Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-12224 1 Servo 1 Idna 2025-06-25 8.8 High
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.
CVE-2022-0675 2 Puppet, Redhat 2 Firewall, Openstack 2024-11-21 5.6 Medium
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state.
CVE-2024-42219 1 1password 1 1password 2024-08-12 7 High
1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.
CVE-2024-42218 1 1password 1 1password 2024-08-12 6.3 Medium
1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms.