CVE-2022-25377

The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APPSTORAGECERTIFICATES/.well-known/acme-challenge must exist on disk. This pathname is automatically created if...

CVE-2022-25377

The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APPSTORAGECERTIFICATES/.well-known/acme-challenge must exist on disk. This pathname is automatically created if...

CVE-2022-25377

The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APPSTORAGECERTIFICATES/.well-known/acme-challenge must exist on disk. This pathname is automatically created if...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2024-26130 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2024-26130 Source advisory: OSV:PYSEC-2024-225...

PT-2024-20489

Name of the Vulnerable Software and Affected Versions Yealink Configuration Encrypt Tool versions prior to 1.2 Yealink Configuration Encrypt Tool RSA version affected versions not specified Description An issue was discovered in the Yealink Configuration Encrypt Tool where a single hardcoded key ...

CVE-2022-48625

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

CVE-2022-48625

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

Design/Logic Flaw

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

Yealink Config Encrypt Tool Security Vulnerability

YeaLink Yealink Config Encrypt Tool is a configuration encryption tool from China YeaLink. A security vulnerability exists in Yealink Config Encrypt Tool versions prior to 1.2, which stems from a possible decryption risk when encrypting Autop deployment files with a default key...

PT-2024-11765

Name of the Vulnerable Software and Affected Versions Yealink Config Encrypt Tool versions prior to 1.2 Description The issue concerns a built-in RSA key pair in the Yealink Config Encrypt Tool, which poses a risk of decryption by an adversary. Recommendations For versions prior to 1.2, consider...

CVE-2022-48625

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

CVE-2022-48625: Use of Hard-coded Cryptographic Key

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

CVE-2022-48625

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

CVE-2022-48625

The Yealink Config Encrypt Tool versions prior to 1.2 contain a built-in RSA key pair, creating a design flaw where an adversary may be able to decrypt configuration files. Specifically, the tool may allow for the decryption of Autop deployment files due to the use of this default key. To mitigat...

PT-2024-1848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a synchronization error when using a shared resource in the Linux kernel's tls encrypt done function. This can lead to a denial of service. The problem arises fro...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2023-50782 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2023-50782 Source advisory: OSV:GHSA-3WW4-GG4F-JR7F...

OESA-2024-1104 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2024-0727 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...

OESA-2024-1081 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

OESA-2024-1066 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...