CVE-2020-24502

CVE-2020-24502: Affects Intel Ethernet E810 Adapter drivers (Linux prior to 1.0.4; Windows prior to 1.0.4/1.4.29.0). Improper input validation could allow an authenticated local user to cause a denial of service. The MiracleLinux AXSA-2021-2785 advisory confirms the issue alongside other CVEs in ...

CVE-2020-24504

CVE-2020-24504: Affects Intel Ethernet E810 Adapter drivers for Linux. Uncontrolled resource consumption could allow a locally-authenticated user to cause denial of service. Expected fix is upgrade to Linux driver version 1.0.4 or later (per initial description). MiracleLinux AXSA advisory corrob...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

Insecure Token Validation

next-auth is using an insecure token validation. A valid token assigned to one user can be used to sign in as another user when using the Prima adapter in conjunction with the Email provider because an identifier an email address associated with the token is not checked at the time of token...

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

Default configuration

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

CVE-2021-21310

NextAuth.js (next-auth) token verification vulnerability affects the Prisma database adapter when used with the Email provider (before 3.3.0). The defect: verification tokens were checked but not the associated email identifier, enabling sign-in as another user with a valid token. The issue is sp...

CVE-2021-21310 Token verification bug in next-auth

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

Token verification bug in next-auth

Impact Implementations using the Prisma database adapter with the Email provider are impacted. Implementations using the Prisma database adapter that are not using the Email provider are not impacted. Implementations using the default database adapter TypeORM with the Email provider are not...

Input validation

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular...

CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular...

PT-2021-5826 · Unknown +4 · Postgresql +4

Name of the Vulnerable Software and Affected Versions: Active Record versions prior to 6.1.2.1 Active Record versions prior to 6.0.3.5 Active Record versions prior to 5.2.4.5 Description: The PostgreSQL adapter in Active Record suffers from a regular expression denial of service REDoS...

Intel® Ethernet E810 Adapter Driver Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet E810 Adapter Drivers for Linux and Windows may allow denial of service or information disclosure. Intel is releasing driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24504...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...