BIT-CILIUM-2024-25630

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who are using CRDs to store Cilium state the default configuration and Wireguard transparent encryption, traffic to/from the Ingress and health endpoints is not encrypted. This issue affect...

BIT-CILIUM-OPERATOR-2024-25630

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who are using CRDs to store Cilium state the default configuration and Wireguard transparent encryption, traffic to/from the Ingress and health endpoints is not encrypted. This issue affect...

BIT-CILIUM-2024-25631

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and...

BIT-CILIUM-OPERATOR-2024-25631

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and...

BIT-CILIUM-2024-28250

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.8 and 1.15.2, In Cilium clusters with WireGuard enabled and traffic matching Layer 7 policies Wireguard-eligible traffic that is sent between a node's...

BIT-CILIUM-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

BIT-CILIUM-OPERATOR-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

Cyber Power Systems PowerPanel Business Edition Security Vulnerabilities

Cyber Power Systems PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures, and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distribution Units. ...

PT-2024-40129

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 5.6.30 Description: A security issue has been identified, prompting an immediate upgrade recommendation for all users. The upgrade to version 5.6.30 includes a breaking change to cookie encryption and serialization...

PT-2024-40023

Name of the Vulnerable Software and Affected Versions Laravel versions prior to 5.5 Description The issue affects applications using the "cookie" session driver, particularly when an encryption oracle is exposed via the application. This allows for remote code execution by generating valid signed...

PT-2024-40434 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel affected versions not specified Description: The issue concerns applications that use the "cookie" session driver and expose an encryption oracle, allowing for remote code execution. An encryption oracle is a mechanism where arbitrary...

PT-2024-40187

Name of the Vulnerable Software and Affected Versions: AsymmetriCrypt affected versions not specified Description: The issue is related to a padding oracle vulnerability, specifically the Bleichenbacher's attack, which was disclosed in 1998. This vulnerability affects the encryption and decryptio...

Dell PowerScale OneFS Encryption Issue Vulnerability

Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS has a cryptographic issue vulnerability that arises from the presence of a vulnerability in the use of corrupted or risky...

PT-2024-40270

Name of the Vulnerable Software and Affected Versions: fuel/core versions prior to 1.8.1 Description: The issue allows Crypt encryption to be broken in minutes with the right knowledge, code, and GPU calculation power. Recommendations: For versions prior to 1.8.1, update to version 1.8.1 or later...

CVE-2024-3676

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These account...

CVE-2024-0862

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses...

CVE-2024-3676

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These account...

CVE-2024-3676

The CVE-2024-3676 entry affects Proofpoint Encryption endpoint within Proofpoint Enterprise Protection. It is an Improper Input Validation vulnerability that allows an unauthenticated remote attacker to craft an HTTP request to create additional Encryption user accounts under the attacker’s contr...

CVE-2024-3676

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These account...

CVE-2024-0862

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses...