CVE-2019-19753

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using...

CVE-2019-19752

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...

CVE-2019-19755

The ethOS operating system, versions 1.3.3 and earlier , is vulnerable because it ships with SSH host keys baked into the installation image . This configuration enables man-in-the-middle attacks and allows for the trivial identification of all public IPv4 nodes using Shodan.io. To mitigate this ...

CVE-2019-19752

The nvOC speech coding scheme (versions through 3.2 ) is vulnerable because SSH host keys are baked into the installation image. This hard-coded cryptographic key issue enables man-in-the-middle attacks and allows for the trivial identification of all public IPv4 nodes using Shodan.io . A proof-o...

CVE-2024-2877: Insertion of Sensitive Information into Log File

Vault Enterprise, when configured with performance standby nodes and a configured audit device, will inadvertently log request headers on the standby node. These logs may have included sensitive HTTP request information in cleartext. This vulnerability, CVE-2024-2877, was fixed in Vault Enterpris...

CVE-2019-19753: Use of Hard-coded Cryptographic Key

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using...

Important: Red Hat Security Advisory: Service Telemetry Framework 1.5.4 security update

An update is now available for Service Telemetry Framework 1.5.4 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2024-0218 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1

A Denial of Service Dos vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop...

CVE-2024-2243 Csmock: command injection vulnerability in csmock-plugin-snyk

A vulnerability was found in csmock where a regular user of the OSH service anyone with a valid Kerberos ticket can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers...

CVE-2024-30708

CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.

CVE-2024-29439

CVE-2024-29439 is rejected/not used per initial description.

CVE-2024-30722

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30718

CVE-2024-30718 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30702

CVE-2024-30702 entry is rejected; not an active vulnerability entry.

CVE-2024-30691

CVE-2024-30691 is rejected; this entry is not active and does not represent a vulnerability.

PT-2024-23584 · Unknown · Ros2 Dashing Diademata

Name of the Vulnerable Software and Affected Versions: ROS2 Dashing Diademata versions 2 Description: The issue allows remote attackers to escalate privileges and inject unauthorized nodes. Recommendations: For ROS2 Dashing Diademata version 2, at the moment, there is no information about a newer...

PT-2024-23557 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: The issue allows remote attackers to gain control of multiple ROS2 nodes, potentially compromising system integrity, executing arbitrary commands, and disclosing sensitive information. Recommendations:...

PT-2024-23567 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered that allows remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Iron Irwini...

CVE-2024-30675

CVE-2024-30675 entry is rejected/not used and does not represent an active vulnerability entry.

PT-2024-23593 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Dashing Diademata version 2 Description: An issue in ROS2 allows remote attackers to execute arbitrary code via packages or nodes. Recommendations: For ROS2 Dashing Diademata version 2, at the moment, there is no information about a newe...