Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in other namespaces. By using a crafted `endpointSelector` that uses the `DoesNotExist` operator on the `reserved:init` label, the attacker can create policies that bypass namespace restrictions and affect the entire…
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their passwords, the new credentials may be briefly held in the server database. While this doesn't grant the server any added capabilities—it already learns the users' passwords as part of the authentication process—it does disrupt the expectation that passwords won't be stored in the database. As a result, these passwords could inadvertently be captured…
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions.
Unauth. Cross-Site Scripting (XSS) vulnerability in TravelMap plugin <=Â 1.0.1 versions.
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Restrict plugin <=Â 2.2.4 versions.
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.
Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.
Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.
Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.