The vulnerability of the CMPapp component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the CMPapp component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices

In general we have seen two issues with the beta releases from Apple for Sonoma and iOS 17. So if the versions prior to 23.09.1 of the Citrix Secure Access and SSO apps are used with MacOS Sonoma and iOS/iPadOS 17, then the following issues would be seen: Apps will not be able to generate the log...

The vulnerability of the CMPappBP component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ldap test randomly fails through SSL_TCP Load Balancing Vserver on NetScaler

The customer configured ldap authentication through NetScaler SSLTCP LB Vserver for backend ldap server. Customer found ldap test fails randomly...

The vulnerability of Quarkus’ HTTP security policy allows attackers to circumvent security restrictions, gain unauthorized access to protected information, or cause service failures.

The vulnerability of Quarkus’ HTTP framework policy is related to deficiencies in access control, due to the lack of measures to neutralize the exploitable vulnerabilities. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, gain unauthorized access to protecte...

The vulnerability of the symbolic.py component in the Python library for interacting with Git repositories in GitPython allows a malicious individual to gain unauthorized access to protected information or cause service failures.

The vulnerability of the symbolic.py component in the Python library for interacting with git repositories in GitPython is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

The vulnerability of the xmpsdk component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the xmpsdk component in the Exiv2 metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

WordPress MasterStudy LMS Plugin < 3.0.18 is vulnerable to Privilege Escalation

Software MasterStudy LMS Type Plugin Vulnerable versions 3.0.18 Fixed in 3.0.18 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-4278 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 7e43b36b9353 Credits Revan...

The vulnerability of the Fast DDS library, related to exception handling errors, allows attackers to trigger a service failure.

The vulnerability of the Fast DDS library is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

olcne security update

istio 1.17.5-1 - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt 0.58.0-3 - Ensure that selinux build tags are set for all Go builds olcne 1.7.2-3 - Mofify kubevirt image tag to use virt-operator tag instead of kubevirt-version 1.7.2-2 - Update kubevirt imag...

The vulnerability of the JSON data processing library Json-smart, related to uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the JSON data processing library Json-smart is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of Google’s gRPC remote procedure call system allows a attacker to trigger a service failure.

The vulnerability of the Google gRPC process callouts is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the SniHandler component in the Netty network programming framework, which allows a hacker to trigger a service failure.

The vulnerability of the SniHandler component in the Netty network programming framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Google GRPC’s remote procedure call system lies in insufficient input validation and improper implementation of functions, allowing attackers to trigger service failures.

The vulnerability of Google GRPC process callouts is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The software for creating, monitoring, and orchestrating data processing scenarios in Airflow is vulnerable due to insufficient validation of input data. This vulnerability allows attackers to trigger service failures.

The software used for creating, monitoring, and orchestrating data processing scenarios in Airflow is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Spring-based Apache Kafka software platform (spring-kafka) is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code or trigger service failures.

The vulnerability of the Spring-based software platform for Apache Kafka spring-kafka is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the GzipSource component in the Okio client HTTP library allows a attacker to cause a service failure.

The vulnerability of the GzipSource component in the Okio client HTTP library is related to the lack of a data type conversion mechanism. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient checking of incoming requests. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to expose sensitive information or cause service failures by...

The vulnerability of the $resource service in the Angular application and single-page application development platforms, related to the use of a regular expression with inefficient computational complexity, allows attackers to trigger service failures.

The vulnerability of the application development environment and the Angular single-page application platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...