CVE-2024-37865

An issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote attacker to obtain sensitive information via the S3 compatible storage component...

CVE-2024-37865

CVE-2024-37865 affects S3Browser versions 10.9.9 through 11.4.5. The issue enables a remote attacker to obtain sensitive information via the S3-compatible storage component. Fixed in version 11.5.7. Supported sources from Red Hat/NVD indicate the same affected ranges and the designated fix versio...

CVE-2024-37865

An issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote attacker to obtain sensitive information via the S3 compatible storage component...

PT-2024-27795 · Unknown · S3 Browser

Name of the Vulnerable Software and Affected Versions: S3Browser versions 10.9.9 through 11.4.5 Description: An issue in the S3 compatible storage component allows a remote attacker to obtain sensitive information. Recommendations: For versions 10.9.9 through 11.4.5, update to version 11.5.7 to...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 4 (6.1.1-47)

This update provides stability and performance fixes. Vulnerability id: VSTOR-78110 Fixed an issue with missing firewall rules for certain ports. Vulnerability id: VSTOR-85979 New settings may be missing in the S3 gateway, which blocks access to the S3 user panel. Vulnerability id: VSTOR-86340 Th...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2024-1298)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1298 advisory. - EDK2 contains a vulnerability when S3 sleep is activated where an Attacker May cause a...

MAL-2024-7047 Malicious code in wurl-aws-s3 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wurl-aws-s3 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aws_s3-deploy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6742 Malicious code in aws_s3-deploy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaaոderen.Basisregisters.Aws.DistribսtedS3Cache (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bе.Vlaaոderen.Basisregisters.Aws.DistribսtedS3Cachе (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @b2bgeo/ci-s3 (npm)

--- -= Per source details. Do not edit below this line.=-...

Medium: edk2

Issue Overview: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability. CVE-2024-1298 Affected Packages: edk2 Note: This adviso...

Amazon Linux 2 : edk2 (ALAS-2024-2578)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2578 advisory. EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a...

Medium: edk2

Issue Overview: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability. CVE-2024-1298 Affected Packages: edk2 Note: This adviso...

OESA-2024-1752 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful...

Error: could not get determine if bucket supports versioning: Access Denied

Challenge Veeam Kasten for Kubernetes is unable to monitor or refresh the retention period of the data in the S3 bucket and cannot calculate the lock duration based on your retention setting because of this issue. This will show up as an error message in the notification bar: error: can't connect...

CVE-2024-37164

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. CVAT allows users to supply custom endpoint URLs for cloud storages based on Amazon S3 and Azure Blob Storage. Starting in version 2.1.0 and prior to version 2.14.3, an attacker with a CVAT...

CVE-2024-37164 CVAT SSRF via custom cloud storage endpoints

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. CVAT allows users to supply custom endpoint URLs for cloud storages based on Amazon S3 and Azure Blob Storage. Starting in version 2.1.0 and prior to version 2.14.3, an attacker with a CVAT...