6993 matches found
PT-2025-42660
Name of the Vulnerable Software and Affected Versions Restaurant Brands International RBI assistant platform versions through 2025-09-06 Description The Restaurant Brands International RBI assistant platform through 2025-09-06 allows obtaining a JWT JSON Web Token which can be used to call an API...
CVE-2025-62647: Incorrect Authorization
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation via improper verification of AWS EC2 identity documents in the aws-iid process. An attacker can cause the system to accept forged identity documents by providing documents with missing or invalid...
go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents
Impact This vulnerability only affects users of the AWS attestor. Users of the AWS attestor could have unknowingly received a forged identity document. While this may seem unlikely, AWS recently issued a security bulletin about IMDS Instance Metadata Service impersonation.^1 There are multiple...
CVE-2025-62375: Improper Certificate Validation
go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...
CVE-2025-21751 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-aws, linux-vmware, linux-azure, linux-qemu...
GHSA-6CPX-W2CG-QMGR vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-aws, linux-vmware, linux-azure, linux-qemu...
GHSA-843P-6JF4-C3R6 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-aws, linux-vmware, linux-azure, linux-qemu...
CVE-2025-11462
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
PT-2025-41361
Critical vulnerability alert - AWS Client VPN for macOS. Vuln info, including versions and reference links, at SecAlerts: CVE-2021-11462, CVSS 9.3 - https://t.co/8NvHlAebRR ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202511462 awsclient aws https://t.co/RVMw6YoXbF...
Ubuntu: Security Advisory (USN-7795-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7792-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-592Q-R679-2JPC vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-aws, linux-azure, linux-aws-generic, linux-vmware-generic, linux-azure-generic, linux-qemu-rc, linux-gcp-generic...
CVE-2023-52979 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-aws, linux-azure, linux-aws-generic, linux-vmware-generic, linux-azure-generic, linux-qemu-rc, linux-gcp-generic...
CVE-2025-11462
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
EUVD-2019-5813
Malware in sbrugna...
EUVD-2018-8409
Malware in sbrugna...
EUVD-2012-3395
Malware in sbrugna...