12715 matches found
DLA-4000-1 sqlparse - security update
Bulletin has no description...
GHSA-3Q97-VJPP-C8RP Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
Description When linking a social account to an already authenticated user, the lack of a confirmation step introduces a security risk. This is exacerbated if -stateless is used in the Socialite configuration, bypassing state verification and making the exploit easier. Developers should ensure th...
Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
Description When linking a social account to an already authenticated user, the lack of a confirmation step introduces a security risk. This is exacerbated if -stateless is used in the Socialite configuration, bypassing state verification and making the exploit easier. Developers should ensure th...
CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access PRA and Remote Support RS products to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...
CVE-2024-44231
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...
CVE-2024-44231
Apple macOS Sequoia versions prior to 15.1 are vulnerable to a security flaw where a person with physical access to a Mac may be able to bypass the Login Window during a software update. The root cause is attributed to inadequate state management . This issue is resolved in macOS Sequoia 15.1 . A...
CVE-2024-44231
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...
CVE-2024-44231: Undefined Security Weakness
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...
PT-2025-20068
Name of the Vulnerable Software and Affected Versions SysAid On-Prem versions 23.3.40 and earlier Description SysAid On-Prem is affected by an unauthenticated XML External Entity XXE issue in the Checkin processing functionality. This allows for administrator account takeover and file read...
Apple macOS security vulnerabilities
Apple macOS is a specialized operating system from Apple Inc. that was developed specifically for Mac computers. A security vulnerability exists in Apple macOS version 15.1, which originated when a user with physical access to a Mac may be able to bypass the login window during a software update...
RHSA-2024:11348 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
RHSA-2024:11345 Red Hat Security Advisory: gstreamer1-plugins-base security update
Bulletin has no description...
RHSA-2024:11148 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...
CVE-2024-53269
A flaw was found in Envoy. If the cluster configuration file contains malformed IP addresses, the Happy Eyeballs sorting algorithm may fail and trigger an application crash, leading to a denial of service...
PT-2024-32405 · Nagvis +1 · Nagvis +1
Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.42 Description: The issue is related to improper neutralization of input, which can lead to Cross-Site Scripting XSS. This means that an attacker could potentially inject malicious scripts into the application,...
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has registerargcargv enabled. For these users an unspecified remote code execution vector is present...
RHSA-2024:11238 Red Hat Security Advisory: python3.11-urllib3 security update
Bulletin has no description...
RHSA-2024:11192 Red Hat Security Advisory: libsndfile security update
Bulletin has no description...