16578 matches found
CVE-2023-49110
The Kiuwan SAST web application (on-premises, cloud, or SaaS) is vulnerable to an XML external entity (XXE) injection attack. The flaw exists because the server-side processing of XML files within a ZIP archive uploaded by the Kiuwan Local Analyzer resolves external entities. An attacker with pri...
CVE-2022-48732
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix off by one in BIOS boundary checking Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's with GeForce 2 MX GPUs...
UBUNTU-CVE-2022-48732
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix off by one in BIOS boundary checking Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's with GeForce 2 MX GPUs...
CVE-2022-48732
The CVE-2022-48732 issue affects the Linux kernel’s DRM Nouveau component, caused by an off-by-one error in BIOS boundary parsing of embedded init scripts. This bounds-checking flaw can reject access to the last byte, causing driver initialization to fail on Apple eMac systems with GeForce 2 MX G...
PT-2024-27486
Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.06 Description There is a cross-site scripting issue in the Secure Access administrative console. Attackers with valid tunnel credentials can pass a limited-length script to the administrative consol...
CVE-2024-37343: Improper Neutralization of Input During Web Page Generation
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.06. Attackers with valid tunnel credentials can pass a limited-length script to the administrative console which is then temporarily stored where an administrato...
CVE-2021-47575
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2021-47575
The Red Hat security entry for CVE-2021-47575 describes a bug in the Xen console driver (hvc_xen) that can cause event channel storms. The root cause is sending events even when no bytes are read from the backend, leading to excessive interrupts. Additionally, during domU initial console setup, t...
CVE-2024-5967 Keycloak: leak of configured ldap bind credentials through the keycloak admin console
A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access permission manage-realm to change the LDAP host URL "Connection URL"...
CVE-2024-5967 Keycloak: leak of configured ldap bind credentials through the keycloak admin console
A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access permission manage-realm to change the LDAP host URL "Connection URL"...
CVE-2024-5967 Keycloak: leak of configured ldap bind credentials through the keycloak admin console
A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access permission manage-realm to change the LDAP host URL "Connection URL"...
OPENSUSE-SU-2024:11356-1 ruby2.7-rubygem-web-console-4.1.0-1.5 on GA media
These are all security issues fixed in the ruby2.7-rubygem-web-console-4.1.0-1.5 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13172-1 ruby3.2-rubygem-web-console-4.2.0-1.9 on GA media
These are all security issues fixed in the ruby3.2-rubygem-web-console-4.2.0-1.9 package on the GA media of openSUSE Tumbleweed...
CVE-2024-38281
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...
CVE-2024-38281
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...
CVE-2024-38281 Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...
CVE-2024-4176
An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to th...
Motorola Solutions Vigilant Fixed LPR Coms Box Trust Management Issues Vulnerability
Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. The Motorola Solutions Vigilant Fixed LPR Coms Box suffers from a trust management issue vulnerability that stems from an attacker being able to access the maintenance console using...
Red Hat Keycloak Security Vulnerability
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that originates from the ability to disclose configured LDAP binding credentials via the...