Splunk Enterprise and Splunk Secure Gateway security vulnerabilities

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A security vulnerability exists in Splunk...

SUSE CVE-2024-47084

Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to CORS origin validation, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker's website to make unauthorized requests to a local Gradio...

PYSEC-2024-214

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhostaliases variable includes "null" as a valid origin. This allows attackers to make unauthoriz...

PYSEC-2024-214

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhostaliases variable includes "null" as a valid origin. This allows attackers to make unauthoriz...

CVE-2024-47165

CVE-2024-47165 affects Gradio (Python). When running Gradio locally, the localhost_aliases list incorrectly includes "null" as a valid origin, enabling requests from sandboxed iframes or sources with a null origin. This can lead to data theft such as authentication tokens or uploaded files for us...

Gradio's CORS origin validation accepts the null origin

Impact What kind of vulnerability is it? Who is impacted? This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhostaliases variable includes "null" as a valid origin. This allows attackers to make unauthorized requests fr...

Gradios's CORS origin validation is not performed when the request has a cookie

Impact What kind of vulnerability is it? Who is impacted? This vulnerability is related to CORS origin validation, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker’s website to make unauthorized requests to a local Gradio server...

PT-2024-32398

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 4.44 Description This issue is related to CORS origin validation, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker’s website to make unauthorized requests t...

CVE-2024-47165: Improper Authorization

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhostaliases variable includes "null" as a valid origin. This allows attackers to make unauthoriz...

GitLab CE/EE security vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE versions 8.16 through prior to 17.2.9,...

PT-2024-32448 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 5.0 Description: This issue relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhost aliases variable includes "null" as a valid origin, allowing attackers to...

Choosing the Right Deployment Option for Your API Security Solution

You need an API security solution. That much is a given although some may argue it isn’t!. While essential for business growth and innovation, APIs, or Application Programming Interfaces, expose the organizations that use them to cyber threats. Attackers are both aware of and actively exploiting...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.10.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.10.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.10.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.10.0 - io.quarkiverse.cxf:quarkus-cxf-integration-test...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.2), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (1.5.2) +8 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.5.2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.2 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.12.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.12.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.12.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.12.0 - io.quarkiverse.cxf:quarkus-cxf-integration-test...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.1.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.1.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.1.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.1.0 - io.quarkiverse.cxf:quarkus-cxf-integration-tests...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.2), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.2) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.2 - io.quarkiverse.cxf:quarkus-cxf-integration-tests 0.2...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.3), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.3) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.3)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.3 - io.quarkiverse.cxf:quarkus-cxf-integration-tests 0.3...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.4), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.4) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.4)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.4 - io.quarkiverse.cxf:quarkus-cxf-integration-tests 0.4...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.6), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.6) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.6)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.6 - io.quarkiverse.cxf:quarkus-cxf-integration-tests 0.6...