API - CVE CyberSecurity Database News (Page 263)

CVE-2023-42820 - How an Exposed Random Seed in JumpServer Could Let Attackers Reset Your Password

Sep 27, 2023 API Exploit OAuth jumpserver

CVE-2023-42820 - How an Exposed Random Seed in JumpServer Could Let Attackers Reset Your Password

--- Overview CVE-2023-42820 is a security vulnerability that affects JumpServer, a popular open source bastion host. This issue comes down to weak handling of

Sep 27, 2023 API Exploit Java Illumio Core PCE

CVE-2023-5183 - Exploiting Unsafe JSON Deserialization in Illumio PCE’s network_traffic API Endpoint

In early 2023, a critical vulnerability—CVE-2023-5183—was disclosed, affecting the Illumio Policy Compute Engine (PCE), a widely-deployed security solution in enterprise

Sep 27, 2023 Windows API Mozilla Firefox

CVE-2023-5168 - Out-of-Bounds Write in Firefox on Windows Can Lead to Privileged Process Exploitation

A serious security flaw, CVE-2023-5168, was discovered in Firefox, Firefox ESR, and Thunderbird for Windows. This vulnerability allows a compromised content process to

Sep 27, 2023 API cilium

CVE-2023-39347 - How Manipulating Pod Labels in Cilium Can Bypass Network Policies

Cilium has become a core building block for cloud native networking, observability, and security, powered by eBPF. Many Kubernetes clusters use Cilium to apply fine-

Sep 25, 2023 API API Security Exploit Huawei EMUI

CVE-2023-41301 - Unauthorized API Access Vulnerability in the PMS Module

In 2023, a serious security vulnerability identified as CVE-2023-41301 was discovered in the Property Management System (PMS) module of several widely-used applications.