Lucene search
+L

2700 matches found

RedhatCVE
RedhatCVE
added 2025/02/20 5:25 p.m.10 views

CVE-2024-49589

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...

6.5CVSS6.8AI score0.00492EPSS
SaveExploits0
NVD
NVD
added 2025/02/18 6:15 p.m.12 views

CVE-2024-49589

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...

6.5CVSS0.00492EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/18 5:18 p.m.16 views

CVE-2024-49589 Foundry artifacts denial of service

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...

6.5CVSS0.00492EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/18 5:18 p.m.54 views

CVE-2024-49589

Foundry Artifacts is affected by a Denial of Service via disk exhaustion caused by a user-supplied size argument. The PT-2025-6701 entry notes the affected versions are not specified and provides no fix information; no exploit details are described in the provided documents. Monitor for updates.

6.5CVSS6.4AI score0.00492EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/18 5:18 p.m.21 views

CVE-2024-49589 Foundry artifacts denial of service

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...

6.5CVSS6.4AI score0.00492EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.7 views

Palantir Foundry 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in Palantir Foundry versions prior to 0.1337.0 that originates from a disk exhaustion due to a user parameter that could trigger a denial of service...

6.5CVSS6.5AI score0.00492EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/18 12:0 a.m.7 views

PT-2025-6701 · Unknown · Foundry Artifacts

Name of the Vulnerable Software and Affected Versions: Foundry Artifacts affected versions not specified Description: The issue allows for a Denial Of Service attack due to the disk potentially being filled up based on a user-supplied argument, specifically the size argument. This could lead to a...

6.5CVSS6.8AI score0.00492EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/02/05 9:45 a.m.11 views

CVE-2024-30486

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from n/a through 8.1.7...

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:40 a.m.11 views

CVE-2024-37082

When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications. You are affected if you have route-services enabled in routing-release and have...

9.1CVSS7.1AI score0.00545EPSS
SaveExploits0References1
Cloud Foundry
Cloud Foundry
added 2025/01/29 12:0 a.m.16 views

CVE-2025-22216 - UAA Missing Zone Validation | Cloud Foundry

Severity MED Overall CVSS Score: 5.0 CVSS v3.1 Vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C Vendor CloudFoundry Foundation Versions Affected Affected thru UAA Releases 77.20.1, 77.24.0 including 77.21.0, 77.22.0, 77.23.0 Unaffected from UAA Release 77.20.2 Unaffected from UAA Release...

5.4CVSS5.9AI score0.00188EPSS
SaveExploits0
OSV
OSV
added 2024/12/29 11:37 p.m.4 views

MAL-2024-12162 Malicious code in v2-foundry (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761f1bf228ed4db14be182b91d2442d9b00aa33e118b7d0e3e341bf015eac5b9 Any computer that has this package install...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/12/18 9:15 p.m.6 views

AZL-54549 CVE-2024-45338 affecting package cf-cli for versions less than 8.4.0-23

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

5.3CVSS6.6AI score0.00874EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/02 9:15 p.m.34 views

CVE-2024-49581

Restricted Views backed objects OSV1 could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. This software bug did not impact or otherwise make data available...

6.5CVSS0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 8:26 p.m.11 views

CVE-2024-49581 Access control issue impacting RV backed objects

Restricted Views backed objects OSV1 could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. This software bug did not impact or otherwise make data available...

6.5CVSS6.6AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 8:26 p.m.39 views

CVE-2024-49581 Access control issue impacting RV backed objects

Restricted Views backed objects OSV1 could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. This software bug did not impact or otherwise make data available...

6.5CVSS0.00371EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 8:26 p.m.60 views

CVE-2024-49581

CVE-2024-49581 affects Palantir Foundry (Apollo-managed Foundry instances). A software bug in Restricted Views backed objects (OSV1) could be bypassed under specific circumstances, allowing users without permission to view such objects via the Object Explorer. The issue did not enable cross-organ...

6.5CVSS6.6AI score0.00371EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:0 a.m.5 views

PT-2024-33555 · Foundry · Foundry

Name of the Vulnerable Software and Affected Versions: Foundry affected versions not specified Description: A software bug could allow users without permission to view restricted objects directly through the Object Explorer under specific circumstances. This issue did not make data available acro...

6.5CVSS7AI score0.00371EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.6 views

Palantir Foundry 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in Palantir Foundry versions 105.110.1 through 105.115.0, which stems from Objects Supported by Restricted Views OSV1 can be bypassed, allowing users not authorized to view such...

6.5CVSS6.7AI score0.00371EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 4:23 p.m.6 views

Malicious code in crowdstrike-foundry (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 89a436ce955b3eb01df1e23a27f7b9d0091b3720818f31559038c7af44bca276 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

7.1AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.10 views

The vulnerability of the haproxy-boshrelease component of the Cloud Foundry multi-cloud application platform allows a attacker to bypass the mTLS authentication checks.

The vulnerability of the HAProxy component in the Cloud Foundry multi-cloud applications relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent mTLS authentication checks...

9.4CVSS5.5AI score0.00545EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder