The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication using a user-managed key, allows unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to exploiting authentication bypass using a user-managed key. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a hacker to increase their privileges.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the MESCIUS ActiveReports.NET reporting tool, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the MESCIUS ActiveReports.NET reporting tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the NOOP Command Handler component of the Freefloat FTP Server allows a hacker to execute arbitrary commands.

The vulnerability of the NOOP Command Handler component in the Freefloat FTP Server lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the NetAuth component in macOS operating systems allows a perpetrator to bypass security measures and compromise the integrity and accessibility of protected information.

The vulnerability of the NetAuth component in macOS operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain control over the system and compromise the integrity and accessibility of the protected information...

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR operating systems allows a attacker to cause service interruptions.

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR operating systems is related to incorrect validation of certain types of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the command-line interface (CLI) of the FortiClient for MAC protection tool allows a attacker to carry out the LaunchDaemon hijacking attack and execute arbitrary code or commands.

The vulnerability of the command-line interface CLI of the FortiClient for MAC security tool is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to carry out a LaunchDaemon hijacking attack and execute arbitrary code or...

The vulnerability of the cloud platform for data protection, FortiDLP, stems from insufficient protection of registration data, allowing attackers to disclose the protected information.

The vulnerability of the FortiDLP data protection cloud platform lies in the insufficient protection of registration data. Exploiting this vulnerability could allow attackers to disclose protected information by reusing the registration code...

The vulnerability of the tcm_loop_tpg_address_show() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcmlooptpgaddressshow function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) arises from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Comindware Platform for business process management lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to read arbitrary files.

The vulnerability of the Comindware Platform for business process management is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary cod...

The vulnerability of Microprogrammed Software Routers from Sapido, related to the failure to take measures to neutralize special elements used in the operating system’s command set, allows a hacker to execute arbitrary code.

The vulnerability of Microprogrammed Software Routers from Sapido relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the otool component in the Xcode integrated development environment for macOS operating systems allows a hacker to cause a system crash.

The vulnerability of the otool component in the Xcode integrated development environment for MacOS operating systems relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause the system to terminate abnormally...

The vulnerability of the Asus Headset Driver and Asus Mouse Driver, related to the loading of code without checking its integrity, allows a hacker to elevate their privileges to the SYSTEM level.

The vulnerability of the Asus Headset Driver and Asus Mouse Driver for controlling functions and settings of headsets and mice involves loading code without checking its integrity. Exploiting this vulnerability can allow an intruder to elevate their privileges to a SYSTEM level...

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE involve redirecting URLs to unreliable websites, allowing attackers to perform cross-site scripting (XSS) attacks.

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the redirection of URLs to unreliable websites. Exploiting these vulnerabilities allows a malicious acto...

The vulnerability of the graphical user interface (GUI) of the FortiSIEM security management system allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the graphical user interface GUI of the FortiSIEM security management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks by sending specially...

The vulnerability of the graphical user interface (GUI) of the FortiVoice corporate telephony software allows a hacker to delete files.

The vulnerability of the graphical user interface GUI of the FortiVoice corporate telephony software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete files by sending specially crafted HTTP or HTT...

The vulnerability of the wordexp() function in the glibc system library, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the wordexp function in the glibc system library is related to the use of uninitialized resources. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the formSetRoute() function in D-Link DIR-513 router microprogramming software allows a hacker to cause memory corruption.

The vulnerability of the formSetRoute function in D-Link DIR-513 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...

The vulnerability in the mime.php script of the web client for open-source SquirrelMail allows attackers to execute XSS attacks.

The vulnerability in the mime.php script of the email web client for the open-source SquirrelMail framework exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of D-Link DI-8003 and DI-8003G router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 and DI-8003G router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the wanping parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a...

The vulnerability of the MediaStream component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the MediaStream component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through the use of a specially crafted HTML page...

The vulnerability of the Agents component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Agents component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the WindowDialog component in Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WindowDialog component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the rendering process and affect the confidentiality, integrity, and accessibility of protect...

The vulnerability of the TrueConf Server software, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the TrueConf Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) relates to synchronization errors when using a shared resource, allowing a hacker to execute arbitrary commands.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a hacker to execute arbitrary commands...

The vulnerability of the web_search() function in the AI agent OpenClaw (previously – ClawdBot or MoltBot) allows a violator to perform an SSRF attack.

The vulnerability of the websearch function in the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale involve the exposure of information through registration files, allowing attackers to gain unauthorized access to protected data and enhance their privileges.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the exposure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information and enhance their privileges...

The vulnerability of the do_unregister_framebuffer() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the email module in the Python programming language allows attackers to compromise the integrity of the protected information.

The vulnerability of the email module in the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the NFSv4.0 component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the NFSv4.0 component in the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the functions ah6_output_done() and ah6_output() in the Linux kernel’s net/ipv6/ah6.c file allows a attacker to cause a service failure.

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the setRemoteCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setRemoteCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router software lies in the lack of measures to neutralize special elements used in the operating system’s command for processing the enable parameter. Exploiting this vulnerability allows a remote attacke...

The vulnerability of open-source development environments for UEFI EDK2 lies in the disclosure of information, which allows attackers to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of open-source development environments for UEFI EDK2 is related to the exposure of information. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...

The vulnerability of the Microsoft Teams integration package with the security platforms Cortex XSOAR and Cortex XSIAM arises from improper verification of the cryptographic signature. This allows an attacker to gain access to read and modify data.

The vulnerability of the Microsoft Teams integration package with the security platforms Cortex XSOAR and Cortex XSIAM is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker operating remotely to gain read and modify access to data...

The vulnerability of the http.cookies.Morsel component in the Python programming language allows a attacker to compromise the accessibility of the protected information.

The vulnerability of the http.cookies.Morsel component in the Python programming language is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the accessibility of protected information...

The vulnerability of the libcurl library in software tools for interacting with servers via cURL allows a hacker to induce a service failure.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to improper verification of certificate authenticity. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the tcp_rcv_state_process() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcprcvstateprocess function in the Linux operating system’s kernel is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the libssh library, related to the zero pointer swapping, allows a hacker to trigger a service denial.

The vulnerability of the libssh library is related to the handling of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the base64 module in the Python programming language allows a hacker to execute arbitrary code.

The vulnerability of the base64 module in the Python programming language is related to incorrect data type conversion. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Cockpit server management system, related to the failure to take measures to neutralize specific elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cockpit server management system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...

The vulnerability of the FreeScout support service management system lies in the failure to remove script-related HTML tags from web pages, allowing attackers to carry out XSS attacks.

The vulnerability of the FreeScout support service management system lies in the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from insufficient validation of requests on the server side. This allows attackers to execute SSRF attacks.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the nlattr_to_sctp() function in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nlattrtosctp function in Linux operating systems is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the parse_header() function in the GLib library allows a hacker to cause a service failure.

The vulnerability of the parseheader function in the GLib library is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the Transport Layer Security library GnuTLS, related to its algorithmic complexity, allows attackers to induce a service failure.

The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the portal_login_username() function in the OpenEMR medical documentation system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the portalloginusername function in the OpenEMR medical documentation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...