CVE-2024-7344 Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Howyar UEFI Application "Reloader" 32-bit and 64-bit is vulnerable to execution of unsigned software in a hardcoded path...

Howyar Reloader UEFI bootloader vulnerable to unsigned software execution

Overview The Howyar UEFI Application "Reloader" 32-bit and 64-bit, distributed as part of SysReturn prior to version 10.2.02320240919, is vulnerable to the execution of arbitrary software from a hard-coded path. An attacker who successfully exploits this vulnerability can bypass the UEFI Secure...

Howyar UEFI Reloader 安全漏洞

Howyar UEFI Reloader is a UEFI Unified Extensible Firmware Interface related utility software from Howyar, primarily used for firmware loading and management. A security vulnerability exists in Howyar UEFI Reloader that originates from the execution of unsigned software in a hard-coded path. The...

Authentication flaw

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1. cmd/dex/serve.go line 425 seemingly sets TLS 1.2 as minimum version, but the whole tlsConfig is ignored after TLS cert reloader was introduced in...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgpt, azure-aad-pod-identity-mic, flux-kustomize-controller, prometheus-mysqld-exporter, aws-load-balancer-controller, yq, crossplane-provider-azure, kots, metacontroller, kubernetes-csi-external-resizer, minio, up, gke-gcloud-auth-plugin,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, gomplate, wireguard-go, certificate-transparency, haproxy-ingress, skaffold, kots, nghttp2, flux-kustomize-controller, nginx-stable, atlantis, bom, scorecard, cue, k3d, flux-source-controller, memcached-exporter, gobuster,...