Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-37905 | goauthentik prior 2024.2.4/2024.4.2/2024.6.0 API-Access-Token access control (GHSA-c78c-2r9w-p7x4)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability classified as critical was found in goauthentik authentik. This vulnerability affects unknown code of the component API-Access-Token Handler. The manipulation leads to improper access controls. This vulnerability was named CVE-2024-37905. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2023-46249 | goauthentik Environment Variable improper authentication (GHSA-rjvp-29xq-f62w)


📈 42.58 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39217 | some-natalie ghas-to-csv prior v1 API injection (GHSA-634p-93h9-92vh)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39258 | mailcow prior 2022-09 Swagger API Template clickjacking (GHSA-vjgf-cp5p-wm45)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-26052 | Saleor prior 3.11.12 API information exposure (GHSA-3hvj-3cg9-v242)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-26051 | Saleor prior 3.1.48 API information exposure (GHSA-r8qr-wwg3-2r85)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28442 | GeoNode prior 2.18.7/2.19.6/2.20.6 Geoserver REST API Endpoint status information disclosure (GHSA-87mh-vw7c-5v6w)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28640 | Apiman prior 3.1.0.Final API Key privileges management (GHSA-m6f8-hjrv-mw5f)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-41899 | Home Assistant prior 2023.9.0 REST API Endpoint hassio.addon_stdin server-side request forgery (GHSA-4r74-h49q-rr3h)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-44397 | CloudExplorer Lite prior 1.4.1 Gateway Filter matching/API/ improper authentication (GHSA-fqxr-7g94-vrfj)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31111 | Frontier prior 0.9.22 control flow (GHSA-hc8w-mx86-9fcj)


📈 22.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-24812 | Misskey up to 13.3.2 Note Search API api/notes/search-by-tag sql injection (GHSA-cgwp-vmr4-wx4q)


📈 21.78 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6839 | WSO2 API Manager prior 3.0.0.15/3.2.0.32 REST API information exposure


📈 19.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-19376 | Octopus Deploy prior 2019.10.6/LTS 2019.9.8/LTS 2019.6.14 Team API API Request input validation (Issue 6005)


📈 19.03 Punkte
🕵️ Sicherheitslücken

🕵️ 42Gears SureMDM prior 2018-11-27 API Endpoint /api/register/:email GET Request information disclosure


📈 17.91 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28465 | FHIR Core Libraries prior 5.6.106 on CVE package-decompression path traversal (GHSA-9654-pr4f-gh6m)


📈 17.86 Punkte
🕵️ Sicherheitslücken

📰 Automatic API Attack Tool - Customizable API Attack Tool Takes An API Specification As An Input, Generates And Runs Attacks That Are Based On It As An Output


📈 17.21 Punkte
📰 IT Security Nachrichten

🔧 FedCM updates: Login Status API, Error API, and Auto-selected Flag API


📈 17.21 Punkte
🔧 Programmierung

🔧 Rest API v/s Web API v/s SOAP API


📈 17.21 Punkte
🔧 Programmierung

🔧 Rest API Vs HTTP API Vs WebSocket API


📈 17.21 Punkte
🔧 Programmierung

🕵️ Intel Graphics Drivers prior 15.45.32.5145 Control Flow Management control flow


📈 16.97 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-24896 | Enalean Tuleap prior 13.7.99.239 Tracker Report Renderer authorization (GHSA-x962-x43g-qw39)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31058 | Enalean Tuleap prior 13.9.99.95 Tracker Report sql injection (GHSA-4v2p-rwq9-3vjf)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31032 | Enalean Tuleap prior 13.9.99.58 Project information disclosure (GHSA-hvx6-4228-whj3)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31063 | Enalean Tuleap prior 13.9.99.111 MyDocmanSearch Widget Title cross site scripting (GHSA-4fx8-4ff3-96jf)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31112 | Parse Server prior 5.2.4 Server LiveQuery Parser information disclosure (GHSA-crrq-vr9j-fxxh)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31139 | UnsafeAccessor prior 1.7.0 Named Module information disclosure (GHSA-cr6p-23cf-w9g9)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31138 | mailcow prior 2022-06a os command injection (GHSA-vx9w-h33p-5vhc)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31161 | Hap-WI Roxy-WI prior 6.1.1.0 /app/options.py subprocess_execute command injection (GHSA-pg3w-8p63-x483)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31163 | TZInfo prior 0.3.61/1.2.10 TZInfo::Timezone.get path traversal (GHSA-5cm2-9h8c-rvfx)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36310 | Airspan AirVelocity 1500 prior 15.18.00.2511 snmpd inherently dangerous function (GHSA-whc6-2989-42xm)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36308 | Airspan AirVelocity 1500 prior 15.18.00.2511 Web Management UI credentials storage (GHSA-qjgc-rx8m-q58x)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36010 | oxyno-zeta react-editable-json-tree prior 2.2.2 neutralization of directives (GHSA-j3rv-w43q-f9x2)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36037 | kirby prior 3.5.8.1 Autocomplete Dropdown cross site scripting (GHSA-3f89-869f-5w76)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36051 | Zitadel prior 1.87.1/2.2.0 interpretation conflict (GHSA-c8fj-4pm8-mp2c)


📈 16.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36100 | XWiki Platform Applications Tag prior 13.10.6/14.4 code injection (GHSA-2g5c-228j-p52x)


📈 16.75 Punkte
🕵️ Sicherheitslücken

matomo
•