SUSE CVE-2024-52801

sftpgo is a full-featured and highly configurable event-driven file transfer solution. Server protocols: SFTP, HTTP/S, FTP/S, WebDAV. The OpenID Connect implementation allows authenticated users to brute force session cookies and thereby gain access to other users' data, since the cookies are...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

The vulnerability of Adobe Connect web conference software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of Adobe Connect web conference software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. Ivanti Connect Secure suffers from a buffer overflow vulnerability that originates from a boundary error in IPsec when handling untrusted input. An attacker could exploit the vulnerability to cause a denial of servi...

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. Ivanti Connect Secure suffers from an out-of-bounds read vulnerability that stems from a lack of proper authentication of user-supplied data in IPsec, which can be exploited by an attacker to cause a denial of servi...

WordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ImmoToolBox Connect versions = 1.3.3...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37401

CVE-2024-37401 affects Ivanti Connect Secure IPsec with an out-of-bounds read in versions before 22.7R2.1, enabling a remote unauthenticated attacker to cause a denial of service. Public disclosures and advisories confirm the vulnerability lies in the IPsec functionality and can be exploited remo...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

Ivanti Connect Secure (ICS) is affected by CVE-2024-37377 due to a heap-based buffer overflow in IPsec prior to version 22.7R2.3, allowing a remote unauthenticated attacker to cause a Denial of Service. Public sources confirm this vulnerability in ICS/IPsec and note a fixed release path: update t...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

ceph: rhceph-container: Authentication bypass in CEPH RadosGW

A vulnerability in the Ceph Rados Gateway RadosGW OIDC provider allows attackers to bypass JWT signature verification by supplying a token with "none" as the algorithm alg. This occurs because the implementation fails to enforce strict signature validation, enabling attackers to forge valid token...

Vulnerabilities fixed in Adobe Connect

Adobe has fixed vulnerabilities in Adobe Connect Versions 12.6, 11.4.7 and earlier. The vulnerabilities include both stored and reflected Cross-Site Scripting XSS that allow attackers to insert and execute malicious scripts in users' browsers. This can lead to unauthorized actions in the context ...

The vulnerability of the IBM DB2 database management system (including the IBM DB2 Connect server) is related to uncontrolled memory allocation, which allows a attacker to cause a service failure.

The vulnerability of the IBM DB2 database management system, including IBM DB2 Connect and the IBM DB2 Connect server, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted query...

PT-2024-27507 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.3 Description: A heap-based buffer overflow in IPsec allows a remote unauthenticated attacker to cause a denial of service. Recommendations: For versions prior to 22.7R2.3, update to version...

PT-2024-27522 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 Description: The issue is related to an out-of-bounds read in IPsec, allowing a remote unauthenticated attacker to cause a denial of service. Recommendations: For versions prior to 22.7R2.1,...