Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices

Cybersecurity researchers have disclosed an unpatched security vulnerability that could pose a serious risk to IoT products. The issue, which was originally reported in September 2021, affects the Domain Name System DNS implementation of two popular C libraries called uClibc and uClibc-ng that ar...

A survey of FedRAMP’s new supply chain requirements

Over the past few years, supply chain management has shifted from a background requirement that everyone unknowingly relies upon, to being a commonly talked about aspect of our everyday lives. The Federal government has ramped up its effort to gain a handle on supply chain threats as a result of...

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

CVE-2014-3618 affecting package procmail for versions less than 3.22-53

CVE-2014-3618 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

CVE-2021-44321

creationtimestamp| type| source ---|---|--- 2022-03-04 16:26:53+00:00| seen| https://t.me/cibsecurity/38415...

Meet FedRAMP Compliance with Qualys Cloud Platform

FedRAMP compliance is not without its challenges. Learn about some of the major security controls and how the Qualys Cloud Platform can help achieve FedRAMP authorization. What is FedRAMP? The Federal Risk and Authorization Management Program FedRAMP is a U.S. government program that promotes the...

CVE-2021-46250

creationtimestamp| type| source ---|---|--- 2022-02-16 02:34:53+00:00| seen| https://t.me/cibsecurity/37549...

CVE-2022-22765

creationtimestamp| type| source ---|---|--- 2022-02-14 14:32:53+00:00| seen| https://t.me/cibsecurity/37396...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Acronis VSS Doctor 代码问题漏洞

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

bkkgalaxy.com Cross Site Scripting vulnerability OBB-2349310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2016-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21344

creationtimestamp| type| source ---|---|--- 2022-01-19 14:38:53+00:00| seen| https://t.me/cibsecurity/35832...

NIST Cybersecurity Framework: A Quick Guide for SaaS Security Compliance

When I want to know the most recently published best practices in cyber security, I visit The National Institute of Standards and Technology NIST. From the latest password requirements NIST 800-63 to IoT security for manufacturers NISTIR 8259, NIST is always the starting point. NIST plays a key...

Mozilla Firefox ESR < 91.4.0

The version of Firefox ESR installed on the remote Windows host is prior to 91.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-53 advisory. - Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian...

CVE-2021-23053

creationtimestamp| type| source ---|---|--- 2021-09-14 16:21:53+00:00| seen| https://t.me/cibsecurity/28800...

CVE-2021-29853

creationtimestamp| type| source ---|---|--- 2021-09-01 20:34:53+00:00| seen| https://t.me/cibsecurity/28190...

Adobe Bridge Security Update (APSB21-53) - Windows

The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...