21740 matches found
CVE-2024-36510
An observable response discrepancy vulnerability CWE-204 in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid use...
CVE-2024-54021
An Improper Neutralization of CRLF Sequences in HTTP Headers 'http response splitting' vulnerability CWE-113 in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7.4.5 may allow a remote unauthenticated attacker to bypass the file filter via crafted HTTP headers...
CVE-2024-54021
CVE-2024-54021 is an HTTP CRLF (http response splitting) vulnerability in Fortinet FortiOS (7.2.0–7.6.0) and FortiProxy (7.2.0–7.4.5). The root cause is improper neutralization of CRLF sequences in HTTP headers, which may allow a remote unauthenticated attacker to bypass the file filter via craft...
CVE-2024-54021
An Improper Neutralization of CRLF Sequences in HTTP Headers 'http response splitting' vulnerability CWE-113 in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7.4.5 may allow a remote unauthenticated attacker to bypass the file filter via crafted HTTP headers...
CISA Releases the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet
Today, CISA released the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet to foster operational collaboration among government, industry, and international partners and strengthen artificial intelligence AI cybersecurity. The playbook provides voluntary information-sharing processes...
CVE-2024-50859
The ipimportaclcsv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data...
Fortinet Fortigate File-Filter Bypass in Explicit Web Proxy Policy (FG-IR-24-282)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-282 advisory. - An improper neutralization of crlf sequences in http headers 'http response splitting' in Fortinet FortiOS 7.2.0 through...
Denial Of Service (DoS)
go-git is vulnerable to a Denial of Service DoS. The vulnerability is due to insufficient handling of specially crafted responses from a Git server, which can trigger resource exhaustion in go-git clients...
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API∕2.0 as the server's name & version...
CVE-2024-42179 HCL MyXalytics is affected by sensitive information disclosure vulnerability
HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API∕2.0 as the server's name & version...
CVE-2024-42179
CVE-2024-42179 describes a sensitive information disclosure in HCL MyXalytics where the HTTP response header reveals the server software name and version (Microsoft-HTTP API/2.0). The underlying issue is exposure of server identity, not a direct code execution vector. Public sources in the connec...
CVE-2024-42179 HCL MyXalytics is affected by sensitive information disclosure vulnerability
HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API∕2.0 as the server's name & version...
CISA: Cyber Incident Resource Guide for Governors
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: DHS-DOJ Bomb Threat Guidance Quad-Fold
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Weather Hazard Preparedness
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2021 Edition - Planning and Response to an Active Shooter: an Interagency Security Committee Policy and Best Practices Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 Edition - Violence in the Federal Workplace: a Guide for Prevention and Response
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Active Shooter Poster
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...