SonicWall Connect Tunnel Multiple Vulnerabilities (SNWLID-2024-0017)

According to its self-reported version, the remote installed SMA1000 Connect Tunnel client is vulnerable to a number of vulnerabilities: - The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client...

Dell Secure Connect Gateway Trust Management Issue Vulnerability

The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A trust management issue vulnerability exists in Dell Secure Connect Gateway SCG version 5.24.00.14, which stems from a certificate validation vulnerability that contains an error and can be exploited by a...

Dell Secure Connect Gateway Encryption Issue Vulnerability (CNVD-2024-41686)

The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A cryptographic issue vulnerability exists in Dell Secure Connect Gateway version 5.24.00.14, which arises from the use of a corrupted or risky encryption algorithm, and can be exploited by a low-privileged...

Unspecified Vulnerability in Dell Secure Connect Gateway

The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A security vulnerability exists in Dell Secure Connect Gateway SCG version 5.24.00.14, which originated from a default privilege vulnerability containing an error, and can be exploited by a local attacker wi...

Improper Access Control

github.com/landlock-lsm/go-landlock is vulnerable to Improper Access Control. The vulnerability is due to the incorrect handling of TCP bind and connect operations in the BestEffort mode. An attacker can bypass intended networking through landlock.V4, landlock.V5, or self-configured restrictions ...

CVE-2024-10125

The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...

CVE-2024-10125 Lack of JWT issuer and signer validation

The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...

CVE-2024-10125 Lack of JWT issuer and signer validation

The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...

CVE-2024-10125

CVE-2024-10125 concerns the Amazon.ApplicationLoadBalancer.Identity.AspNetCore middleware used with ALB OpenID Connect in ASP.NET Core deployments. The root cause is that JWT handling performs signature validation but fails to validate the JWT issuer and signer identity, enabling a signed token f...

Adobe Connect <= 11.9.975.228 Vulnerability (APSB16-17)

The version of Adobe Connect installed on the remote host is prior to 11.9.976.291. It is, therefore, affected by a vulnerability as referenced in the apsb16-17 advisory. - Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local use...

AWS ALB Route Directive Adapter For Istio 安全漏洞

AWS ALB Route Directive Adapter For Istio is an AWS ALB Route Directive Adapter for Istio open source by Amazon Web Services. A security vulnerability exists in AWS ALB Route Directive Adapter For Istio v1.0 and v1.1 that stems from the use of a JWT for authentication that lacks proper signer and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a Bluetooth L2CAP protocol post-release reuse issue in l2capconnect...

Adobe Connect <= 9.7.5 Multiple Vulnerabilities (APSB18-22)

The version of Adobe Connect installed on the remote host is prior to 9.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb18-22 advisory. - Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lea...

CVE-2024-49327

Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through = 1.0.2...

CVE-2024-49327

Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2...

CVE-2024-49327 WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2...

CVE-2024-49327

CVE-2024-49327 affects the WordPress plugin Woostagram Connect (versions

CVE-2024-49327 WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through = 1.0.2...

WordPress plugin Woostagram Connect 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

CVE-2024-37404

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution...