CVE-2025-64186

Evervault is a payment security solution. A vulnerability was identified in the evervault-go SDK’s attestation verification logic in versions of evervault-go prior to 1.3.2 that may allow incomplete documents to pass validation. This may cause the client to trust an enclave operator that does not...

Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries

Summary Vault and Vault Enterprise’s “Vault” AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

buildah: Buildah allows arbitrary directory mount

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

CVE-2024-9675

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

CVE-2024-9675 Buildah: buildah allows arbitrary directory mount

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482: Buffer Copy without Checking Size of Input

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

PT-2023-1387

Name of the Vulnerable Software and Affected Versions COMOS V10.2 All versions COMOS V10.3.3.1 versions prior to V10.3.3.1.45 COMOS V10.3.3.2 versions prior to V10.3.3.2.33 COMOS V10.3.3.3 versions prior to V10.3.3.3.9 COMOS V10.3.3.4 versions prior to V10.3.3.4.6 COMOS V10.4.0.0 versions prior t...

CVE-2023-24068

Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noindex directory. Client mechanisms fail to validate modifications of existing cached files, resulting in an attacker's ability to insert malicious code into...

fontconfig: Possible double free due to insufficiently validated cache files

It was found that cache files were insufficiently validated in fontconfig. A local attacker could create a specially crafted cache file to trigger arbitrary free calls, which in turn could lead to arbitrary code execution...

Ubuntu USN-865-1 (bind9)

The remote host is missing an update to bind9 announced via advisory USN-865-1. OpenVAS Vulnerability Test $Id: ubuntu8651.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8651.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-865-1 bind9 Authors: Thomas...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : bind9 vulnerability (USN-865-1)

Michael Sinatra discovered that Bind did not correctly validate certain records added to its cache. When DNSSEC validation is in use, a remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic. Note tha...