnerability of the CUPS component in macOS operating systems allows a hacker to gain access to potentially confidential information.

The vulnerability of the CUPS component in macOS operating systems is related to the disclosure of information. Exploiting this vulnerability may allow an attacker to access potentially confidential information...

The vulnerability of GnuPG’s information encryption and digital signatures software, related to errors in verifying cryptographic signatures, allows attackers to circumvent existing security mechanisms.

The vulnerability of GnuPG’s information encryption and digital signatures lies in errors in verifying the cryptographic signature. Exploiting this vulnerability could allow attackers to circumvent existing security mechanisms...

The vulnerability of the LibSoup HTTP server access library, related to the disclosure of information during data transmission, allows attackers to gain unauthorized access to protected information.

The vulnerability of the LibSoup library for HTTP servers relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel’s IPv6 component allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the Linux operating system’s IPv6 kernel component is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...

The vulnerability of the ASN.1 library pyasn1 in the Python programming language, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the ASN.1 library pyasn1 in the Python programming language is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the libssh library, related to incorrect pathname restrictions for the directory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libssh library is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the proc_readdir_de() function in the Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the procreaddirde function in the Linux operating system is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the `sys_perf_event_open()` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sysperfeventopen function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the connect() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the connect function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the DataHandler component in the Python programming language interpreter allows a attacker to compromise the integrity of the protected information.

The vulnerability of the DataHandler component in the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the os.path.expandvars() function in the Python interpreter allows a hacker to trigger a service failure.

The vulnerability of the os.path.expandvars function in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the Content-Length component in the Python programming language allows a attacker to trigger a service failure.

The vulnerability of the Content-Length component in the Python programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Emby Server, a management and multimedia transmission server, relates to the lack of a password recovery mechanism, allowing attackers to gain full access to the system.

The vulnerability of the Emby Server, a management and multimedia transmission server, is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to gain full access to the system remotely...

The vulnerability of the sprintf() function in the prog.cgi script of the D-Link DIR-882 wireless router allows a hacker to execute arbitrary commands.

The vulnerability of the sprintf function in the prog.cgi script of the D-Link DIR-882 wireless router software is related to the lack of measures taken to neutralize special elements during the processing of the IPAddress parameter. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the memfd_secret() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the memfdsecret function in the Linux operating system’s kernel relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the Web Speech component in Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Web Speech component in Google Chrome and Microsoft Edge relates to reading beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially...

The vulnerability of the graphical user interface (GUI) of the FortiADC application controller allows a hacker to execute arbitrary code.

The vulnerability of the graphical user interface GUI of the FortiADC application delivery controller is related to the lack of measures taken to neutralize html tags. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially created URL address...

The vulnerability of the command-line interface (CLI) of the Outlookproxy plugin on the cloud platform used for FortiDLP data protection allows a hacker to gain access to the current user’s email.

The vulnerability of the command-line interface CLI of the Outlookproxy plugin on the cloud platform used for FortiDLP data protection involves deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to gain access to the current user’s email...

The vulnerability of the graphical user interface (GUI) of the FortiOS operating system’s Node.js daemon, the FortiProxy proxy server for protecting against internet attacks, the FortiPAM identity management system, the FortiSRA software for secure remote access, and the FortiSwitchManager local management platform, allows a malicious actor to execute arbitrary code or commands.

The vulnerability of the graphical user interface GUI of the FortiOS operating system’s Node.js daemon, the FortiProxy proxy server for protecting against internet attacks, the FortiPAM identity management system, the FortiSRA software for secure remote access, and the FortiSwitchManager local...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data when processing the s parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the name parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the /urlgroup.asp endpoint...

The vulnerability of the LookalikeChecks component in Google Chrome and Microsoft Edge allows a hacker to perform spoofing attacks.

The vulnerability of the LookalikeChecks component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to carry out spoofing attacks using a specially crafted HTML page...

The vulnerability of the maybe_fork_scalars() function in Linux operating systems allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maybeforkscalars function in the Linux operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the FortiADC application delivery controller, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FortiADC application delivery controller is related to insufficient protection of operational data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP and HTTPS...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the iface parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafte...

The vulnerability of the allowlist mode of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability of the allowlist mode of the AI agent OpenClaw previously – ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the setFirewallType function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setFirewallType function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the firewallType parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the setNtpCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setNtpCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the tz parameter. Exploiting this vulnerability allows...

The vulnerability of the setDdnsCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the del_timer_sync() function in the Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the deltimersync function in the Linux operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to execute arbitrary code.

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the OCSP server component in Apache Tomcat allows a hacker to execute arbitrary code.

The vulnerability of the OCSP server component in Apache Tomcat is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to execute arbitrary code.

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the itimer_delete() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the itimerdelete function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) involves improper authorization, allowing an intruder to gain read and edit access to data.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain read and edit access to data...

The vulnerability of the network traffic analysis, network detection, and response capabilities of the Cortex XDR Agent for Windows operating systems arises from external system management or configuration settings, allowing attackers to disable the Cortex XDR Agent.

The vulnerability of the network traffic analysis, network detection, and response capabilities of the Cortex XDR Agent for Windows operating systems is related to external system management or configuration settings. Exploiting this vulnerability could allow attackers to disable the Cortex XDR...

The vulnerability of the R7WebsSecurityHandler() function in the Tenda i3 wireless access point software allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of function R7WebsSecurityHandler in the Tenda i3 wireless access point software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized acce...