CVE-2024-5486 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

CVE-2024-5486

CVE-2024-5486 - Authenticated Sensitive Information Disclosure in ClearPass Policy Manager Affected software: ClearPass Policy Manager (Aruba/HPE). The connected documents describe a vulnerability where an attacker with administrative privileges can access sensitive information in cleartext, enab...

CVE-2024-7208 CVE-2024-7208

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC or SPF or DKIM policies...

CVE-2024-7208 CVE-2024-7208

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC or SPF or DKIM policies...

CVE-2024-7208

CVE-2024-7208 describes a vulnerability in multi-tenant hosting where an authenticated sender can spoof the identity of a shared hosting domain, bypassing DMARC, SPF, and DKIM protections. The root cause is inadequate verification of the sender against the domain identities allowed to send on beh...

Google Workspace Vulnerability Allowed Hackers to Access 3rd-Party Services

A Google Workspace vulnerability exposed thousands of accounts after hackers bypassed email verification. Learn how to protect your…...

USN-6924-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM SCMI message protocol; - InfiniBand drivers; - TTY drivers; - TLS protocol; CVE-2022-48655, CVE-2024-36016,...

Mozilla: Memory corruption in NSS

The Mozilla Foundation Security Advisory describes this flaw as: A mismatch between allocator and deallocator could have lead to memory corruption...

CVE-2024-5670

Summary (CVE-2024-5670) : The web services of Softnext’s Mail SQR Expert and Mail Archiving Expert fail to validate user input, enabling unauthenticated remote attackers to inject and execute arbitrary OS commands on the remote server. This is described across multiple sources as an OS command in...

CVE-2024-5670 Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...

PT-2024-37010 · Softnext · Softnext Mail Archiving Expert +1

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Softnext Mail Archiving Expert affected versions not specified Description: The web services of Softnext's products do not properly validate user input, allowing unauthenticated remote...

The vulnerability of the JOSE component in Apache CXF web services allows a attacker to cause a service failure.

The vulnerability of the JOSE component in Apache CXF web services is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

VulnCheck KEV: CVE-2024-43047

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory...

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Googles "Sign in with Google" feature...

CVE-2024-7050

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2...

CVE-2024-7050

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2...

CVE-2024-7050

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2...

CVE-2024-7050

CVE-2024-7050 concerns OpenText Directory Services (OTDS) v24.2, describing an Improper Authentication vulnerability that may allow a Multi-factor Authentication bypass in certain scenarios. Multiple connected sources corroborate the issue in OTDS 24.2; remediation guidance appears in PT-2024-380...

OESA-2024-1908 openjdk-11 security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0....

PT-2024-38045 · Opentext · Opentext Directory Services

Name of the Vulnerable Software and Affected Versions: OpenText Directory Services version 24.2 Description: The issue is related to an Improper Authentication vulnerability that may allow Multi-factor Authentication Bypass in specific scenarios. Recommendations: For OpenText Directory Services...