16984 matches found
Design/Logic Flaw
Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...
CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...
CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...
CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...
CVE-2023-39348
CVE-2023-39348 affects Spinnaker and is caused by log output for GitHub status notifications being set to FULL, potentially exposing GitHub tokens in logs. The issue is limited to users of GitHub Status Notifications and could enable token exposure with elevated access to repositories outside of ...
PT-2023-26894 · Spinnaker · Spinnaker
Name of the Vulnerable Software and Affected Versions: Spinnaker affected versions not specified Description: Spinnaker is an open source, multi-cloud continuous delivery platform. The log output when updating GitHub status is improperly set to FULL always, which could output GitHub tokens to a l...
Authorization Bypass
chromium is vulnerable to Authorization Bypasses. This obfuscation vulnerability could be exploited by a malicious website. The vulnerability could allow an attacker to hide security warnings and notifications from the user, making it easier to trick the user into granting permissions that they...
CVE-2023-27539
creationtimestamp| type| source ---|---|--- 2023-08-16 15:18:02+00:00| seen| https://t.me/ctinow/130895 2024-05-18 11:01:58+00:00| seen| https://t.me/criticalbug/1137 2025-01-09 00:56:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113795675438289340 2025-01-09 01:14:28+00:00|...
The vulnerability of the Notifications component of the Google Chrome browser allows a hacker to hide a full-screen notification.
The vulnerability of the Notifications component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to conceal full-screen notifications using a specially crafted HTML page...
Debian dla-3521 : thunderbird - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3521 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3521-1 [email protected]...
The vulnerability of the CODESYS Development System, a programming platform for applications, stems from insufficient verification of data authenticity. This allows attackers to modify the content of notifications received via HTTP from the CODESYS notification server.
The vulnerability of the CODESYS Development System, a programming platform for applications, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to modify the content of notifications received through HTTP from the CODESYS...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
Mozilla: Potential permissions request bypass via clickjacking
The Mozilla Foundation Security Advisory describes this flaw as: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the improper handling of insufficient permissions, allowing attackers to carry out clickjacking attacks.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper handling of insufficient permissions due to an error in calculating the delay for pop-up notifications. Exploiting these vulnerabilities can allow a remote attacker to carry out...
Improper Access Control
chromium is vulnerable to Improper Access Control. The vulnerability exists due to incorrect security UI in Notifications in Google Chrome on Androidwhich allows a remote attacker to obscure the full screen notification via a crafted HTML page...