Aggregator

CVE-2024-45316 | SonicWALL SMA1000 Connect Tunnel Client up to 12.4.271 on Windows link following (SNWLID-2024-0017)

VulDB Recent Entries
10 months 4 weeks ago
A vulnerability was found in SonicWALL SMA1000 Connect Tunnel Client up to 12.4.271 on Windows. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to link following. The identification of this vulnerability is CVE-2024-45316. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-45315 | SonicWALL SMA1000 Connect Tunnel Client up to 12.4.271 on Windows CVSS link following (SNWLID-2024-0017)

VulDB Recent Entries
10 months 4 weeks ago
A vulnerability was found in SonicWALL SMA1000 Connect Tunnel Client up to 12.4.271 on Windows. It has been declared as critical. This vulnerability affects unknown code of the file CVSS. The manipulation leads to link following. This vulnerability was named CVE-2024-45315. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-25581 | pac4j up to 3.x Base64 Encoding UserProfile deserialization (GHSL-2022-085)

VulDB Recent Entries
10 months 4 weeks ago
A vulnerability was found in pac4j up to 3.x. It has been classified as very critical. This affects the function UserProfile of the component Base64 Encoding Handler. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2023-25581. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-1532 | Google Chrome up to 111.0.5563.64 GPU Video out-of-bounds (FEDORA-2023-c93631749b)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Google Chrome. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component GPU Video. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2023-1532. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-33234 | Apache Airflow CNCF Kubernetes Provider up to 6.1.0 KubernetesPodOperator injection

Vuldb Updates
10 months 4 weeks ago
A vulnerability classified as critical was found in Apache Airflow CNCF Kubernetes Provider up to 6.1.0. Affected by this vulnerability is an unknown functionality of the component KubernetesPodOperator. The manipulation leads to injection. This vulnerability is known as CVE-2023-33234. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-38714 | IBM DataStage on Cloud Pak for Data up to 4.5.2 missing encryption (XFDB-235060)

Vuldb Updates
10 months 4 weeks ago
A vulnerability, which was classified as problematic, was found in IBM DataStage on Cloud Pak for Data up to 4.5.2. This affects an unknown part. The manipulation leads to missing encryption of sensitive data. This vulnerability is uniquely identified as CVE-2022-38714. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-49339 | Ellucian Banner 9.17 retrieveData bannerId resource injection

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Ellucian Banner 9.17. It has been classified as problematic. Affected is an unknown function of the file /StudentSelfService/ssb/studentCard/retrieveData. The manipulation of the argument bannerId leads to improper control of resource identifiers. This vulnerability is traded as CVE-2023-49339. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

Auditing Gradio 5, Hugging Face’s ML GUI framework

Security Boulevard
10 months 4 weeks ago

This is a joint post with the Hugging Face Gradio team; read their announcement here! You can find the full report with all of the detailed findings from our security audit of Gradio 5 here. Hugging Face hired Trail of Bits to audit Gradio 5, a popular open-source library that provides a web interface that […]

The post Auditing Gradio 5, Hugging Face’s ML GUI framework appeared first on Security Boulevard.

Trail of Bits

国光的 啊切儿 Linux 优化记录(弃坑！)

国光
10 months 4 weeks ago

你这辈子有没有因为没有折腾过 Arch Linux 而感觉遗憾？有没有厌倦了无聊的 Ubuntu？有没有想给自己找点事情做，充实一下自己？那就赶紧试试看 Arch Linux 吧！

国光

Managed ad