2902 matches found
Canonical Ubuntu Linux SEoL (5.10.x)
According to its version, Canonical Ubuntu Linux is 5.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...
Apple Mac OS X SEoL (10.14.x)
According to its version, Apple Mac OS X is 10.14.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...
Canonical Ubuntu Linux SEoL (19.04.x)
According to its version, Canonical Ubuntu Linux is 19.04.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...
CVE-2024-24791 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, hubble-fips, opentelemetry-collector, step, opa, buf, certificate-transparency-fips, metallb, wuzz, gops, dex-k8s-authenticator, cosign, k3s, step-issuer, aws-efs-csi-driver, flux-kustomize-controller, paranoia, trust-manager,...
GHSA-98J2-3J3P-FW2V Session Middleware Token Injection Vulnerability
A security vulnerability has been identified in the Fiber session middleware where a user can supply their own sessionid value, leading to the creation of a session with that key. Impact The identified vulnerability is a session middleware issue in GoFiber versions 2 and above. This vulnerability...
CVE-2024-38513
The CVE-2024-38513 issue affects the GoFiber (Fiber) session middleware in GoFiber versions prior to 2.52.5. The vulnerability allows a user to supply their own session_id value, which can cause a session to be created with that key. This can enable unauthorized access or session fixation if an a...
CVE-2024-38513 Fiber Session Middleware Token Injection Vulnerability
Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own sessionid value, resulting in the creation of a session with that key. If...
CVE-2024-38513 Fiber Session Middleware Token Injection Vulnerability
Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own sessionid value, resulting in the creation of a session with that key. If...
CVE-2024-38513 Fiber Session Middleware Token Injection Vulnerability
Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own sessionid value, resulting in the creation of a session with that key. If...
GHSA-876P-C77M-X2HC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
IBM WebSphere Automation Cross-Site Scripting Vulnerability
IBM WebSphere Automation is an operations platform from International Business Machines IBM that automates operational activities to proactively reduce security risks and accelerate threat remediation. A cross-site scripting vulnerability exists in IBM WebSphere Automation version 1.7.0, which ca...
Decoding OWASP – A Security Engineer’s Roadmap to Application Security
In a time where over 60% of data breaches are linked to software vulnerabilities and a single overlooked software vulnerability can expose sensitive data, the imperative of robust application security cannot be overstated. The 2023 IBM Security Cost of a Data Breach Report highlights that...
CVE-2024-6293 vulnerabilities
Vulnerabilities for packages: chromium...
PT-2024-6687 · Openssh +7 · Openssh +7
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 9.5 through 9.7 Description: The issue is related to a logic error in the ObscureKeystrokeTiming function, which can lead to timing attacks against echo-off password entry, such as those used for su and Sudo. This could...
Insecure Authentication And Session Management
magento/community-edition is vulnerable to Insecure Authentication and session management. The vulnerability is due to inadequate session validation, allows authenticated users to manipulate session parameters related to authentication and session management on the storefront, leading to security...
Critical Vulnerabilities Exposing Chinese Biometric Readers to Unauthorized Access
Is your fingerprint scanner safe? New research reveals 24 vulnerabilities in ZKTeco biometric access systems. This exposes critical facilities and businesses to a range of security risks. Learn how to protect yourself from unauthorized access, data theft, and system manipulation...
CVE-2024-5163 Improper permission settings in com.transsion.carlcare
Improper permission settings for mobile applications com.transsion.carlcare may lead to user password and account security risks...
CVE-2024-5163 Improper permission settings in com.transsion.carlcare
Improper permission settings for mobile applications com.transsion.carlcare may lead to user password and account security risks...
CVE-2024-5163
CVE-2024-5163 affects the com.transsion.carlcare mobile app. Root cause: improper permission settings in the app, which may expose user passwords and compromise account security. CVSS v3.1 base score 9.8 (CRITICAL) with Network attack vector, no user interaction required, and high impacts to conf...
Mozilla Firefox ESR < 115.12
The version of Firefox ESR installed on the remote Windows host is prior to 115.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-26 advisory. - By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if...