Apache Airflow FTP Provider Trust Management Issues Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A trust management issue vulnerability exists in Apache Airflow FTP Provider versio...

IBM Aspera Trust Management Issues Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. IBM Aspera Faspex has a trust management issue vulnerability that stems from improper encryption of certain data. An attacker could exploit the vulnerability ...

shim: Out-of-bound read in verify_buffer_sbat()

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase...

Xiaomi Hualai Xiaofang iSC5 信任管理问题漏洞

The Xiaomi Hualai Xiaofang iSC5 is a security camera from Xiaomi, a Chinese company. A trust management issue vulnerability exists in Xiaomi Hualai Xiaofang iSC5 version 3.2.2112, which stems from the camera containing some unknown functions that lead to improper certificate validation...

EZVIZ CS-C6-21WFR-8 信任管理问题漏洞

EZVIZ CS-C6-21WFR-8 is a security camera from China Fluorite EZVIZ. A trust management issue vulnerability exists in EZVIZ CS-C6-21WFR-8 version 5.2.7 Build 170628, which stems from the component Davinci application containing unknown parts that result in improper certificate validation...

Empowering Small Businesses in the Digital Age: A Must-Read Guide to Web Application & API Security

Small and medium-sized businesses have increasingly become reliant on web applications - whether they are developed or procured, to drive their operations, engage customers, and scale their businesses. The increasing reliance on online operations is underscored by 84% of businesses using digital...

Apache Airflow 信任管理问题漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A trust management issue vulnerability exists in Apache Airflow FTP Provider versio...

IBM Aspera 信任管理问题漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. IBM Aspera Faspex has a trust management issue vulnerability that stems from improper encryption of certain data. An attacker could exploit the vulnerability ...

Should you share your location with your partner?

Every relationship has its disagreements. Who takes out the trash and washes the dishes? Who plans the meals and writes out the grocery list? And when is it okay to start tracking one another’s location? Location sharing is becoming the norm between romantic partners—50% of people valued location...

SUSE-SU-2024:1317-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2024-30203: Fixed denial of service via MIME contents bsc1222053 - CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments bsc1222052 - CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted...

Privilege Escalation

Amazon AWS Amplify CLI is vulnerable to Privilege Escalation. The vulnerability is due to the mishandling of role trust policies when the Authentication component is removed, leaving "Effect":"Allow" in place without conditions, thus exposing sts:AssumeRoleWithWebIdentity to potential misuse...

nginxWebUI Trust Management Issue Vulnerability

nginxWebUI is an nginx web configuration tool. A trust management issue vulnerability exists in nginxWebUI, which stems from improper certificate validation of the nginxPath parameter of the handlePath method of the /adminPage/conf/saveCmd file. An attacker could exploit this vulnerability to cau...

AWS Amplify CLI has incorrect trust policy management

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

GHSA-846G-P7HM-F54R AWS Amplify CLI has incorrect trust policy management

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

Amazon AWS Amplify 安全漏洞

Amazon AWS Amplify is an application from Amazon.com, Inc. for accelerating the development of full-stack Web and mobile applications. A security vulnerability exists in Amazon AWS Amplify versions prior to 12.10.1 that stems from incorrectly configuring a role trust policy associated with a...

CVE-2024-28056

CVE-2024-28056 affects Amazon AWS Amplify CLI versions before 12.10.1. The issue arises when the Authentication component is removed from an Amplify project, which leaves the policy in an IAM role with “Effect”: “Allow” but without the Condition, enabling sts:AssumeRoleWithWebIdentity to be usabl...

CVE-2024-28056

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

IBM QRadar SIEM Trust Management Issue Vulnerability

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

CVE-2024-28056

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

Palo Alto Networks PAN-OS Trust Management Issues Vulnerability

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. Palo Alto Networks PAN-OS is vulnerable to a trust management issue that arises from the use of weak low bit strength device certificates. An attacker could exploit this vulnerability to perform a...