825 matches found
CVE-2023-22524
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code...
Remote code execution
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code...
CVE-2023-22524
CVE-2023-22524 describes a remote code execution in the Atlassian Companion App for macOS. The issue arises from how the app handles certain file types and its WebSocket-based communication, allowing an attacker to bypass the app’s blocklist and macOS Gatekeeper, potentially enabling arbitrary co...
CVE-2023-22524
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code...
PT-2023-7590 · Atlassian · Companion App
Name of the Vulnerable Software and Affected Versions: Atlassian Companion App for MacOS affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Atlassian Companion App for MacOS. An attacker could utilize WebSockets to bypass Atlassian...
Compromised minter can change route to misdirect user funds
Lines of code Vulnerability details Impact The current security assumption revolves around the compromise of a minter, wherein they mint 200k USDe tokens for themselves and subsequently redeem them within the contract. Under this assumption, as long as the gatekeeper key remains secure, the minte...
Minter can censor GATEKEEPER and mint uncollateralized for a prolonged period of time
Lines of code Vulnerability details Impact Ethena explicitly mentions their protection against a compromised minter, the mentioned maximum loss is $100.000. The protection against a compromised minter rests on the GATEKEEPER role which is a system running on AWS set to remove the minter if mints...
Wrong estimation of acceptable risk of the protocol losses
Lines of code Vulnerability details Impact The protocol losses in case compromised MINTERS or REDEEMERS can be higher than expected due to the GATEKEEPER suppression. Attacker can frontrun the GATEKEEPER and fill block limit with own transactions while it is profitable. Average losses can be more...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: slsa-verifier, aactl, aws-efs-csi-driver-fips, volume-modifier-for-k8s-fips, plutono-fips, prometheus-stackdriver-exporter, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, falcoctl-fips, k3d, scorecard, kubernetes-csi-livenessprobe,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubescape, aactl, scorecard, terraform-provider-sendgrid, buildkitd, dgraph, slsa-verifier, k3d, kubevela, up, cortex, src, kubeflow, spark-operator...
GHSA-RCJV-MGP8-QVMR vulnerabilities
Vulnerabilities for packages: metrics-server-fips, kubernetes-fips, buildkitd, kubernetes, prometheus-adapter, kubevela, rancher-webhook, up, rancher-webhook-fips, kube-oidc-proxy, caddy, k3s...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: buildkitd, kubevela, up, prometheus-adapter, k3s, caddy, kubernetes...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: metrics-server-fips, kubernetes-fips, buildkitd, kubernetes, prometheus-adapter, kubevela, rancher-webhook, up, rancher-webhook-fips, kube-oidc-proxy, caddy, k3s...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: yq, nfs-subdir-external-provisioner, aactl, prometheus-statsd-exporter, cue, k3d, kubewatch, prometheus-postgres-exporter, crossplane-provider-azure, gomplate, flux-source-controller, configmap-reload-fips, dgraph, dex, prometheus-node-exporter-fips,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: buildkitd, nghttp2, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, pulumi-language-java, scorecard, gitness, dex, certificate-transparency, amass, atlantis, wireguard-go, rqlite, gomplate, prometheus-adapter, hey, kpt, secrets-store-csi-driver-provider-gcp...
CVE-2023-41067
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-41067
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...