4332 matches found
PT-2019-6761
Name of the Vulnerable Software and Affected Versions JBoss AS 7 Community Release affected versions not specified Description The issue is related to the improper implementation of security context propagation in JBoss AS 7 Community Release. This allows a local user to obtain elevated privilege...
CVE-2012-2312: Improper Privilege Management
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated...
CVE-2019-18191: Incomplete Cleanup
A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...
PT-2019-15264
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security as a Service affected versions not specified Description A privilege escalation issue exists in the Quick Setup cloud formation template of Trend Micro Deep Security as a Service. This could allow an authenticated...
VMware Carbon Black TAU Threat Research: Visualizing Ransomware with MITRE ATT&CK
If no one had ever heard of ransomware prior to May 2017, then one thing that is fairly certain is that the WannaCry ransomware outbreak unquestionably put ransomware on the security radar, and sent shivers up CISO’s and analysts’ spines for the weeks and months that followed. Only a few weeks...
All in the (Ransomware) Family: 10 Ways to Take Action
In a world where everything is an “as-a-service,” it’s no surprise that ransomware-as-a-service RaaS is a hot ticket on the Dark Web. FortiGuard Labs has observed at least two significant ransomware families – Sodinokibi and Nemty – now being deployed as RaaS solutions. Meanwhile, cybercriminals...
CVE-2012-2148
An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies...
CVE-2012-2148
An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies...
CVE-2012-2148
Technical details (affected product/version, root cause, impact, or mitigations) are not publicly available in the provided documents. Monitor for updates to official advisories and vendor notices.
CVE-2012-2148
An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies...
CVE-2012-2148: Improper Privilege Management
An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies...
PT-2019-6757
Name of the Vulnerable Software and Affected Versions JBoxx AS version 7.1.1 Description An issue exists in the property replacements feature in any descriptor, where JBoxx AS ignores Java security policies. Recommendations For JBoxx AS version 7.1.1, at the moment, there is no information about ...
The vulnerability of the WebBrowserPersist component in the Firefox browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the WebBrowserPersist component in the Firefox browser is related to errors that occur when executing the “Save Page As…” function. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
Unspecified Vulnerability in TitanHQ WebTitan
TitanHQ WebTitan is a web content filter from TitanHQ Ireland. A security vulnerability exists in TitanHQ WebTitan versions prior to 5.18. The vulnerability can be exploited by an attacker to log in to the filter with administrator privileges using a hidden account...
Cisco Adaptive Security Appliance Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)
According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF...
CVE-2011-3606
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DO...
CVE-2011-3606
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DO...
PT-2019-4240
Name of the Vulnerable Software and Affected Versions Cisco DNA Spaces: Connector affected versions not specified Cisco Digital Network Architecture DNA Center affected versions not specified Description The issue is related to insufficient validation of input data, which could allow an...
WordPress WP Maintenance Plugin CVE-2019-19979 Cross Site Request Forgery Vulnerability
Description The WP Maintenance Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. WP Maintenance versions prior to 5.0...