16956 matches found
Intel Dynamic Tuning Technology (DTT) Software May 2024 Security Update
Intel has informed HP of a potential security vulnerability in some Intel® Dynamic Tuning Technology DTT software installer which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...
PYSEC-2024-63
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
CVE-2023-52291 Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution
In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...
BELL-CVE-2024-41008
Bulletin has no description...
BELL-CVE-2023-52886
Bulletin has no description...
Skupper uses a static cookie secret for the openshift oauth-proxy
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a...
CVE-2024-38446
NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user without their consent or knowledge via a modified UUID in a POST request...
CVE-2024-38447
NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report that belongs to an arbitrary user...
CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
BELL-CVE-2024-40992
Bulletin has no description...
BELL-CVE-2024-40994
Bulletin has no description...
BELL-CVE-2024-40983
Bulletin has no description...
BELL-CVE-2024-40987
Bulletin has no description...
BELL-CVE-2024-40980
Bulletin has no description...
BELL-CVE-2024-40977
Bulletin has no description...
BELL-CVE-2024-40974
Bulletin has no description...
BELL-CVE-2024-40976
Bulletin has no description...
BELL-CVE-2024-40972
Bulletin has no description...