Lucene search

K

Emc Vmax Virtual Appliance (vapp) Emc Unisphere For Vmax Virtual Appliance Versions Prior To 8.4.0.15, Emc Solutions Enabler Virtual Appliance Versions Prior To 8.4.0.15, Emc Vasa Virtual Appliance Versions Prior To 8.4.0.512, Emc Vmax Embedded Management (emanagement) Versions Prior To And Including 1.4 (enginuity Release 5977.1125.1125 And Earlier) Security Vulnerabilities

ptsecurity
ptsecurity

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

2.1AI Score

EPSS

2024-07-07 12:00 AM
1043
ptsecurity
ptsecurity

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

2.1AI Score

EPSS

2024-07-07 12:00 AM
938
nodejsblog
nodejsblog

Tuesday, July 2, 2024 Security Releases

Summary The Node.js project will release new versions of the 22.x, 20.x, 18.x releases lines on or shortly after, Tuesday, July 2, 2024 in order to address: 1 high severity issues. 2 medium severity issues. 3 low severity issues. Node.js fetch will be upgraded to undici v6.19.2 on Node.js 18.x...

7AI Score

2024-07-02 12:00 AM
180
openbugbounty
openbugbounty

aeropostale.talentify.io Cross Site Scripting vulnerability OBB-3939834

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.1AI Score

2024-07-01 11:21 AM
2
openbugbounty
openbugbounty

4-wheel-parts.talentify.io Cross Site Scripting vulnerability OBB-3939832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.1AI Score

2024-07-01 11:20 AM
2
openbugbounty
openbugbounty

albemarle.talentify.io Cross Site Scripting vulnerability OBB-3939833

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.1AI Score

2024-07-01 11:20 AM
2
openbugbounty
openbugbounty

stuco-sicherheitsschuhe.de Cross Site Scripting vulnerability OBB-3939823

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.2AI Score

2024-07-01 11:17 AM
2
openbugbounty
openbugbounty

juz-einstein.de Cross Site Scripting vulnerability OBB-3939821

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.1AI Score

2024-07-01 11:15 AM
2
openbugbounty
openbugbounty

stuco.hu Cross Site Scripting vulnerability OBB-3939820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.2AI Score

2024-07-01 11:12 AM
2
openbugbounty
openbugbounty

stuco.com Cross Site Scripting vulnerability OBB-3939819

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.2AI Score

2024-07-01 11:09 AM
2
schneier
schneier

Model Extraction from Neural Networks

A new paper, "Polynomial Time Cryptanalytic Extraction of Neural Network Models," by Adi Shamir and others, uses ideas from differential cryptanalysis to extract the weights inside a neural network using specific queries and their results. This is much more theoretical than practical, but it's a...

7.2AI Score

2024-07-01 11:05 AM
1
openbugbounty
openbugbounty

stuco.ch Cross Site Scripting vulnerability OBB-3939816

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

6.2AI Score

2024-07-01 10:57 AM
2
thn
thn

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human identities by a factor of 45-to-1 and represent the majority of secrets we need to worry about. According to CyberArk's recent research,...

6.7AI Score

2024-07-01 10:51 AM
3
thn
thn

New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

OpenSSH maintainers have released security updates to contain a critical security flaw that could result in unauthenticated remote code execution with root privileges in glibc-based Linux systems. The vulnerability has been assigned the CVE identifier CVE-2024-6387. It resides in the OpenSSH...

8.1CVSS

8.8AI Score

EPSS

2024-07-01 10:50 AM
2
nvd
nvd

CVE-2024-39430

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.1CVSS

EPSS

2024-07-01 09:15 AM
1
cve
cve

CVE-2024-39430

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.1CVSS

6.8AI Score

EPSS

2024-07-01 09:15 AM
nvd
nvd

CVE-2024-39429

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.1CVSS

EPSS

2024-07-01 09:15 AM
1
nvd
nvd

CVE-2024-39428

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

6.8CVSS

EPSS

2024-07-01 09:15 AM
1
nvd
nvd

CVE-2024-0153

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If....

EPSS

2024-07-01 09:15 AM
1
cve
cve

CVE-2024-39429

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.1CVSS

6.8AI Score

EPSS

2024-07-01 09:15 AM
1
cve
cve

CVE-2024-0153

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If....

6.8AI Score

EPSS

2024-07-01 09:15 AM
1
cve
cve

CVE-2024-39427

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

5.1CVSS

6.8AI Score

EPSS

2024-07-01 09:15 AM
1
nvd
nvd

CVE-2024-39427

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

5.1CVSS

EPSS

2024-07-01 09:15 AM
1
cve
cve

CVE-2024-39428

In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

6.8CVSS

6.8AI Score

EPSS

2024-07-01 09:15 AM
2
wolfi
wolfi

CVE-2023-31130 vulnerabilities

Vulnerabilities for packages:...

6.4CVSS

7.7AI Score

0.0004EPSS

2024-07-01 09:08 AM
333
wolfi
wolfi

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
176
wolfi
wolfi

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: python,...

7.5AI Score

2024-07-01 09:08 AM
105
wolfi
wolfi

GHSA-5V6F-5GPQ-2628 vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
255
wolfi
wolfi

GHSA-7QHM-5MXQ-X7VP vulnerabilities

Vulnerabilities for packages: go, go-fips,...

7.5AI Score

2024-07-01 09:08 AM
150
wolfi
wolfi

GHSA-V4M2-X4RP-HV22 vulnerabilities

Vulnerabilities for packages: go, go-fips,...

7.5AI Score

2024-07-01 09:08 AM
143
wolfi
wolfi

CVE-2024-5692 vulnerabilities

Vulnerabilities for packages:...

7.1AI Score

0.0004EPSS

2024-07-01 09:08 AM
11
wolfi
wolfi

CVE-2024-5694 vulnerabilities

Vulnerabilities for packages:...

7.1AI Score

0.0004EPSS

2024-07-01 09:08 AM
8
wolfi
wolfi

GHSA-4C8G-9W4H-H6XM vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
8
wolfi
wolfi

GHSA-798R-FXXX-HVXJ vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
82
wolfi
wolfi

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: melange, argo-cd, argo-workflows, pulumi-kubernetes-operator,...

7.5CVSS

7.7AI Score

0.0005EPSS

2024-07-01 09:08 AM
325
wolfi
wolfi

GHSA-2G67-JW5M-244M vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
144
wolfi
wolfi

CVE-2022-4450 vulnerabilities

Vulnerabilities for packages:...

7.5CVSS

8.1AI Score

0.001EPSS

2024-07-01 09:08 AM
198
wolfi
wolfi

GHSA-V5W6-WCM8-JM4Q vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
137
wolfi
wolfi

CVE-2023-7235 vulnerabilities

Vulnerabilities for packages:...

7.3AI Score

0.0004EPSS

2024-07-01 09:08 AM
48
wolfi
wolfi

CVE-2019-13638 vulnerabilities

Vulnerabilities for packages:...

7.8CVSS

7.7AI Score

0.008EPSS

2024-07-01 09:08 AM
246
wolfi
wolfi

CVE-2024-20994 vulnerabilities

Vulnerabilities for packages:...

5.3CVSS

6.1AI Score

0.0004EPSS

2024-07-01 09:08 AM
8
wolfi
wolfi

CVE-2024-21047 vulnerabilities

Vulnerabilities for packages:...

4.9CVSS

6AI Score

0.0004EPSS

2024-07-01 09:08 AM
14
wolfi
wolfi

CVE-2024-21062 vulnerabilities

Vulnerabilities for packages:...

4.9CVSS

6AI Score

0.0004EPSS

2024-07-01 09:08 AM
13
wolfi
wolfi

GHSA-5XQ9-RCPJ-P52V vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
9
wolfi
wolfi

GHSA-88H4-JW57-85V9 vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
12
wolfi
wolfi

GHSA-R27R-5FWH-VXQW vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
11
wolfi
wolfi

CVE-2024-5585 vulnerabilities

Vulnerabilities for packages:...

8.8CVSS

9.5AI Score

0.001EPSS

2024-07-01 09:08 AM
16
wolfi
wolfi

CVE-2023-5868 vulnerabilities

Vulnerabilities for packages:...

4.3CVSS

7.5AI Score

0.002EPSS

2024-07-01 09:08 AM
157
wolfi
wolfi

GHSA-4828-5P9M-G4FF vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-07-01 09:08 AM
62
wolfi
wolfi

CVE-2024-4317 vulnerabilities

Vulnerabilities for packages:...

3.1CVSS

7.5AI Score

0.0004EPSS

2024-07-01 09:08 AM
18
Total number of security vulnerabilities3458051