2136 matches found
RHBA-2021:0482 Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 2.0.2 RPMs
Bulletin has no description...
RHSA-2020:2523 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.2 servicemesh-proxy security update
Bulletin has no description...
RHSA-2020:2524 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0 servicemesh-proxy security update
Bulletin has no description...
PT-2024-39115 · Totolink · Totolink Ac1200 T8
Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220 Description: A critical issue affects the setWiFiMeshName function of the file /cgi-bin/cstecgi.cgi. The manipulation of the device name argument leads to buffer overflow. This issue can be...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.1 security update
Red Hat OpenShift Service Mesh Containers for 2.6.1 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Low: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.4 security update
Red Hat OpenShift Service Mesh Containers for 2.5.4 Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.10 security update
Red Hat OpenShift Service Mesh Containers for 2.4.10 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
CVE-2024-45038 Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware
Meshtastic device firmware is a firmware for meshtastic devices to run an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic device firmware is subject to a denial of serivce vulnerability in MQTT handling, fixed in version 2.4.1 of the...
MAL-2024-7907 Malicious code in @adidas-data-mesh/consumer-journey (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdc1beaa9fe8440ba69a69eea5a7a92bc1a37479f9bf0c3f0fed177d303befaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7906 Malicious code in @adidas-data-mesh/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @adidas-data-mesh/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.0 security update
Red Hat OpenShift Service Mesh Containers for 2.6.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
MAL-2024-7872 Malicious code in @adidas-data-mesh/common-aws (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ce6b2f5a21d37c95f132da06bc595d120ec7c4aed20d1d4d517a51d85db6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @adidas-data-mesh/common-aws (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ce6b2f5a21d37c95f132da06bc595d120ec7c4aed20d1d4d517a51d85db6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-11623 · Motorola · Q14 Mesh Router Firmware +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A command injection issue could allow an authenticated user to execute operating system commands as root via a specially crafted API request. Recommendations: At the moment, there i...
PT-2024-11622 · Motorola · Q14 Mesh Router Firmware
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An authentication bypass issue could allow an attacker to access API functions without authentication. Recommendations: At the moment, there is no information about a newer version that...
CVE-2024-36538
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36538
CVE-2024-36538 affects Chaos Mesh (v2.6.3 and earlier). The issue stems from insecure permissions that allow an attacker to access a service account token, enabling data access and privilege escalation. The Red Hat, NVD, OSV, CNNVD, CVE listing all describe the same flaw, with a base CVSS v3.1 sc...