12577 matches found
DLA-4000-1 sqlparse - security update
Bulletin has no description...
Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
Description When linking a social account to an already authenticated user, the lack of a confirmation step introduces a security risk. This is exacerbated if -stateless is used in the Socialite configuration, bypassing state verification and making the exploit easier. Developers should ensure th...
GHSA-3Q97-VJPP-C8RP Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
Description When linking a social account to an already authenticated user, the lack of a confirmation step introduces a security risk. This is exacerbated if -stateless is used in the Socialite configuration, bypassing state verification and making the exploit easier. Developers should ensure th...
CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access PRA and Remote Support RS products to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...
CVE-2024-44231
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...
CVE-2024-44231
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...
CVE-2024-44231
Apple macOS Sequoia 15.1 fixes CVE-2024-44231, addressing a login-window bypass during a software update when an attacker has physical access. The root cause is described as improved state management; the affected component is Login Window. Impact is limited to bypassing login under update condit...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system from Apple Inc. that was developed specifically for Mac computers. A security vulnerability exists in Apple macOS version 15.1, which originated when a user with physical access to a Mac may be able to bypass the login window during a software update...
PT-2025-20068
Name of the Vulnerable Software and Affected Versions SysAid On-Prem versions 23.3.40 and earlier Description SysAid On-Prem is affected by an unauthenticated XML External Entity XXE issue in the Checkin processing functionality. This allows for administrator account takeover and file read...
RHSA-2024:11348 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
RHSA-2024:11345 Red Hat Security Advisory: gstreamer1-plugins-base security update
Bulletin has no description...
RHSA-2024:11148 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
CVE-2024-53269
A flaw was found in Envoy. If the cluster configuration file contains malformed IP addresses, the Happy Eyeballs sorting algorithm may fail and trigger an application crash, leading to a denial of service...
PT-2024-32405 · Nagvis +1 · Nagvis +1
Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.42 Description: The issue is related to improper neutralization of input, which can lead to Cross-Site Scripting XSS. This means that an attacker could potentially inject malicious scripts into the application,...
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has registerargcargv enabled. For these users an unspecified remote code execution vector is present...
RHSA-2024:11238 Red Hat Security Advisory: python3.11-urllib3 security update
Bulletin has no description...
RHSA-2024:11192 Red Hat Security Advisory: libsndfile security update
Bulletin has no description...
RHSA-2024:11185 Red Hat Security Advisory: edk2:20220126gitbb1bba3d77 security update
Bulletin has no description...