5521 matches found
UBUNTU-CVE-2024-46757
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2024-46700
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-46700
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EJBCA 安全漏洞
EJBCA is an open source Public Key Infrastructure PKI and Certificate Authority CA software from Keyfactor Open Source. A security vulnerability exists in EJBCA versions prior to 8.3.1 that stems from the length of the salt value in the CMP CLI client does not comply with the security requirement...
CVE-2024-8506
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.5)
The version of AOS installed on the remote host is prior to 6.8.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.5 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than...
CVE-2024-8491
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2024-44955
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-44955
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-44972
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-44952
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-7346
Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake for a networked connection. This has been corrected so that default certificates are no longer capable of overriding host name validation and will need to b...
CVE-2024-7346
Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake for a networked connection. This has been corrected so that default certificates are no longer capable of overriding host name validation and will need to b...
CVE-2024-38456
HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user non-admin can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the...
CVE-2024-38456
HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user non-admin can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the...
CVE-2024-38456
CVE-2024-38456 describes an insecure file and folder permissions vulnerability in prunsrv.exe affecting HIGH-LEIT runtimes (V05.08.01.03 and V04.25.00.00 to 4.25.01.01) for Windows from Vivavis. The issue allows a non-admin user to exploit weak permissions to escalate to NT AUTHORITY\SYSTEM and e...
Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals
The most dangerous vulnerability you've never heard of. In the world of cybersecurity, vulnerabilities are discovered so often, and at such a high rate, that it can be very difficult to keep up with. Some vulnerabilities will start ringing alarm bells within your security tooling, while others ar...
PT-2024-38781 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
NULL Pointer Dereference
Fort is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to a malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field which For...