22 matches found
EUVD-2021-16130
Malware in sbrugna...
EUVD-2021-16129
Malware in sbrugna...
EUVD-2024-54362
Malicious code in bioql PyPI...
CVE-2021-29656
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
CVE-2024-38392
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code...
CVE-2024-38392
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code...
CVE-2024-38392: Incorrect Authorization
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code...
CVE-2024-38392
The Pexip Infinity Connect video conferencing platform (versions before 1.13.0 ) is vulnerable to a security flaw caused by insufficient authenticity checks during the loading of resources. This vulnerability allows a remote attacker to execute untrusted code on the application. The CVSS 3.1 scor...
CVE-2024-38392
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code...
CVE-2024-38392
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code...
CVE-2021-29656
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...
CVE-2021-29656
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
Code injection
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
CVE-2021-29656
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...
CVE-2021-29656
CVE-2021-29656 affects Pexip Infinity Connect (versions prior to 1.8.0). The root cause is improper TLS certificate validation and failure to properly check the allow list, as described in multiple sources. Impact is described as partial confidentiality, integrity, and availability losses (per CV...
CVE-2021-29655
CVE-2021-29655 affects Pexip Infinity Connect prior to 1.8.0, where provisioning authenticity checks are omitted. This can allow untrusted code to execute (remote code execution via network). Remediation: upgrade to 1.8.0 or later.