21104 matches found
F5 Networks BIG-IP : BIG-IP Edge Client for Windows and macOS vulnerability (K000132563)
The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.6 / 15.1.10.2 / 16.1.4 / 17.1.0.3 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000132563 advisory. - An insufficient verification of data vulnerability exists in BIG-IP Edge Client f...
PT-2023-26413 · F5 · Big-Ip Edge Client Installer
Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client Installer affected versions not specified Description: The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Recommendations: At the moment, there...
The vulnerability of the web interface of microprogramming software in VMware SD-WAN Edge devices allows a hacker to bypass security restrictions and gain access to read, modify, or delete data.
The vulnerability of the web interface of microprogramming software in VMware SD-WAN Edge devices is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain read, modify, or delete access to data by downloading the...
F5 Networks BIG-IP : BIG-IP Edge Client for macOS vulnerability (K000134746)
The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000134746 advisory. - The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the...
F5 BIG-IP Edge Client 数据伪造问题漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A data forgery issue vulnerability exists in the F5 BIG-IP Edge Client, which stems from the presence of insufficient data...
F5 BIG-IP Edge Client Installer 数据伪造问题漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP APM elevation of privilege vulnerability, which is caused by incorrect verification of cryptographic signatures duri...
The vulnerability of MiniUPnP software for Ubiquiti EdgeRouter and Aircube routers allows a hacker to induce a service failure.
The vulnerability of MiniUPnP software for Ubiquiti EdgeRouter and Aircube routers lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
Fleek Network Releases New Whitepaper for Decentralized Edge Platform
By Owais Sultan Brooklyn, New York, 31 July 2023 – Fleek Network has released a new whitepaper describing the decentralized edge… This is a post from HackRead.com Read the original post: Fleek Network Releases New Whitepaper for Decentralized Edge Platform...
Security Bulletin: IBM TRIRIGA Application Platform is vulneraible to multiple vunerabilities [CVE-2016-0003], [CVE-2016-1000031] and [CVE-2016-0248]
Summary IBM TRIRIGA Application Platform updated the apache commons open source to latest version to fix the fulnerabilities in CVE-2016-0003, CVE-2016-1000031 and CVE-2016-0248. Vulnerability Details CVEID:CVE-2016-0003 DESCRIPTION: Microsoft Edge could allow a remote attacker to execute arbitra...
The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.
The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
The vulnerability of Microsoft Edge browser on Android, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.
The vulnerability of Microsoft Edge browser on Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
Microsoft Edge browser’s vulnerability, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2023-76762)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...
Microsoft Edge browser’s vulnerability on iOS, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.
The vulnerability of Microsoft Edge browser for iOS is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform a spear-phishing attack...
The vulnerability of Microsoft Edge browser on Android, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.
The vulnerability of Microsoft Edge browser on Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
Design/Logic Flaw
Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...
CVE-2023-35942
CVE-2023-35942 affects Envoy. Prior to fixes, gRPC access loggers using a listener’s global scope can cause a use-after-free crash when the listener is drained. Affected versions: < 1.23.12, < 1.24.10, < 1.25.9, < 1.26.4,
Design/Logic Flaw
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malicious client is able to construct credentials with permanent validity in some specific scenarios. This is caused by the some rare scenarios ...
CVE-2023-37918
CVE-2023-37918 affects Dapr and describes an API-token authentication bypass in HTTP endpoints when API token authentication is enabled. The root cause involves health check endpoint allowlisting, where requests containing /healthz in the URL could bypass the dapr-api-token check and reach the Da...
