CVE-2024-56802

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...

PT-2023-10337 · Krail-Jpa · Krail-Jpa

Name of the Vulnerable Software and Affected Versions: krail-jpa versions up to 0.9.1 Description: A critical issue has been found, affecting an unknown part of the software, which leads to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no...

Improper Authorization

Overview smartproxyshellhooks is a Provides easy integration with 3rd parties for Foreman Affected versions of this package are vulnerable to Improper Authorization. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server...