8006 matches found
SUSE CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
GHSA-3M87-5598-2V4F Withdrawn Advisory: Prometheus XSS Vulnerability
Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not apply to the Prometheus golang package. This link is maintained to preserve external references. Original Description A stored, DOM based, cross-site scripting XSS flaw was found in Prometheus before version...
CISA and Partners Release Advisory on Russian SVR-affiliated Cyber Actors Exploiting CVE-2023-42793
Today, CISA—along with the U.S. Federal Bureau of Investigation FBI, National Security Agency NSA, Polish Military Counterintelligence Service SKW, CERT Polska CERT.PL, and the UK’s National Cyber Security Centre NCSC—released a joint Cybersecurity Advisory CSA, Russian Foreign Intelligence Servi...
Devise Security Breach
Devise is a flexible Warden-based authentication solution for Rails. A security vulnerability exists in versions prior to Devise 3.5.4 that stems from incorrectly disposing of a session cookie, which could allow an attacker to gain unauthorized access to a persistent application...
CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
Remote code execution
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-6181
CVE-2023-6181 affects Google Chromecast/Chromecast with Google TV via an oversight in the BCB reboot-handling that occurs in U-Boot, enabling persistent code execution. The issue is described across multiple feeds as a reboot-reason handling flaw with the root cause in BCB and potential for persi...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
Google Chromecast Security Breach
Google Chromecast is a technology from the American company Google Google. It allows you to stream your favorite entertainment and apps from your phone, tablet or laptop directly to your TV or speakers. Google Chromecast has a security vulnerability that stems from a security flaw in BCB that...
jetty: Improper validation of HTTP/1 content-length
A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...
PT-2023-32555 · Bcb · Bcb
Name of the Vulnerable Software and Affected Versions: BCB affected versions not specified Description: The issue is related to an oversight in BCB handling of reboot reason, allowing for persistent code execution. Recommendations: At the moment, there is no information about a newer version that...
PT-2023-30845 · U-Boot · U-Boot
Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot vulnerability that results in persistent code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...
