6097 matches found
3 Recommendations to Ensure Your API Security Solution can Drive Data Visibility and Quality
Today at least 90% of developers are using APIs in cloud-native web application development. According to new data collected by Forrester Research and presented in their report, Improve API Performance with a Sound API Security Strategy, 62 percent of IT decision makers believe the value they gai...
Microsoft DWM Core Library Elevation of Privilege Vulnerability (CNVD-2022-45485)
Microsoft DWM Core Library is the United States Microsoft Microsoft company's Microsoft windows get a core library. An elevation of privilege vulnerability exists in the Microsoft DWM Core Library. The vulnerability arises from an incorrect programmatic call to a high-level native procedure. An...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.4 in openshift-gitops-argocd container. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.3 in openshift-gitops-argocd container. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.5 in openshift-gitops-argocd container. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.3 in openshift-gitops-argocd container. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Security Bulletin: OpenSSL (Publicly disclosed vulnerability)
Summary IBM MobileFirst Platform Foundation has addressed the following vulnerability by updating the version of OpenSSL. Vulnerability Details CVEID:CVE-2021-4160 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by a carry propagation flaw in the MIPS32 and MIPS64 squarin...
Apple macOS Monterey 权限许可和访问控制问题漏洞
Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey versions 12.0 21A344 - 12.3.1 21E258 have a privilege-granting and access-control issue vulnerability that stems from a plug-in that may be able to inherit an...
Apple tvOS 竞争条件问题漏洞
Apple tvOS is a smart TV operating system from Apple, Inc. Apple tvOS versions 15.0 19J346 - 15.4.1 19L452 contain a Competitive Condition Issue vulnerability that stems from a contention condition in IOKit. An attacker could exploit the vulnerability to elevate privileges on the system via a...
Apple tvOS 缓冲区错误漏洞
Apple tvOS is a smart TV operating system from Apple, Inc. A buffer error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from a boundary error in the operating system kernel subsystem. An attacker exploiting this vulnerability could elevate privileges on the...
Withdrawing ETH collateral with max uint256 amount value reverts transaction
Lines of code Vulnerability details Impact Withdrawing ETH collateral via the withdrawCollateral function using typeuint256.max for the amount parameter reverts the transaction due to asset being the zero-address and IERC20Detailedasset.decimals not working for native ETH. Proof of Concept...
com.kloudtek.ktspring:ktspring-artemis (=1.0), com.kloudtek.ktspring:ktspring-standalone-artemis-hibernate (=1.0) +245 more potentially affected by CVE-2017-12174 via org.apache.activemq:artemis-native (>=1.0.0 <=2.3.0)
org.apache.activemq:artemis-native MAVEN version =1.0.0, =2.2.94, =2.2.90, =2.2.97, =2.2.97, =2.2.94, =2.2.90, =2.2.97, =2.2.94, =1.5.0, =2.3.0 - org.apache.activemq.examples.broker:auto-closeable =1.1.0 and more Source cves: CVE-2017-12174 Source advisory: OSV:GHSA-GC96-H5PR-839J...
CVE-2022-29930
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1...
CVE-2022-29930
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1...
Design/Logic Flaw
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1...
CVE-2022-29930
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1...
CVE-2022-29930
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1...
CVE-2022-29930
CVE-2022-29930 affects JetBrains Ktor Native 2.0.0, where the SHA1 implementation returned the same value due to a faulty hashing function. The issue has been fixed in Ktor 2.0.1. Public references from NVD/Red Hat OSV and related sources corroborate the fix version and the affected component. If...
JetBrains Ktor Native 安全特征问题特征问题漏洞
JetBrains Ktor Native is an asynchronous framework for creating microservices, web applications, and more from the Czech company JetBrains. A security signature issue vulnerability exists in JetBrains Ktor Native versions prior to 2.0.1, which stems from the fact that SHA1 can return the same val...
PT-2022-19914 · Jetbrains · Jetbrains Ktor Native
Name of the Vulnerable Software and Affected Versions: JetBrains Ktor Native version 2.0.0 Description: The SHA1 implementation was returning the same value, indicating a potential issue with the hashing function. This issue was resolved in a later version. Recommendations: For version 2.0.0,...