13468 matches found
BIT-GRAFANA-2022-26148
An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the apijsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in...
BIT-ENVOY-2022-29224 Segmentation fault leading to crash in Envoy
Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can “hold” prevent removal upstrea...
BIT-HAPROXY-2021-39242
An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled...
BIT-JAEGER-2020-10750
Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials...
BIT-EJBCA-2021-40087
An issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias configurations of various protocols that use an enrollment secret, any modifications to the secret were logged in cleartext in the audit log that can only be viewed by an administrator. This affects us...
Artica Proxy 4.50 Unauthenticated PHP Deserialization Vulnerability
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the www-data user. Version 4.50 is affected. Title: Artica Proxy Unauthenticated PHP Deserialization Vulnerability Advisory ID:...
Cisco NX-OS Software Link Layer Discovery Protocol DoS (cisco-sa-nxos-lldp-dos-z7PncTgt)
According to its self-reported version, Cisco NX-OS System Software is affected by a denial of service DoS vulnerability. The vulnerability lies in the Link Layer Discovery Protocol LLDP feature of Cisco NX-OS Software and could allow an unauthenticated, adjacent attacker to cause a denial of...
PT-2024-22298 · Jenkins · Jenkins Bitbucket Branch Source Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Bitbucket Branch Source Plugin versions 866.vdea 7dcd3008e and earlier, except version 848.850.v6a a 2a 234a c81 Description: The issue allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: restic, crossplane-provider-aws-elasticache, kots, amass, flannel, prometheus-mongodb-exporter-fips, tigera-operator-fips, prometheus-beat-exporter-fips, prometheus-pushgateway-fips, cert-exporter-fips, nerdctl, prometheus-bind-exporter, nri-prometheus, timoni,...
CVE-2019-18993
creationtimestamp| type| source ---|---|--- 2024-03-05 18:51:57+00:00| seen| https://t.me/ctinow/200569...
CVE-2019-19493
creationtimestamp| type| source ---|---|--- 2024-03-05 14:46:27+00:00| seen| https://t.me/ctinow/200289...
Amazon Linux 2 : edk2 (ALAS-2024-2483)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2483 advisory. EDK2's Network Package is susceptible to an out-of-bounds readvulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. Thisvulnerability can be exploited by an attacke...
Important: edk2
Issue Overview: EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...
R Radio Network FM Transmitter 1.07 system.cgi - Password Disclosure
R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure Vendor: R Radio Network Product web page: http://www.pktc.ac.th Affected version: 1.07 Summary: R Radio FM Transmitter that includes FM Exciter and FM Amplifier parameter setup. Desc: The transmitter suffers from an improper acces...
braithwaitesgarage.co.uk Cross Site Scripting vulnerability OBB-3862859
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hahn-kolb.cz Cross Site Scripting vulnerability OBB-3861939
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-20294
A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of specific fields i...
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in QOS.ch Sarl Logback
Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of QOS.ch Sarl Logback Vulnerability Details CVEID:CVE-2023-6481 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a denial of service, caused by a serialization flaw in the logback receiver component...
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in follow-redirects
Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of follow-redirects. Vulnerability Details CVEID:CVE-2023-26159 DESCRIPTION: follow-redirects could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An...