Ivanti Connect Secure Out-of-Bounds Read Vulnerability

Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. Ivanti Connect Secure suffers from an out-of-bounds read vulnerability that stems from a lack of proper authentication of user-supplied data in IPsec, which can be exploited by an attacker to cause a denial of servi...

Ivanti Connect Secure Buffer Overflow Vulnerability

Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. Ivanti Connect Secure suffers from a buffer overflow vulnerability that originates from a boundary error in IPsec when handling untrusted input. An attacker could exploit the vulnerability to cause a denial of servi...

Adobe Connect Code Execution

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Connect URL Redirection

The vulnerability of Adobe Connect web conferencing software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Adobe Connect Code Execution

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Connect Code Execution

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Synology Router Manager WiFi Connect Setting Domain Attack

The vulnerability of the WiFi Connect Setting component of the operating system used to manage Synology Router Manager devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Adobe Connect Code Execution

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Connect Code Execution

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Connect URL Redirection

The vulnerability of Adobe Connect web conferencing software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2024-49765 Bypass of Discourse Connect using other login paths if enabled in Discourse

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

CVE-2024-49765 Bypass of Discourse Connect using other login paths if enabled in Discourse

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

CVE-2024-49765

CVE-2024-49765 affects Discourse where sites enabling Discourse Connect alongside local login methods could allow an attacker to bypass Discourse Connect to create accounts and log in. The issue is described as a bypass of login paths rather than a remote exploit; affected component is the Discou...

CVE-2024-49765 Bypass of Discourse Connect using other login paths if enabled in Discourse

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to multiple vulnerabilities due to python - urllib3

Summary IBM Sterling Connect:Direct Web Service uses python - urllib3 ,urllib3 could allow a remote authenticated attacker to obtain sensitive information, caused by the failure to strip the Proxy-Authorization header during cross-origin redirects. Vulnerability Details CVEID:CVE-2024-37891...

CVE-2024-49765: Exposure of Private Personal Information to an Unauthorized Actor

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

Discourse security vulnerabilities

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email, and chat room features. A security vulnerability exists in Discourse that stems from enabling local login and could allow an attacker to bypass Discourse Connect to create...

PT-2024-33675

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest version Description: The issue affects sites using Discourse Connect with local logins enabled, potentially allowing attackers to bypass Discourse Connect and create accounts or log in. This problem has...

Security update for docker

This update for docker fixes the following issues: Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last update: Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker which...

PT-2024-10225 · Schneider Electric · Schneider Electric Remoteconnect +1

The affected software is Schneider Electric RemoteConnect and SCADAPack x70 Utilities, which have a deserialization of untrusted data issue. This could lead to loss of confidentiality, integrity, and potential remote code execution on a workstation when a non-admin authenticated user opens a...