945 matches found
PT-2023-7590 · Atlassian · Companion App
Name of the Vulnerable Software and Affected Versions: Atlassian Companion App for MacOS affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Atlassian Companion App for MacOS. An attacker could utilize WebSockets to bypass Atlassian...
Compromised minter can change route to misdirect user funds
Lines of code Vulnerability details Impact The current security assumption revolves around the compromise of a minter, wherein they mint 200k USDe tokens for themselves and subsequently redeem them within the contract. Under this assumption, as long as the gatekeeper key remains secure, the minte...
Wrong estimation of acceptable risk of the protocol losses
Lines of code Vulnerability details Impact The protocol losses in case compromised MINTERS or REDEEMERS can be higher than expected due to the GATEKEEPER suppression. Attacker can frontrun the GATEKEEPER and fill block limit with own transactions while it is profitable. Average losses can be more...
Minter can censor GATEKEEPER and mint uncollateralized for a prolonged period of time
Lines of code Vulnerability details Impact Ethena explicitly mentions their protection against a compromised minter, the mentioned maximum loss is $100.000. The protection against a compromised minter rests on the GATEKEEPER role which is a system running on AWS set to remove the minter if mints...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: scorecard, kubescape, dgraph, kubevela, kubeflow, spark-operator, slsa-verifier, buildkitd, up, terraform-provider-sendgrid, src, k3d, cortex, aactl...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubescape, prometheus-blackbox-exporter, dynamic-localpv-provisioner-fips, kube-oidc-proxy, slsa-verifier, buildkitd, falcoctl-fips, aactl, dgraph, metrics-server-fips, bank-vaults-fips, conftest-fips, smarter-device-manager-fips, timestamp-authority-fips,...
GHSA-RCJV-MGP8-QVMR vulnerabilities
Vulnerabilities for packages: k3s, prometheus-adapter, kube-oidc-proxy, up, buildkitd, rancher-webhook, kubevela, rancher-webhook-fips, kubernetes-fips, metrics-server-fips, kubernetes, caddy...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: kubevela, prometheus-adapter, k3s, caddy, kubernetes, buildkitd, up...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: k3s, prometheus-adapter, kube-oidc-proxy, up, buildkitd, rancher-webhook, kubevela, rancher-webhook-fips, kubernetes-fips, metrics-server-fips, kubernetes, caddy...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: kubescape, aws-load-balancer-controller, prometheus-pushgateway, kube-oidc-proxy, prometheus-mysqld-exporter, falcoctl-fips, secrets-store-csi-driver-provider-gcp, prometheus-statsd-exporter-fips, zot, tkn, wavefront-collector-for-kubernetes, secrets-store-csi-driver...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: terraform, spark-operator, pulumi-kubernetes-operator, slsa-verifier, atlantis, scorecard, metrics-server, buildkitd, kpt, kubernetes-csi-livenessprobe, aws-efs-csi-driver, terraform-provider-azurerm, nri-prometheus, kubevela, hugo, kaf, nats, nginx-mainline, pulumi,...
CVE-2023-41067
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-41067
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
Design/Logic Flaw
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
Design/Logic Flaw
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-40450
The CVE-2023-40450 issue is described as a Gatekeeper bypass in macOS, fixed in macOS Sonoma 14. The Core detail: an app may bypass Gatekeeper checks, with Apple documenting a patch via “improved checks.” Connected sources corroborate this fix and note macOS Sonoma 14 as the affected/patched rele...
