9648 matches found
keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...
CVE-2024-23385 Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
CVE-2024-23385 Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
SQLite3 generate_series Stack Buffer Underflow
Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef ZEROARGUMENTGENERATESERIES int bStartSeen = 0; / EQ constraint seen on the START column / endif int unusableMask = 0;...
WS-2023-0047
Affected versions of the crate partialsort were using a debug assertion to validate the last parameter of partialsort. This would allow invalid inputs to cause an out-of-bounds read instead of immediately panicking, when compiled without debug assertions. All writes are bounds-checked, so the...
PT-2024-10197
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function qcom pcie perst deassert in the Linux kernel, which is connected to an uncontrolled reachable assertion. This could allow a remote attacker to cause ...
Updated bind packages fix security vulnerabilities
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. CVE-2024-0760 Resolver caches and authoritative zone databases that...
CBL Mariner 2.0 Security Update: libreswan (CVE-2024-3652)
The version of libreswan installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3652 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without...
SUSE CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
SUSE CVE-2024-50614
TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...
Lunary Access Control Error Vulnerability
lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary that stems from not properly restricting permissions to update the SAML configuration. An attacker could use this vulnerability to modify the authentication process and steal user...
CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
CVE-2024-10455
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455 Reachable Assertion in µD3TN
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455
CVE-2024-10455 affects µD3TN v0.14.0’s BPv7 parser. A reachable assertion can be triggered by a malformed Extension Block, potentially disrupting service. Reported across multiple feeds (Red Hat, NVD, CNNVD, PT-Security, etc.). Mitigation notes from PT-Security suggest disabling the BPv7 parser u...
CVE-2024-10455 Reachable Assertion in µD3TN
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455 Reachable Assertion in µD3TN
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
