9940 matches found
CVE-2024-38826
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release version to 1.194.0 or...
CVE-2024-38826
CVE-2024-38826 concerns Cloud Foundry Cloud Controller. Authenticated users can upload specially crafted files to leak server resources, enabling a potential denial-of-service against the Cloud Controller. Affected components include Cloud Foundry Capi Release versions before 1.194.0 and cf-deplo...
CVE-2024-38826 CVE-2024-38826 Cloud Controller Denial of Service Attack
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release version to 1.194.0 or...
CVE-2024-38826: Uncontrolled Resource Consumption
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release version to 1.194.0 or...
PT-2024-28234 · Cloud Foundry · Cf-Deployment +1
Name of the Vulnerable Software and Affected Versions: Cloud Foundry Capi Release versions prior to 1.194.0 Cloud Foundry cf-deployment versions prior to v44.1.0 Description: The issue allows authenticated users to upload specifically crafted files, potentially leading to a denial of service atta...
Git credentials are exposed in Atlantis logs
Summary Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Atlantis logs contains GitHub credentials tokens ghs... when they are rotated. Thi...
io.undertow:undertow-http2-test-suite (1.3.0.beta5), io.undertow:undertow-servlet (1.3.0.beta5) +10 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.0.beta5)
io.undertow:undertow-core MAVEN version 1.3.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta5 - io.undertow:undertow-servlet 1.3.0.beta5 -...
JetBrains TeamCity XSS
The vulnerability in the configuration of CI/CD system’s backup settings in JetBrains TeamCity exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Release Information for Proxmox Virtual Environment Plug-In v12.1.1.1024
Requirements This update to the Proxmox Virtual Environment Plug-In for Veeam Backup & Replication requires: Veeam Backup & Replication build 12.2.0.334 You can check the build number in the Veeam Backup & Replication Console's Main Menu ≡ under Help About. Proxmox Virtual Environment Plug-In for...
Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning
Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence AI framework that could be exploited by a malicious actor to perform various actions, including denial-of-service, model poisoning, and model theft. "Collectively, the vulnerabilities could allow an...
New Teams Deployment Guidance for App Layering or User Personalization Layer(UPL)
Microsoft Teams 2.x has changed its installation method and now installs under C:\Program Files\WindowsApps. Based on those changes this article provides the specific steps for the deployment of the Teams 2.x in an App LayeringAL or User Personalization LayerUPL environment. For the most current...
JetBrains YouTrack Cross-Site Scripting Vulnerability
JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, providing task management, team collaboration, time tracking and other features for software development, human resources and other scenarios. JetBrains YouTrack suffers from a cross-site scripting...
Ollama 安全漏洞
Ollama is an Ollama open source large-scale language model that can be started and run locally. A security vulnerability exists in Ollama versions prior to 0.1.46, which stems from a path traversal vulnerability in the api/push routing, leading to the exposure of files on the deployment server...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
PT-2024-34571 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: The issue allows for remote code execution RCE that can control all application deployment servers of the management system. This is achieved via the DeployController.java file. Recommendations: F...
PT-2024-30544 · Snowflake · Snowflake Jdbc Driver
Name of the Vulnerable Software and Affected Versions: Snowflake JDBC driver versions = 3.2.6 and = 3.2.6 and = 3.19.1, upgrade to version 3.20.0 or later as soon as possible to fix the incorrect security setting. As a temporary workaround, consider avoiding the use of the CLIENT ENCRYPTION KEY...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
JetBrains YouTrack Cross-Site Scripting Vulnerability
JetBrains YouTrack is a project management tool developed by JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from a cross-site scripting vulnerability that stems from insecure link cleaning. No detailed vulnerability details are provided at this time...
JetBrains YouTrack Cross-Site Scripting Vulnerability
JetBrains YouTrack is a project management tool, developed by JetBrains, supporting cloud hosting and local deployment, providing task management, team collaboration, time tracking and other features for software development, human resources and other scenarios. JetBrains YouTrack suffers from a...
