624 matches found
CVE-2024-31760
An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...
CVE-2024-31760
An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...
CVE-2024-31760
CVE-2024-31760 affects sanluan flipped-aurora gin-vue-admin 2.4.x. The Session Expiration component allows privilege escalation. A PoC exists per the Exploitation metadata, and the CVSSv3.1 score is 4.7 (Medium). No patch/version remediation is specified in the provided documents; one source note...
aurora-piter.com Cross Site Scripting vulnerability OBB-3909255
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Apache Aurora task scheduling framework, related to information disclosure, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Aurora task scheduler framework is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
PT-2024-6136 · Аврора · Аврора
Name of the Vulnerable Software and Affected Versions: Аврора affected versions not specified Description: The issue is related to a component validation vulnerability in the Аврора operating system, which is caused by the lack of control over public write permissions for installed application...
CVE-2024-27905
UNSUPPORTED WHEN ASSIGNED Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially thi...
CVE-2024-27905
UNSUPPORTED WHEN ASSIGNED Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially thi...
Remote code execution
UNSUPPORTED WHEN ASSIGNED Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially thi...
CVE-2024-27905 Apache Aurora: padding oracle can allow construction an authentication cookie
UNSUPPORTED WHEN ASSIGNED Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially thi...
CVE-2024-27905 Apache Aurora: padding oracle can allow construction an authentication cookie
UNSUPPORTED WHEN ASSIGNED Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially thi...
CVE-2024-27905
Apache Aurora is affected by a vulnerability described as an exposure of sensitive information to an unauthenticated actor, arising from an endpoint that exposes internals and can function as a padding oracle to craft a valid authentication cookie. The issue can potentially be combined with other...
Apache Aurora Information Disclosure Vulnerability
Apache Aurora is a Mesos framework for long-running services and cron jobs from the Apache Foundation USA. An information disclosure vulnerability exists in Apache Aurora versions 0.5.0 and later, which originates from allowing an unauthorized attacker to obtain sensitive information...
PT-2024-2664 · Apache · Apache Aurora
Name of the Vulnerable Software and Affected Versions: Apache Aurora affected versions not specified Description: The issue is related to the exposure of sensitive information. An endpoint that exposes internals to unauthenticated users can be used as a "padding oracle", allowing an anonymous...
Malicious code in aurora-webmail-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b196e5cdd7ecb9e38cd0eb47dfc5a3b78a6533ffeb8c52c9f43722b3f398a983 The OpenSSF Package Analysis project identified 'aurora-webmail-pro' @ 10.1.0 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-84 Malicious code in aurora-webmail-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b196e5cdd7ecb9e38cd0eb47dfc5a3b78a6533ffeb8c52c9f43722b3f398a983 The OpenSSF Package Analysis project identified 'aurora-webmail-pro' @ 10.1.0 npm as malicious. It is considered malicious because: - The packag...
The vulnerability of the component responsible for checking installed operating system packages “Aurora” allows a hacker to execute code with elevated privileges.
The vulnerability of the “Avora” operating system’s installed package checking component is related to deficiencies in the control of the parameters of these installed packages. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially...
catalog.auroralibrary.org Cross Site Scripting vulnerability OBB-3738400
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
