F-Secure Endpoint Protection Products On Mac, F-Secure Linux Security (32-bit), F-Secure Linux Security 64, F-Secure Atlant, F-Secure Internet Gatekeeper & F-Secure Security Cloud Security Vulnerabilities

Why Bot Management Should Be a Crucial Element of Your Marketing Strategy

Marketing teams need a comprehensive bot management solution to address the challenges posed by bot traffic and protect marketing analytics. Bot management is designed to protect marketing efforts from bot-generated invalid traffic by accurately and efficiently classifying traffic and stopping...

CVE-2024-23554 HCL BigFix Platform is susceptible to Cross-Site Request Forgery

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution...

CVE-2024-23583 HCL BigFix Platform is susceptible to insufficiently protected credentials

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows...

teaitarakihi.nz Cross Site Scripting vulnerability OBB-3928492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Updated golang packages fix security vulnerability

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop....

dahaboo.com Cross Site Scripting vulnerability OBB-3928491

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-25742

In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD...

CVE-2024-25743

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD...

CVE-2024-3812

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be...

CVE-2024-3810

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be...

CVE-2024-3811

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be...

alliedrisksecurity.com.au Cross Site Scripting vulnerability OBB-3928490

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, envoy-ratelimit, atlantis, aactl, kyverno, sigstore-scaffolding, bom, opentofu, pulumi-language-yaml, newrelic-infrastructure-agent, haproxy-ingress, nghttp2, thanos, cluster-autoscaler, nri-prometheus, tomcat,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, crossplane-provider-gcp, k8sgpt, envoy-ratelimit, aactl, atlantis, kyverno, kargo, crossplane-provider-aws, grpc-health-probe, newrelic-nri-kube-events, newrelic-infra-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, k8sgpt, sigstore-scaffolding, aactl, kyverno, crossplane-provider-aws, bom, kube-state-metrics, kube-fluentd-operator, opentofu, vault-k8s, kubernetes-csi-external-provisioner, pulumi-language-yaml,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, crossplane-provider-gcp, k8sgpt, envoy-ratelimit, aactl, atlantis, kyverno, kargo, crossplane-provider-aws, grpc-health-probe, newrelic-nri-kube-events, newrelic-infra-operator,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kubevela, prometheus, gatekeeper, kubernetes, prometheus-adapter, cert-manager, calico, ipfs, k3s, keda, caddy, thanos, up,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubevela, prometheus, gatekeeper, kubernetes, prometheus-adapter, cert-manager, calico, ipfs, k3s, keda, caddy, thanos, up,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, k3s, sigstore-scaffolding, aactl, atlantis, kyverno, crossplane-provider-aws, grpc-health-probe, bom, eksctl, istio-cni, kube-fluentd-operator, opentofu, vault-k8s, spire-server, fq, haproxy-ingress,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, k8sgpt, sigstore-scaffolding, atlantis, aactl, kyverno, crossplane-provider-aws, bom, istio-cni, kube-state-metrics, kube-fluentd-operator, opentofu, vault-k8s,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, k8sgpt, sigstore-scaffolding, atlantis, aactl, kyverno, crossplane-provider-aws, bom, istio-cni, kube-state-metrics, kube-fluentd-operator, opentofu, vault-k8s,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, k8sgpt, sigstore-scaffolding, aactl, kyverno, crossplane-provider-aws, bom, kube-state-metrics, kube-fluentd-operator, opentofu, vault-k8s, kubernetes-csi-external-provisioner, pulumi-language-yaml,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, envoy-ratelimit, atlantis, aactl, kyverno, sigstore-scaffolding, bom, opentofu, pulumi-language-yaml, newrelic-infrastructure-agent, haproxy-ingress, nghttp2, thanos, cluster-autoscaler, nri-prometheus, tomcat,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, k3s, sigstore-scaffolding, aactl, atlantis, kyverno, crossplane-provider-aws, grpc-health-probe, bom, eksctl, istio-cni, kube-fluentd-operator, opentofu, vault-k8s, spire-server, fq, haproxy-ingress,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: argo-cd, falco, gatekeeper, kots, dynamic-localpv-provisioner, kubeflow-katib, cert-manager, kubernetes-csi-livenessprobe, helm, prometheus-stackdriver-exporter, weaviate, pulumi-language-java, slsa-verifier, mc, envoy-ratelimit, aactl, pulumi, src, kubevela,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: k8sgpt, envoy-ratelimit, aactl, kyverno, nri-redis, bom, terraform-provider-google, opentofu, newrelic-infrastructure-agent, crossplane-provider-azure, ferretdb, xcaddy, lazygit, stern, task, cri-tools, dynamic-localpv-provisioner, nats-server, pulumi, kubevela,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: k8sgpt, envoy-ratelimit, aactl, kyverno, nri-redis, bom, terraform-provider-google, opentofu, newrelic-infrastructure-agent, crossplane-provider-azure, ferretdb, xcaddy, lazygit, stern, task, cri-tools, dynamic-localpv-provisioner, nats-server, pulumi, kubevela,...

CVE-2024-35793

In the Linux kernel, the following vulnerability has been resolved: debugfs: fix wait/cancellation handling during remove Ben Greear further reports deadlocks during concurrent debugfs remove while files are being accessed, even though the code in question now uses debugfs cancellations. Turns out....

CVE-2024-35794

In the Linux kernel, the following vulnerability has been resolved: dm-raid: really frozen sync_thread during suspend 1) commit f52f5c71f3d4 ("md: fix stopping sync thread") remove MD_RECOVERY_FROZEN from __md_stop_writes() and doesn't realize that dm-raid relies on __md_stop_writes() to frozen...

Friday Squid Blogging: Emotional Support Squid

When asked what makes this an "emotional support squid" and not just another stuffed animal, its creator says: They're emotional support squid because they're large, and cuddly, but also cheerfully bright and derpy. They make great neck pillows (and you can fidget with the arms and tentacles) for.....

imaxleadingedgere.com Cross Site Scripting vulnerability OBB-3928489

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

imaxsales.net Cross Site Scripting vulnerability OBB-3928488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

encoreliving.net Cross Site Scripting vulnerability OBB-3928487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

lynnpappas.com Cross Site Scripting vulnerability OBB-3928486

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-4603

Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that are being....

imaxwebsolutions.com Cross Site Scripting vulnerability OBB-3928485

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

sullivanteam.net Cross Site Scripting vulnerability OBB-3928484

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Metasploit Wrap-Up 05/17/2024

LDAP Authentication Improvements This week, in Metasploit v6.4.9, the team has added multiple improvements for LDAP related attacks. Two improvements relating to authentication is the new support for Signing and Channel Binding. Microsoft has been making changes to harden the communications to...

CVE-2024-5022

The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This vulnerability affects Focus for iOS <...

CVE-2021-22508

A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web...