TYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling

It has been discovered that request handling in Extbase can be vulnerable to insecure deserialization. User submitted payload has to be signed with a corresponding HMAC-SHA1 using the sensitive TYPO3 encryptionKey as secret - invalid or unsigned payload is not deserialized. However, since sensiti...

CGA-RQ75-RW2X-5W4H

Bulletin has no description...

OESA-2024-1701 skopeo security update

A command line utility that performs various operations on container images and image repositories Security Fixes: Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used lar...

CGA-H95P-86XW-2MWG

Bulletin has no description...

GHSA-92WP-JGHR-HH87 Weak encryption in Ninja Core

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

Fedora: Security Advisory for keepassxc (FEDORA-2024-2e27372d4c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JVN#55045256: Multiple vulnerabilities in "FreeFrom - the nostr client" App

"FreeFrom - the nostr client" App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. Improper verification of cryptographic signature CWE-347 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Base Score 5.3 CVE-2024-36277 Reliance on obfuscation or encryption of security-relevan...

UBUNTU-CVE-2024-36823

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

CVE-2024-36823

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

CGA-XPJJ-HV4W-94C5

Bulletin has no description...

CGA-QV5W-WW49-JPQW

Bulletin has no description...

CGA-Q85P-GQ7G-P269

Bulletin has no description...

CGA-H5X5-8J55-VM99

Bulletin has no description...

CGA-G3G7-M6MW-8PHC

Bulletin has no description...

CGA-WGVQ-WM85-Q9VX

Bulletin has no description...

CGA-PWQ3-MQJC-MVX6

Bulletin has no description...

CGA-MHWF-FPRC-G83H

Bulletin has no description...

CGA-HMXP-2JRG-8FJ2

Bulletin has no description...

CGA-87MJ-VFR9-8342

Bulletin has no description...

Sensitive Information Disclosure

netty-incubator-codec-ohttp is vulnerable to Sensitive Information Disclosure. The vulnerability due to an error in the BoringSSLAEADContext which results the encryption nonce overflowing. An attacker can manipulate the nonce repetition by causing the sequence number to overflow, which decreases...