Cloud - CVE CyberSecurity Database News (Page 28)

Jul 11, 2023 Exploit Google Fortinet FortiAuthenticator

CVE-2022-22302 - Clear Text Storage of Fortinet Private Keys Exposes Apple Push & GCM Channels

In today's cyber landscape, keeping secret keys truly secret is foundational to digital security. But sometimes, critical lapses let attackers walk through the

Jun 23, 2023 API aws aws-cdk

CVE-2023-35165 - Deep Dive Into Overly Permissive IAM Trust Policies in AWS CDK EKS Cluster Constructs

AWS CDK (Cloud Development Kit) is a powerful open source framework for defining cloud infrastructure using popular programming languages. It helps developers automate the setup

Jun 8, 2023 Exploit

CVE-2023-24535 - How Malformed Messages in Protocol Buffers Can Crash Your Service

CVE-2023-24535 is a subtle, but dangerous vulnerability in Protocol Buffers (protobuf), a popular tool for serializing and deserializing structured data. If you're using

Jun 1, 2023 API Exploit Splunk Splunk Enterprise

CVE-2023-32707 - How Low-Privileged Users Can Become Admins in Splunk with a Simple Web Request

Splunk is a big name when it comes to searching, monitoring, and analyzing machine-generated data. But in early 2023, a serious security flaw was found

May 12, 2023 Redhat Openstack

CVE-2023-2088 - Inside the OpenStack Volume Detach Flaw (Cinder/Nova Inconsistency Exploit)

OpenStack is the backbone of many private clouds and enterprise systems. But even robust platforms can have critical slip-ups, like the one tracked as CVE-2023-2088.