6828 matches found
PT-2025-42660
Name of the Vulnerable Software and Affected Versions Restaurant Brands International RBI assistant platform versions through 2025-09-06 Description The Restaurant Brands International RBI assistant platform through 2025-09-06 allows obtaining a JWT JSON Web Token which can be used to call an API...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation via improper verification of AWS EC2 identity documents in the aws-iid process. An attacker can cause the system to accept forged identity documents by providing documents with missing or invalid...
go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents
Impact This vulnerability only affects users of the AWS attestor. Users of the AWS attestor could have unknowingly received a forged identity document. While this may seem unlikely, AWS recently issued a security bulletin about IMDS Instance Metadata Service impersonation.^1 There are multiple...
CVE-2025-62375: Improper Certificate Validation
go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...
GHSA-6CPX-W2CG-QMGR vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
GHSA-843P-6JF4-C3R6 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
CVE-2025-21751 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
CVE-2025-11462
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
PT-2025-41361
Critical vulnerability alert - AWS Client VPN for macOS. Vuln info, including versions and reference links, at SecAlerts: CVE-2021-11462, CVSS 9.3 - https://t.co/8NvHlAebRR ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202511462 awsclient aws https://t.co/RVMw6YoXbF...
Ubuntu: Security Advisory (USN-7795-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7792-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-592Q-R679-2JPC vulnerabilities
Vulnerabilities for packages: linux-qemu-rc, linux-gcp-generic, linux-aws, linux-aws-generic, linux-azure-generic, linux-gcp, linux-azure, linux-vmware-generic...
CVE-2023-52979 vulnerabilities
Vulnerabilities for packages: linux-qemu-rc, linux-gcp-generic, linux-aws, linux-aws-generic, linux-azure-generic, linux-gcp, linux-azure, linux-vmware-generic...
CVE-2025-11462
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
EUVD-2019-18374
Malware in sbrugna...
EUVD-2018-8407
Malware in sbrugna...
EUVD-2018-8405
Malware in sbrugna...
EUVD-2018-8335
Malware in sbrugna...