Lucene search
+L

12801 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/08 12:0 a.m.15 views

The vulnerability of the Intel Raid Web Console web console, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of the Intel Raid Web Console web console is related to pointer aliasing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS5.5AI score0.00132EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.8 views

The vulnerability of the DevTools console in the Firefox web browser, related to the information disclosure feature, allows attackers to gain access to confidential data.

The vulnerability of the DevTools console in the Firefox web browser relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

5.3CVSS6.6AI score0.00496EPSS
SaveExploits0References10Affected Software4
Vulnrichment
Vulnrichment
added 2024/11/06 4:29 p.m.13 views

CVE-2024-20484 Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

7.5CVSS7AI score0.00635EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/11/06 2:57 p.m.48 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.53 packages and security update

Red Hat OpenShift Container Platform release 4.13.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

8.2CVSS6.9AI score0.01336EPSS
SaveExploits0References7
HPE Security Bulletins
HPE Security Bulletins
added 2024/11/06 12:0 a.m.9 views

HPESBGN04727 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM) Software, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Denial of Service DoS; Remote: Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC Prior to 3.1.10 CVSS Scores: | CVE | CVSS Vector | Base Score | |...

10CVSS6.5AI score0.04215EPSS
SaveExploits6
NVD
NVD
added 2024/11/05 8:15 p.m.37 views

CVE-2024-51752

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.13...

5.5CVSS0.00246EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/05 8:15 p.m.39 views

CVE-2024-51753

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.4.1. A...

2.1CVSS0.00217EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/05 7:16 p.m.21 views

CVE-2024-51752 Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.13...

2.1CVSS6.8AI score
SaveExploits0References5
OSV
OSV
added 2024/11/05 7:14 p.m.22 views

CVE-2024-51753 Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.4.1. A...

2.1CVSS6.7AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/11/05 5:34 p.m.22 views

@workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled

Impact Refresh tokens are logged to the console when the disabled by default debug flag, is enabled. Patches Patched in https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2...

5.5CVSS6.7AI score0.00246EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/11/05 5:34 p.m.8 views

GHSA-5WMG-9CVH-QW25 @workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled

Impact Refresh tokens are logged to the console when the disabled by default debug flag, is enabled. Patches Patched in https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2...

2CVSS6.3AI score0.00246EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/05 12:0 a.m.15 views

PT-2024-34883

Name of the Vulnerable Software and Affected Versions AuthKit library for Next.js versions prior to 0.13.2 Description The issue concerns the logging of refresh tokens to the console when the debug flag is enabled. This flag is disabled by default. There are no known workarounds for this issue...

5.5CVSS6.6AI score0.00246EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.7 views

AuthKit Next.js Library 日志信息泄露漏洞

AuthKit Next.js Library is an open source Next.js AuthKit library for WorkOS. A logging information disclosure vulnerability exists in the AuthKit Next.js Library, where a refresh token is logged to the console when the "debug" flag is enabled, which is disabled by default...

5.5CVSS6AI score0.00246EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2024/11/04 10:13 p.m.152 views

Exploit for Code Injection in Lubus Wp_Query_Console

CVE-2024-50498 WP Query Console = 1.0 - Unauthenticated Re...

10CVSS10AI score0.53135EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2024/11/04 12:0 a.m.19 views

RHEL 6 : openstack-nova (RHSA-2014:1689)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1689 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...

6.5CVSS5.7AI score0.02027EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/01 6:35 p.m.25 views

Security Bulletin: IBM Aspera Console has improved security for user input validation (CVE-2011-4969)

Summary This Security Bulletin addresses a vulnerability that has been remediated in IBM Aspera Console 3.4.5 PL1. Vulnerability Details CVEID:CVE-2011-4969 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input when handling the...

4.3CVSS6.3AI score0.19191EPSS
SaveExploits1Affected Software5
RedHat Linux
RedHat Linux
added 2024/10/31 4:1 a.m.33 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.37 packages and security update

Red Hat OpenShift Container Platform release 4.15.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

8.2CVSS6.9AI score0.01336EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.8 views

The vulnerability of the Dell OpenManage Enterprise console, related to the lack of protective measures for the SQL query structure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Dell OpenManage Enterprise system management console is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.3CVSS5.6AI score0.00316EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.14 views

The vulnerability of the Dell OpenManage Enterprise system management console, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Dell OpenManage Enterprise system management console is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6AI score0.00546EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.14 views

The vulnerability of the web-based console of the network device Ivanti Cloud Services Appliance allows a hacker to execute arbitrary code.

The vulnerability of the network device administrator web console of Ivanti Cloud Services Appliance is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.62785EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder