CVE-2024-45394 Secret encryption vulnerable to brute-force attacks

Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVPBytesToKey KDF. Therefore, attackers with a copy of a user's data are able to brute-force the...

The vulnerability of the two-factor authentication (2FA) mechanism of the Docker-based deployment and email server management tool, mailcow:dockerized, allows attackers to bypass 2FA protection and gain unauthorized access.

The vulnerability of the two-factor authentication 2FA mechanism in the Docker-based mailcow:dockerized deployment and management system is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker to bypass 2FA protection and gain...

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of Zoom’s video conferencing software relates to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...

CVE-2024-8158 User impersonation for lib9p based 9p fileservers

A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user. This is due to lib9p not properly verifying that the uname given in the Tauth and Tattach 9p messages matches...

Local Networks Go Global When Domain Names Collide

The proliferation of new top-level domains TLDs has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didnt exist at the time. Meaning, they are continuously sending their Windows usernam...

Open edX openedx-translations 安全漏洞

openedx-translations is an Open edX open source library. A security vulnerability exists in Open edX openedx-translations, which stems from the fact that the validation mechanism in the openedx-translations repository does not include the same protections against malformed translations as...

BIT-KEYDB-2022-24735 Lua scripts can be manipulated to overcome ACL rules in Redis

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the potentially higher privileges of another Redis user. The Lua scri...

GO-2022-0878 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone...

CVE-2024-41699

Priority – CWE-552: Files or Directories Accessible to External Parties...

CVE-2022-33162

IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force I...

The vulnerability of the User Management component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores. This vulnerability exists in the Oracle E-Business Suite, a business automation system that allows attackers to gain unauthorized access to protected information.

The vulnerability of the User Management component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores, and of the Oracle E-Business Suite system, which is used for automating business operations, is related to insufficient validation of input data...

edk2: Use of a Weak PseudoRandom Number Generator

A security flaw has been identified in the cryptographic system of EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized remote attacker to potentially expose sensitive information...

CVE-2024-39591 Missing Authorization check in SAP Document Builder

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application...

CVE-2024-5800

CVE-2024-5800 affects B&R Automation Runtime: Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack in versions before 6.0.2, enabling a network attacker to decrypt traffic. The vulnerability is tied to weak DH parameters in the TLS implementation, with impact limited to ...

The vulnerability of the restapi.service (/lib/systemd/system/restapi.service) software for creating wireless routers based on Debian RaspAP allows a attacker to escalate their privileges and execute arbitrary commands.

The vulnerability of the restapi.service file /lib/systemd/system/restapi.service in the software for creating wireless routers based on Debian RaspAP is related to the lack of measures taken to neutralize special elements used in commands, due to insufficient access control for users belonging t...

The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the CI/CD system’s continuous integration and delivery capabilities in JetBrains TeamCity, related to deficiencies in the authentication process due to time differences, allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to deficiencies in the authentication process due to time differences when comparing tokens. Exploiting this vulnerability could allow a malicious actor to compromise...

USN-6948-1 salt vulnerabilities

It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly use this issue to run arbitrary commands. CVE-2020-16846 It was discovered that Salt incorrectly created certificates with weak file permissions. CVE-2020-17490 It was discovered that Salt...

The vulnerability of the adminPushRules function in the Project-level Deploy Token Handler component of the software platform based on Git, which facilitates collaborative code development in GitLab. This vulnerability allows a malicious user to create deployment tokens at the project level.

The vulnerability of the adminPushRules function in the Project-level Deploy Token Handler component of the software platform based on Git for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to crea...

CVE-2024-40719 CHANGING Information Technology TCBServiSign Windows Version - Inadequate Encryption Strength

The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it...