CVE-2024-8285

CVE-2024-8285 affects Kroxylicious, where TLS upstream connections to Kafka fail to verify the server hostname. This creates a potential for MITM and data integrity/confidentiality impact. Attacks require network access and, per the sources, may require high privileges to modify Kroxylicious conf...

CVE-2024-8285 Kroxylicious: missing upstream kafka tls hostname verification

A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's hostname, resulting in an insecure connection. For a successful attack to be performed, the attacker needs to perfor...

CVE-2024-1657 Platform: insecure websocket used when interacting with eda server

A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of...

objstor (>=0.4.6, <=0.4.20), trillium-acme (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2024-23644 via trillium-client (>=0.2.2, <=0.4.9)

trillium-client CARGO version =0.2.2, =0.4.6, =0.1.0, =0.2.0, =0.5.0 Source cves: CVE-2024-23644 Source advisory: OSV:RUSTSEC-2024-0008...

GOM Player 2.3.90.5360 MITM / Remote Code Execution Exploit

GOM Player version 2.3.90.5360 man-in-the-middle proof of concept remote code execution exploit. Exploit Title: GOM Player 2.3.90.5360 - Remote Code Execution RCE Author: M. Akil Gündoğan Contact: https://twitter.com/akilgundogan Vendor Homepage: https://www.gomlab.com/gomplayer-media-player/...

Google Chrome's New Feature Alerts Users About Auto-Removal of Malicious Extensions

Google has announced plans to add a new feature in the upcoming version of its Chrome web browser to proactively alert users when an extension they have installed has been removed from the Chrome Web Store. The feature, set for release alongside Chrome 117, allows users to be notified when an...

CVE-2023-30565

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

Design/Logic Flaw

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

CVE-2023-30565

CVE-2023-30565 describes an insecure (cleartext) connection between BD Alaris System Manager (SM) and CQI Reporter that could expose infusion data. Affected: BD Alaris SM versions 12.3 and prior; CQI Reporter v10.17 and prior; PCU Model 8015 12.1.3 and prior. MITRE/ADP assessment in the connected...

PT-2023-22793 · Unknown · Systems Manager +1

Name of the Vulnerable Software and Affected Versions: Systems Manager affected versions not specified CQI Reporter application affected versions not specified Description: The issue is related to an insecure connection between Systems Manager and the CQI Reporter application, which could...

BD Alaris System with Guardrails Suite MX 安全漏洞

The BD Alaris System with Guardrails Suite MX is a medical device from Biddy Medical BD, Inc. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX, which stems from an insecure connection between the Systems Manager and CQI Reporter applications that could expose...

CVE-2023-1899

Atlas Copco Power Focus 6000 web server is affected by CVE-2023-1899 (cleartext transmission of sensitive information). Public documents confirm that the Power Focus 6000 web interface does not use a secure connection by default, enabling potential interception of credentials or sensitive data ov...

CVE-2023-1899 CVE-2023-1899

Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between user and controller...

CVE-2023-1899 CVE-2023-1899

Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between user and controller...

SUSE CVE-2011-3355

evolution-data-server3 3.0.3 through 3.2.1 used insecure non-SSL connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim...

SUSE CVE-2020-10754

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely...

SUSE CVE-2020-14929

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do...

SimpleSAMLphp Use of insecure connection charset (sqlauth module)

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions...

GHSA-QV5P-6WRC-79WG SimpleSAMLphp Use of insecure connection charset (sqlauth module)

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions...

Mageia: Security Advisory (MGASA-2020-0260)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...