374 matches found
GHSA-5C3C-54FJ-WG2V vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2025-1146
CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...
CVE-2025-1146 CrowdStrike Falcon Sensor for Linux TLS Issue
CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...
CVE-2020-8349
An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System CNOS’ optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled. When enabled, it is only vulnerable where...
Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security
Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...
Wind River Software VxWorks 6.9 Weak Password Hashing Algorithms
The password hashing algorithm introduced in VxWorks 6.9 is considered insecure. This algorithm employs a single iteration of SHA-256 combined with a salt to hash user passwords. The password hashing algorithm used in VxWorks 7 24.04 is also considered insecure. This algorithm uses 5,000 iteratio...
CVE-2021-42718
CVE-2021-42718 affects Replicated Classic versions prior to 2.53.1. An authenticated Admin Console API (port 8800) may exposed container definitions containing environment variables, potentially revealing application secrets. Impact is information disclosure for users with valid credentials and A...
CVE-2025-21380
creationtimestamp| type| source ---|---|--- 2025-01-09 22:16:15+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lfdpdstgpu2l 2025-01-09 22:39:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113800798859509630 2025-01-09 23:14:55+00:00| seen|...
CISCO-SA-20190807-ASA
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:48+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793666890201...
CVE-2024-49106
creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:22:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113630390227389899 2024-12-13 11:17:43+00:00| seen|...
AZL-53453 CVE-2024-53859 affecting package gh for versions less than 2.62.0-5
go-gh is a Go module for interacting with the gh utility and the GitHub API from the command line. A security vulnerability has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. go-gh sources authentication tokens...
Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download Vulnerabilities
Siemens Energy Omnivise T3000 version 8.2 SP3 suffers from local privilege escalation, cleartext storage of passwords in configuration and log files, file system access allowing for arbitrary file download, and IP whitelist bypass...
Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Siemens Energy Omnivise T3000 vulnerable version: =8.2 SP3 fixed version: see solution section CVE number: CVE-2024-38876, CVE-2024-3887...
GHSA-V7VF-F5Q6-M899 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2024-49013
creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:41:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113472154201097723 2026-07-04 02:07:07+00:00| seen|...
CVE-2024-43637
creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:40:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471681854033023 2025-01-09 17:18:30+00:00| seen|...
TikTok ordered to close Canada offices following “national security review”
The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...
CVE-2024-50186
creationtimestamp| type| source ---|---|--- 2024-11-08 05:59:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113445801227443560...
Lawo AG vsm LTC Time Sync Path Traversal
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Path Traversal Vulnerability product: Lawo AG - vsm LTC Time Sync vTimeSync vulnerable version: 4.5.6.0 fixed version: 4.5.6.0 CVE number: CVE-2024-6049...