13012 matches found
Juniper Junos OS Vulnerability (JSA88115)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88115 advisory. - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000...
Siemens Authentication Bypass Vulnerability in Various Products
SIMATIC Drive Controllers are designed for the automation of production machines, combining the functionality of SIMATIC S7-1500 CPUs and SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the pc-based version of the SIMATIC S7-1500 controller, including optional visualization and...
PT-2024-32863 · Gradio · Gradio
Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 5 Description: This issue involves insecure communication between the FRP client and server when Gradio's share=True option is used. HTTPS is not enforced on the connection, allowing attackers to intercept and read...
Security Bulletin: This Power System update is being released to address CVE-2023-45871
Summary The Linux kernel is used by the Virtualization Management Interface in PowerVM to support network communication with the Hardware Management Console. This bulletin provides a remediation for the impacted vulnerability, CVE-2023-45871, by upgrading PowerVM and thus addressing the exposure ...
Malicious code in customer-feedback-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf15dcf2318155d18aee75e77887bfe0709b51548def3d5e5906527670e25631 The OpenSSF Package Analysis project identified 'customer-feedback-widget' @ 1.5.8 npm as malicious. It is considered malicious because: - The...
How to handle vulnerability reports in aviation
TL;DR Always thank researchers for reporting vulnerabilities. Acknowledging their efforts can set the right tone. Lead all communications with researchers. Don’t let legal or PR teams take over. Provide regular updates to avoid miscommunication. Keep researchers informed throughout the process. W...
PT-2024-33890
Name of the Vulnerable Software and Affected Versions Llama Stack versions prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 Meta Llama Framework affected versions not specified Description Llama Stack, prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005, used Pickle as a...
CVE-2024-45918
Fujian Kelixin Communication Command and Dispatch Platform =7.6.6.4391 is vulnerable to SQL Injection via /client/getgisfence.php...
Malicious code in sd-template-main (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1d800f01a52aafc7bee8ab45032560696e9e36ca3c902a4adc7d1245294fc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-41798
A vulnerability has been identified in SENTRON 7KM PAC3200 All versions. Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by...
CVE-2024-41798
A vulnerability has been identified in SENTRON 7KM PAC3200 All versions. Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by...
MAL-2024-9106 Malicious code in @fdp-tools/helm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bef4a02ea616732eda209303ce418b0fbf07d43995a8ac48bada7b7967f78819 The OpenSSF Package Analysis project identified '@fdp-tools/helm' @ 0.1.11 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9107 Malicious code in @fdp-tools/observability (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3470fe72252929511b982b06c857fe2d4c8030b512a880c9bc15a088be17c838 The OpenSSF Package Analysis project identified '@fdp-tools/observability' @ 1.1.3 npm as malicious. It is considered malicious because: - The...
MAL-2024-9108 Malicious code in @fdp-tools/snap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4b98f26659e9761c555996041aa767d2fb71d33dd1310bfad77040f26390fd9 The OpenSSF Package Analysis project identified '@fdp-tools/snap' @ 0.0.10 npm as malicious. It is considered malicious because: - The package...
Malicious code in @fdp-tools/snap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4b98f26659e9761c555996041aa767d2fb71d33dd1310bfad77040f26390fd9 The OpenSSF Package Analysis project identified '@fdp-tools/snap' @ 0.0.10 npm as malicious. It is considered malicious because: - The package...
CVE-2024-7206
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...
CVE-2024-34671
Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...
CVE-2024-34670
Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...
CVE-2024-34671
Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...
CVE-2024-34671
Summary: CVE-2024-34671 affects Samsung Internet prior to 26.0.3.1. The issue is the use of implicit intents for sensitive translation-related communication, which can allow a local attacker to obtain sensitive information. User interaction is required to trigger exploitation. Affected software: ...