102 matches found
PT-2024-14991 · Extreme Networks · Extreme Xds
Name of the Vulnerable Software and Affected Versions: Extreme XDS versions prior to 3914 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS, allowing Authentication Abuse. Recommendations: For versions prior to 3914,...
Fedora 39 : golang-github-cncf-xds / golang-github-envoyproxy-control-plane / etc (2023-6b89bc0305)
The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-6b89bc0305 advisory. Contains updates to address CVE-2022-28357,41717 and also NATS: 2023-01 nats-server: Adding accounts for just the system account adds auth bypass Tenable has...
Fedora: Security Advisory for golang-github-cncf-xds (FEDORA-2023-6b89bc0305)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: golang-github-cncf-xds-0-0.10.20230912gite9ce688.fc39
XDS API Working Group...
Fedora: Security Advisory for golang-github-cncf-xds (FEDORA-2023-f122ea1b3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: golang-github-cncf-xds-0-0.10.20230912gite9ce688.fc38
XDS API Working Group...
Fedora 38 : golang-github-cncf-xds / golang-github-envoyproxy-control-plane / etc (2023-f122ea1b3e)
The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-f122ea1b3e advisory. Contains updates to address CVE-2022-28357,41717 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
xds-logistics.com Cross Site Scripting vulnerability OBB-3479880
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-32966
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDA...
Design/Logic Flaw
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDA...
CVE-2021-32966
The CVE-2021-32966 issue affects Philips Interoperability Solution XDS (versions 2.5–3.11 and 2018-1–2021-1). It describes clear text transmission of sensitive information when LDAP is used over TLS and the LDAP domain controller returns referrals, potentially allowing an attacker to remotely rea...
[ASA-202107-69] consul: multiple issues
Arch Linux Security Advisory ASA-202107-69 ========================================== Severity: Medium Date : 2021-07-27 CVE-ID : CVE-2021-32574 CVE-2021-36213 Package : consul Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2171 Summary ======= The package consul...
GHSA-8H2G-R292-J8XH HashiCorp Consul L7 deny intention results in an allow action
In HashiCorp Consul before 1.10.1 and Consul Enterprise, xds can generate a situation where a single L7 deny intention with a default deny policy results in an allow action...
Insecure SSL Certificate Validation
github.com/hashicorp/consul has a missing SSL certificate validation. The vulnerability exists due to the xds not ensuring that the subject Alternative Name of an upstream is validated...
CVE-2021-34824
A flaw was found in istio. Any client authorized to access Istio XDS API can retrieve any cached gateway TLS certificate and private keys. The highest threat from this vulnerability is to data confidentiality. Mitigation This vulnerability can be mitigated by disabling istiod caching. This is...
[ASA-202107-3] istio: information disclosure
Arch Linux Security Advisory ASA-202107-3 ========================================= Severity: Critical Date : 2021-07-01 CVE-ID : CVE-2021-34824 Package : istio Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2113 Summary ======= The package istio before versi...
Philips Interoperability Solution XDS
1. EXECUTIVE SUMMARY CVSS v3 3.7 ATTENTION: Exploitable remotely Vendor: Philips Equipment: Interoperability Solution XDS Vulnerability: Clear Text Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read the LDAP...
CVE-2009-4392
SQL injection vulnerability in the XDS Staff List xdsstaff extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the XDS Staff List xdsstaff extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
