ak-electronics.de Cross Site Scripting vulnerability OBB-3255682

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-keller.de Cross Site Scripting vulnerability OBB-3255678

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-berlin.de Cross Site Scripting vulnerability OBB-3234070

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-ru.ru Cross Site Scripting vulnerability OBB-2968537

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ad-components (>=0.1.5 <=0.1.6), adataset (=0.1.0) +217 more potentially affected by CVE-2022-1941 via protobuf (>=3.19.0 <=3.19.4)

protobuf PYPI version =3.19.0, =0.1.5, =1.1.0, =1.2.1, =0.13.0, =1.5.0, =3.0.4, =0.3.0, =0.8.0, =1.1.2, =0.1.0a1, =0.0.1, =0.0.2 - asdjgasdghasdhjgasghd =1.0.7 - aslib =1.0.3 and more Source cves: CVE-2022-1941 Source advisory: OSV:GHSA-8GQ9-2X98-W8HF...

ak-fotodesign.de Cross Site Scripting vulnerability OBB-2785979

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-autos.de Cross Site Scripting vulnerability OBB-2688001

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OSV-2022-514 Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48405 Crash type: Heap-use-after-free READ 2 Crash state: AK::HashTable, false::trylookupfor JS::Parser::isprivateidentifiervalid JS::Parser::parseprimaryexpression...

ak-touristik.de Cross Site Scripting vulnerability OBB-2681542

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-berlin.de Cross Site Scripting vulnerability OBB-2672937

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-gravel.com Cross Site Scripting vulnerability OBB-2664697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

new packages: hunspell-ak

An update is available for hunspell-ak. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

CVE-2022-1053

Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an...

Validation Bypass

keylime is vulnerable to validation bypass. The vulnerability is caused due to lack of enforcement of same registrar data for tenant and verifier validation of the EK, AK and identity and integrity quotes, allowing to break the chain of trust as it can use invalid AK as valid...

Tenant and Verifier might not use the same registrar data

Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an...

PT-2022-13620

Name of the Vulnerable Software and Affected Versions Keylime affected versions not specified Description The issue arises because Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating...

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to incorrect default access rights settings, allowing a perpetrator to execute arbitrary codes.

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to incorrect default access rights settings. Exploiting this vulnerability could allow an attacker to execute arbitrary code with privileges of SYSTEM...

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800, related to the use of rigidly encrypted accounting data, allows a perpetrator to increase their privileges.

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to the use of rigidly encrypted accounting data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ak-kurier.de Cross Site Scripting vulnerability OBB-2306315

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ak-hoelss.de Improper Access Control vulnerability OBB-2172674

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...