11981 matches found
Argo CD 安全漏洞
Argo CD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...
PT-2024-18251 · Hypr · Hypr Passwordless
Name of the Vulnerable Software and Affected Versions: HYPR Passwordless versions prior to 9.1 Description: The issue is related to an Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows, which allows for a Malicious Software Update. Recommendations: For...
USN-6766-3: Linux kernel (AWS) vulnerabilities
It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service system crash. CVE-2024-1151 Sander Wiebing, Alvise de Faveri Tron, Herbert...
Vulnerability of Windows Cryptographic Operating System services, allowing attackers to execute arbitrary code
The vulnerability of Windows Cryptographic Operating Systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2024-4603
...
Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2024-1700)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-31410
The devices which CyberPower PowerPanel manages use identical certificates based on a hard-coded cryptographic key. This can allow an attacker to impersonate any client in the system and send malicious data...
CVE-2024-31410 CyberPower PowerPanel business Use of Hard-coded Cryptographic Key
The devices which CyberPower PowerPanel manages use identical certificates based on a hard-coded cryptographic key. This can allow an attacker to impersonate any client in the system and send malicious data...
CVE-2024-31410 CyberPower PowerPanel business Use of Hard-coded Cryptographic Key
The devices which CyberPower PowerPanel manages use identical certificates based on a hard-coded cryptographic key. This can allow an attacker to impersonate any client in the system and send malicious data...
CVE-2024-31410
CVE-2024-31410 affects CyberPower PowerPanel software where devices use identical certificates based on a hard-coded cryptographic key, enabling impersonation of any client and sending malicious data. Connected sources confirm vulnerable PowerPanel components and reference mitigations. The offici...
USN-6766-2: Linux kernel vulnerabilities
It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service system crash. CVE-2024-1151 Sander Wiebing, Alvise de Faveri Tron, Herbert...
BIT-CILIUM-2024-28860
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...
BIT-CILIUM-OPERATOR-2024-28860
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...
Security Bulletin: IBM QRadar SIEM protocols are vulnerable to information exposure and denial of service (CVE-2023-31582, CVE-2023-51775)
Summary The Jose4j library is vulnerable to a denial of service, caused by improper input validation. It could also allow a remote attacker to obtain sensitive information using cryptographic attacks. Vulnerability Details CVEID:CVE-2023-31582 DESCRIPTION: Jose4J could allow a remote attacker to...
The vulnerability of the `__sev_platform_shutdown_locked()` function in the Linux operating system’s cryptographic processor driver by AMD allows a hacker to trigger a shutdown failure.
The vulnerability of the sevplatformshutdownlocked function in the drivers/crypto/ccp/sev-dev.c file of the Linux operating system’s cryptographic processor driver software is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service...
Dell PowerScale OneFS Encryption Issue Vulnerability
Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS has a cryptographic issue vulnerability that arises from the presence of a vulnerability in the use of corrupted or risky...
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
Problem The ShowImageController eID txcmsshowpic lacks a cryptographic HMAC-signature on the frame HTTP query parameter e.g. /index.php?eID=txcmsshowpic?file=3&...&frame=12345. This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side...
CVE-2024-30020
Windows Cryptographic Services Remote Code Execution Vulnerability...