4370 matches found
Ubuntu: Security Advisory (USN-6727-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6727-1: NSS vulnerabilities
It was discovered that NSS incorrectly handled padding when checking PKCS1 certificates. A remote attacker could possibly use this issue to perform Bleichenbacher-like attacks and recover private data. This issue only affected Ubuntu 20.04 LTS. CVE-2023-4421 It was discovered that NSS had a timin...
ca-sansho.co.jp Cross Site Scripting vulnerability OBB-3912408
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
search.kinshipcareca.org Cross Site Scripting vulnerability OBB-3899175
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
yg1.ca Cross Site Scripting vulnerability OBB-3889684
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
yg1.ca Cross Site Scripting vulnerability OBB-3883347
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
figure8.ca Cross Site Scripting vulnerability OBB-3873388
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GO-2024-2617 Authentication bypass in github.com/hashicorp/vault
The TLS certificate authentication method incorrectly validates client certificates when configured with a non-CA certificate as a trusted certificate. When configured this way, attackers may be able to craft a certificate that can be used to bypass authentication...
CVE-2024-25331: Stack-based Buffer Overflow
DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based Buffer Overflow...
PT-2024-2145 · D Link · D-Link Dir-822 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-822 versions 2.02KRB09 through 2.03WWb01 D-Link DIR-822-CA versions 2.02KRB09 through 2.03WWb01 Description: The issue is related to a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based...
HP Printer Information Disclosure Vulnerability (HPSBPI03918)
Multiple HP printer are prone to an information disclosure vulnerability when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: terragrunt, kargo, temporal-ui-server, minio, guac, cloudflared, dex, zarf, timestamp-authority, step-ca, argo-workflows, fulcio, ko, zot, goreleaser, grpc-health-probe, bank-vaults, gomplate, kube-rbac-proxy, vexctl, aactl, oauth2-proxy, weaviate, nerdctl, skopeo,...
[SECURITY] Fedora 40 Update: cryptlib-3.4.7-5.fc40
Cryptlib is a powerful security toolkit that allows even inexperienced crypto programmers to easily add encryption and authentication services to their software. The high-level interface provides anyone with the ability to add strong security capabilities to an application in as little as half an...
MongoDB Server 安全漏洞
MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server suffers from a trust management issue vulnerability that stems...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: temporal-server-fips, trillian-fips, caddy, amass, src, ferretdb, temporal-server, kine, wavefront-collector-for-kubernetes, caddy-fips, trillian, step, kube-bench-fips, argo-workflows-fips, k3s, spicedb, kube-bench, kots, argo-workflows, falcosidekick-fips, step-ca...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: step, ferretdb, kube-bench, src, trillian, kine, spicedb, step-ca, temporal-server, caddy, argo-workflows, k3s, amass, kots...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: step, trillian, step-ca, caddy, argo-workflows, kots...
BIT-NODE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT
The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: atlantis-fips, crossplane-provider-aws-iam, kor, crossplane-provider-aws-dynamodb, grafana-operator-fips, aws-efs-csi-driver-fips, cadvisor, node-problem-detector, flux-notification-controller, rekor, crossplane-provider-aws-cloudwatchlogs, mc,...