Design/Logic Flaw

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48220

The CVE-2022-48220 issue affects HP Desktop PC products using the HP TamperLock feature and may allow intrusion detection bypass through a physical attack. The root cause is tied to the TamperLock implementation; HP has released firmware and guidance to mitigate these vulnerabilities, with deskto...

CVE-2022-48219

CVE-2022-48219 affects HP Desktop PC products using the HP TamperLock feature. The issue arises from insufficient input validation in the HP TamperLock function within the UEFI/BIOS, potentially allowing intrusion-detection bypass via a physical attack. HP has released firmware and guidance to mi...

Default configuration

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...

CVE-2023-6138

CVE-2023-6138 concerns the system BIOS on HP Workstation PCs, with potential for privilege escalation, arbitrary code execution, or denial of service. Evidence across sources notes HP is releasing mitigation and provides BIOS updates (e.g., HP HPSBHF03915 and accompanying SoftPaqs) to address the...

CVE-2023-49721

CVE-2023-49721 describes an insecure default in Ubuntu’s EDK2 firmware where UEFI Shell access was left enabled in LXD, enabling an OS-resident attacker with local access to bypass Secure Boot. Connected documents corroborate a cross-release pattern (Ubuntu edk2 packages) and note remediation in ...

CVE-2023-48733

Summary: CVE-2023-48733 describes an insecure default in Ubuntu’s EDK2 firmware that enables the UEFI Shell, allowing an OS-resident attacker to bypass Secure Boot locally. What is affected: Ubuntu’s edk2 UEFI firmware packages (EDK2) shipped with a default that enables the UEFI Shell. Root cause...

CVE-2024-1471

CVE-2024-1471 is an HTML injection vulnerability affecting Tenable Security Center (prior to 6.3.0). An authenticated administrator could modify Repository parameters, potentially causing HTML redirection. Impact is described as Medium (per CVSS metrics: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N or I:L...

Design/Logic Flaw

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of...

CVE-2024-25619

CVE-2024-25619 affects Mastodon releases 4.2.6, 4.1.14, 4.0.14, and 3.5.18. Root cause: Doorkeeper’s relationship between Applications and Access Tokens used dependent: delete_all, so the after_commit callback on AccessTokenExtension did not fire, leaving the streaming server informed of destroye...

Authorization

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUBTOKEN. To exploit this vulnerability, an attacker would need access...

CVE-2024-1482

CVE-2024-1482 describes an incorrect authorization flaw in GitHub Enterprise Server that could let an attacker with access to the server create new branches in public repositories and run arbitrary GitHub Actions workflows using the GITHUB_TOKEN. Affected versions: all after 3.8 and before 3.12. ...

Remote code execution

Redaxo v5.15.1 was discovered to contain a remote code execution RCE vulnerability via the component /pages/templates.php...

Design/Logic Flaw

Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access...

Input validation

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address...

CVE-2024-0011

PAN-OS contains a reflected Cross-Site Scripting (XSS) vulnerability in the Captive Portal feature that can execute malicious JavaScript in an authenticated user’s browser when a link is clicked, enabling phishing and potential credential theft. Concrete details in the connected sources specify a...

CVE-2024-0009

The CVE-2024-0009 entry documents an improper IP-address verification vulnerability in Palo Alto Networks PAN-OS GlobalProtect gateway. Affected software: PAN-OS with GlobalProtect gateway (as referenced by Palo Alto Networks advisories). Root cause: improper verification in the GlobalProtect gat...

CVE-2024-0008

CVE-2024-0008 is the Palo Alto Networks PAN-OS web interface session expiration flaw. Connected sources confirm the issue is an Insufficient Session Expiration in PAN-OS, enabling unauthorized access under certain conditions. Affected component is the PAN-OS management web interface; root cause i...

CVE-2024-0007

CVE-2024-0007 is a stored XSS in Palo Alto Networks PAN-OS web interface on Panorama devices. An authenticated read-write administrator can store a JavaScript payload, enabling impersonation of another admin. Public details consistently describe the flaw but do not provide a universal fixed versi...

Design/Logic Flaw

When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Securi...