CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

CVE-2024-33612

An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2024-25377 · F5 · Big-Ip Next Central Manager

Name of the Vulnerable Software and Affected Versions: BIG-IP Next Central Manager affected versions not specified Description: An improper certificate validation issue exists, potentially allowing an attacker to impersonate an Instance Provider system and cross a security boundary...

F5 BIG-IP Next Central Manager 信任管理问题漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A man-in-the-middle attack vulnerability exists in F5 BIG-IP Next Central Manager, which can be exploited by an attacker to...

PT-2024-22813 · Veeam · Veeam Service Provider Console

Name of the Vulnerable Software and Affected Versions: Veeam Service Provider Console versions 4.0 through 8.0 Description: Due to an unsafe de-serialization method used by the Veeam Service Provider Console VSPC server in communication between the management agent and its components, under certa...

GHSA-2X52-8F29-7CJR Eclipse Dataspace Components vulnerable to OAuth2 client secret disclosure

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component, an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security vulnerability in the EDC Connector component...

CVE-2024-4536 Eclipse EDC: OAuth2 Credential Exfiltration Vulnerability

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component https://github.com/eclipse-edc/Connector , an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security...

PT-2024-23223

Name of the Vulnerable Software and Affected Versions Bouncy Castle Java TLS API and JSSE Provider versions prior to 1.78 Description An issue may cause timing-based leakage in RSA based handshakes due to exception processing. Recommendations For versions prior to 1.78, update to version 1.78 or...

Veeam Service Provider Console Vulnerability ( CVE-2024-29212 )

Patch Reissue - 2024-05-28 On May 28th, 2024, Veeam issued an enhanced update to address this critical vulnerability in Veeam Service Provider Console VSPC. Although our initial patch, issued on May 7th, effectively addressed the primary concern, a subsequent review identified an area for further...

CVE-2024-3479

An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider com.motorola.server.enterprise.MotoDpmsProvider that could allow a local attacker to read local data...

CVE-2023-41828

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider...

CVE-2024-3479

An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider com.motorola.server.enterprise.MotoDpmsProvider that could allow a local attacker to read local data...

CVE-2024-3479

Technical details about CVE-2024-3479 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-3479

An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider com.motorola.server.enterprise.MotoDpmsProvider that could allow a local attacker to read local data...

CVE-2023-41828

The CVE-2023-41828 vulnerability affects the Motorola Phone application, describing an implicit intent export flaw that could allow unauthorized access to a non-exported content provider. The issue is scoped as Local attack, requiring user interaction, with a MEDIUM base score (CVSS 3.1: 4.4) and...

CVE-2023-41828

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider...

CVE-2023-41828

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider...

Motorola Enterprise MotoDpms Provider 安全漏洞

Motorola Enterprise MotoDpms Provider is a mobile application from Motorola USA. A security vulnerability exists in Motorola Enterprise MotoDpms Provider that stems from the presence of an incorrect export vulnerability that could allow a local attacker to read local data...

The vulnerability of the Airflow FTP Provider network software is related to errors in the authentication process, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Airflow FTP Provider network software is related to errors in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...