Faronics WINSelect Trust Management Issues Vulnerability

Faronics WINSelect is an application from Faronics, Inc. It is used to customize the usage configuration of Windows computers. A security vulnerability previously existed in Faronics WINSelect version 8.30.xx.903, which arose from the use of configuration files encrypted with a static key derived...

golang: net/mail: comments in display names are incorrectly handled

A flaw was found in Go's net/mail standard library package. The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions made by programs using...

CISA and Partners Release Guidance for Modern Approaches to Network Access Security

Today, CISA, in partnership with the Federal Bureau of Investigation FBI, released guidance, Modern Approaches to Network Access Security, along with the following organizations: New Zealand’s Government Communications Security Bureau GCSB; New Zealand’s Computer Emergency Response Team CERT-NZ;...

CVE-2024-5899

When Bazel Plugin in intellij imports a project either using "import project" or "Auto import" the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance.createProject. This...

CVE-2024-5899

CVE-2024-5899 affects the Bazel Plugin for IntelliJ, CLion, and Android Studio. The issue arises when importing a Bazel project (via “import project” or “Auto import”): the trust dialog is not shown because both paths route through ProjectBuilder.createProject, which calls ProjectManager.getInsta...

CVE-2024-5899 Improper trust check in Bazel Build intellij plugin

When Bazel Plugin in intellij imports a project either using "import project" or "Auto import" the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance.createProject. This...

CVE-2024-5899 Improper trust check in Bazel Build intellij plugin

When Bazel Plugin in intellij imports a project either using "import project" or "Auto import" the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance.createProject. This...

CVE-2024-5899 Improper trust check in Bazel Build intellij plugin

When Bazel Plugin in intellij imports a project either using "import project" or "Auto import" the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance.createProject. This...

PT-2024-37234

Name of the Vulnerable Software and Affected Versions: Bazel Plugin versions prior to 2024.06.04.0.2 Description: The issue arises when the Bazel Plugin in IntelliJ imports a project, either using "import project" or "Auto import", and the dialog for trusting the project is not displayed. This...

intellij Security Vulnerabilities

intellij is a plugin for the Bazel project. A security vulnerability exists in versions prior to intellij 2024.06.04.0.2, which stems from a dialog box for trusting the project not being displayed...

Nextcloud Security Breach

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from a security vulnerability that stems from the possibility that an attacker could trick the application into accepting requests that a...

CVE-2024-32910

In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Motorola Solutions Vigilant Fixed LPR Coms Box Trust Management Issues Vulnerability

Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. The Motorola Solutions Vigilant Fixed LPR Coms Box suffers from a trust management issue vulnerability that stems from an attacker being able to access the maintenance console using...

Adobe clarifies Terms of Service change, says it doesn’t train AI on customer content

Following days of user pushback that included allegations of forcing a "spyware-like" Terms of Service ToS update into its products, design software giant Adobe explained itself with several clarifications. Apparently, the concerns raised by the community, especially among Photoshop and Substance...

Schneider Electric EcoStruxure IT Gateway Trust Management Issue Vulnerability

Schneider Electric EcoStruxure IT Gateway is a suite of cloud-based Data Center Management-as-a-Service DMaaS products from Schneider Electric, France. A trust management issue vulnerability exists in Schneider Electric EcoStruxure IT Gateway version 1.20.x and prior versions, which stems from th...

Apache Submarine Trust Management Issues Vulnerability

Apache Submarine is a cloud-native machine learning platform from the Apache USA Foundation. A trust management issue vulnerability exists in Apache Submarine versions after 0.8.0 that stems from incorrect authentication...

Securing Online Business Transactions: Essential Tools and Practices

Enhance your online transaction security with encryption, VPNs, and authentication. Understand threats, address vulnerabilities, and use secure payment gateways. Stay compliant with PCI DSS and regulatory standards to protect your business and build customer trust...

When things go wrong: A digital sharing warning for couples

“When things go wrong” is a troubling prospect for most couples to face, but the internet—and the way that romantic partners engage both with and across it—could require that this worst-case scenario become more of a best practice. In new research that Malwarebytes will release this month, romant...

Hitachi FOXMAN-UN Trust Management Issues Vulnerability

Hitachi FOXMAN-UN is a powerful toolset in a comprehensive NMS suite from Hitachi, Ltd Hitachi, Japan. A trust management issue vulnerability exists in Hitachi FOXMAN-UN and UNEM, which stems from a certificate validation affecting the message queuing mechanism, where an attacker could spoof a...

Dell PowerScale OneFS Trust Management Issue Vulnerability (CNVD-2024-29346)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...