Lucene search
+L

2813 matches found

OpenVAS
OpenVAS
•added 2024/09/11 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2024:3203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.00729EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•13 views

SUSE: Security Advisory (SUSE-SU-2024:3192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.01565EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2024:3182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.01686EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/09/05 12:00 a.m.•13 views

Rust Canister Development Kit 安全漏洞

Rust Canister Development Kit is a DFINITY open source Rust development kit for Internet computers. A security vulnerability exists in the Rust Canister Development Kit, which is caused by a memory leak where not all references are removed before resolving the Future...

7.5CVSS6.5AI score0.00693EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/27 7:53 p.m.•76 views

GHSA-QJ85-69XF-2VXQ AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

Summary The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built component...

6.4CVSS5.9AI score0.00314EPSS
SaveExploits0References6
NVD
NVD
•added 2024/08/27 7:15 p.m.•51 views

CVE-2024-45037

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

6.4CVSS0.00314EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/08/27 6:33 p.m.•26 views

CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

6.4CVSS6.5AI score0.00314EPSS
SaveExploits0References4
CVE
CVE
•added 2024/08/27 6:33 p.m.•96 views

CVE-2024-45037

The CVE affects the AWS CDK RestApi with CognitoUserPoolAuthorizer. Under certain conditions, authenticated Cognito users may gain access beyond what is intended to protected API resources/methods, though API availability is not affected. Affected CDK versions are >=2.142.0 and =2.148.1; upgra...

6.4CVSS7AI score0.00314EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2024/08/27 6:33 p.m.•55 views

CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

6.4CVSS0.00314EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/27 6:33 p.m.•41 views

CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

6.4CVSS6.5AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/27 12:00 a.m.•1 views

CVE-2024-45037: Incorrect Authorization

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

6.4CVSS5.8AI score0.00314EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/27 12:00 a.m.•22 views

AWS Cloud Development Kit 安全漏洞

AWS Cloud Development Kit is an open source software development framework open sourced by Amazon Web Services for defining cloud infrastructure in code and configuring it via AWS CloudFormation. A security vulnerability exists in AWS Cloud Development Kit that stems from the possibility that an...

6.4CVSS6.6AI score0.00314EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/08/26 11:05 a.m.•16 views

wildfly-security-manager: security manager authorization bypass

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...

8.8CVSS5.8AI score0.0119EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/08/26 12:00 a.m.•17 views

The vulnerability of the software development package Azure IoT SDK for C lies in its memory management after memory is released. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Azure IoT SDK for C development software package lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS5.8AI score0.00427EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2024/08/23 12:00 a.m.•49 views

SUSE: Security Advisory (SUSE-SU-2024:2999-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.25878EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2024/08/22 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2024:2993-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/08/21 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2024:2978-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00284EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/08/20 3:52 p.m.•8 views

edk2: Temporary DoS vulnerability

A divide-by-zero vulnerability was found in edk2. A successful exploit of this vulnerability may lead to a loss of availability...

6CVSS7.3AI score0.00219EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2024/08/15 12:00 a.m.•15 views

SUSE: Security Advisory (SUSE-SU-2024:2900-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.7AI score0.01939EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/14 5:15 p.m.•18 views

CVE-2024-42438

Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00574EPSS
SaveExploits0References1
Rows per page
Query Builder