The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to the transmission of critical information in open text. Exploiting this vulnerability...

The vulnerability of the jv_parse_sized() function in the programming language jq, which allows a hacker to trigger a denial-of-service attack.

The vulnerability of the jvparsesized function in the programming language jq is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Jenkins automation server lies in the lack of protection for service data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the Jenkins automation server lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to lack of access control, which allows an intruder to increase their privileges.

The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to insufficient access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in the authorization process, which allows unauthorized users to gain access to protected information.

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to deficiencies in authorization procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the driver for auxiliary functions in Windows Sockets operating systems allows attackers to increase their privileges.

The vulnerability of the WinSock auxiliary function driver in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Apache Airflow network software, related to the lack of authentication, allows a perpetrator to gain unauthorized access to HITL’s processes.

The vulnerability of the Apache Airflow network software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the HITL processes...

The vulnerability of Google Chrome’s GPU component allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in the Google Chrome browser is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework is related to the occurrence of interpretation conflicts when processing HTTP header names and values. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability of the graphical user interface of Fortinet’s FortiNDR and FortiVoice software solutions for intrusion detection and prevention allows attackers to gain unauthorized access to protected information.

The vulnerability of the graphical user interface of Fortinet FortiNDR and FortiVoice, software solutions for corporate telephony, is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the strlen() function in thejq programming language allows attackers to influence the integrity and accessibility of the protected information.

The vulnerability of the strlen function in thejq programming language is related to errors that occur when a string or array is terminated with a NULL character. Exploiting this vulnerability can allow an attacker to influence the integrity and accessibility of the protected information...

The vulnerability of the XWiki platform for creating collaborative web applications lies in the shortcomings of the security measures used to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the XWiki Platform lies in the shortcomings of the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Bluetooth interface of microprogrammed handheld barcode scanners and Honeywell Handheld Scanners allows a intruder to execute arbitrary code.

The vulnerability of the Bluetooth interface in microprogrammed handheld barcode scanners and Honeywell Handheld Scanners lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the libp2p-rust library server allows a hacker to trigger a service failure.

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the FortiSandbox threat detection and mitigation system, related to the lack of protection for website structures, allows attackers to execute arbitrary commands or code.

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or code...

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation on the path name to the catalog, which allows attackers to read arbitrary files.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability allows an attacker who operates remotely to read arbitrary files...

The vulnerability of the Neo4jVectorFilterExpressionConverter component in the Spring AI development framework allows attackers to execute arbitrary SQL commands.

The vulnerability of the Neo4jVectorFilterExpressionConverter component in the Spring AI development framework relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability in the implementation of the WebUSB protocol of Google Chrome allows a perpetrator to disclose protected information.

The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information through a specially created HTML page...

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API gateway allows a hacker to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API lies in the improper handling of CRLF sequences. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by sending specially crafted...

The vulnerability of the FFmpeg multimedia library, related to integer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FFmpeg multimedia library is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of microprogrammed software in Schneider Electric Easergy relay protection and control devices, related to the use of pre-installed account data, allows unauthorized access by attackers to protected information.

The vulnerability of microprogrammed software in Schneider Electric Easergy relay protection and control devices is related to the use of pre-installed account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the syncCodeBase() function in the Composer dependency management tool allows a hacker to inject arbitrary commands.

The vulnerability of the syncCodeBase function in the Composer dependency management tool is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands through specially created source URLs or URLs...

The vulnerability of the libp2p-rust library server allows a hacker to trigger a service failure.

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending DISCOVER requests...

The vulnerability of the CUPS printing server stems from incorrect restrictions on the path to the directory, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the CUPS printing server is related to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Fortinet FortiManager Cloud software for centralized device management, as well as the FortiAnalyzer Cloud software for security event monitoring and analysis, arises from a buffer overflow in the dynamic memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Fortinet FortiManager Cloud device management software and the FortiAnalyzer Cloud security event monitoring and analysis software is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using special...

The vulnerability of the endpoint of the M-Files Server API for document automation allows a perpetrator to trigger a service failure.

The vulnerability of the endpoint API of the M-Files Server automation platform for document processing is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the virtual storage device in the cloud backup system, created using the NetWorker software, allows a hacker to increase their privileges.

The vulnerability of the virtual storage device for backup stored using the NetWorker software, the Dell CloudBoost Virtual Appliance, involves unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to gain elevated privileges remotely...

The vulnerability of the cupsd server daemon in the CUPS printing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the cupsd server printing service in CUPS is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the get_options function in the CUPS printing server allows a attacker to execute arbitrary code.

The vulnerability of the getoptions function in the CUPS printing server is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the go-git library is related to the lack of integrity checks, which allows attackers to trigger a service failure.

The vulnerability of the go-git library is related to the lack of integrity checks. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Windows Print Spooler daemon in operating systems like Windows allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to print queues involves the disclosure of sensitive information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the sub_401F80() function in the microprogramming software for Wavlink WL-WN579A3 allows attackers to carry out XSS attacks.

The vulnerability of the sub401F80 function in the microprogramming software for Wavlink WL-WN579A3 relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to perform XSS attacks...

The vulnerability of the Microsoft.NET Framework, related to synchronization errors when using shared resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft.NET Framework is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR arises from incorrect restrictions on the path to the catalog. This allows attackers to influence the confidentiality of the protected information.

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the command-line interface of FortiWeb web applications, which allows a hacker to execute arbitrary code.

The vulnerability of the command-line interface of FortiWeb web applications is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to insufficient validation of requests on the server side. Exploiting this vulnerabilit...

The vulnerability of the application software interface of the Fortinet FortiSOAR solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the application software interface of the software platform for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to deficiencies in authentication procedures. Exploiting this vulnerability could...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to insufficient protection of registration data, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the protected information...

The vulnerability of the Mattermost instant messaging application, related to synchronization errors when using a shared resource (“Race Situation”), allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Mattermost instant messaging application is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiManager Cloud, as well as the security event monitoring and analysis tools Fortinet’s FortiAnalyzer and FortiAnalyzer Cloud, stems from the lack of protection for the SQL query structure. This allows attackers to execute arbitrary commands or code.

The vulnerability of the Fortinet FortiManager, FortiManager Cloud, and the Fortinet FortiAnalyzer/FortiAnalyzer Cloud devices for event monitoring and analysis solutions is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to...

The vulnerability of the FortiSandbox threat detection and mitigation system lies in its failure to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using specially crafted HTTP requests...

The vulnerability of Adobe Connect web conference software, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of Adobe Connect web conference software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the ColdFusion interpreter lies in its insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code in the context of the current user, by loading a malicious file...

The vulnerability of the Apache Airflow network software, related to the disclosure of information in the erroneous data area, allows a perpetrator to gain unauthorized access to user sessions.

The vulnerability of the Apache Airflow network software is related to the disclosure of information in the error data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to user sessions...

The vulnerability in the web interface for supporting Web MIDI devices allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for supporting Web MIDI devices in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the UPS management application lies in its uncontrolled search mechanism, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UPS management application is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a malicious user to gain unauthorized access and modify protected information.

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access and modify protected information...