552 matches found
UVI-2021-1001331 virtio_console: Assure used length from device is limited
virtioconsole: Assure used length from device is limited This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...
Oracle Critical Patch Update Advisory - July 2021
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third-party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...
HackerOne: Mishandling of hackerone clear background checks resulting in disclosure of other hacker's information
Summary: Mishandling of hackerone clear background checks resulting in disclosure of other hacker's information . Description: I received a hackerone clear invite for "█████" I am not █████. There appears to be some kind of off by one error or similar problem with the hackerone clear invites! fir...
Description of the security update for SharePoint Enterprise Server 2016: June 8, 2021 (KB5001922)
None None...
Akamai EAA Impersonation Vulnerability - A Deep Dive
In this post, we cover the technical details of CVE-2021-28091, the vulnerability impacting Akamai's Enterprise Application Access EAA platform. We cover our investigation, remediation and disclosure process for the vulnerability. For an overview of the vulnerability, the impact to Akamai, the...
Report to Your Management with the Definitive 'Incident Response for Management' Presentation Template
Security incidents occur. It's not a matter of 'if' but of 'when.' There are security products and procedures that were implemented to optimize the IR process, so from the 'security-professional' angle, things are taken care of. However, many security pros who are doing an excellent job in handli...
CVE-2021-0232
An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...
CVE-2021-0232
An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...
Authentication flaw
An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...
CVE-2021-0232
The CVE-2021-0232 affecting Juniper Networks Paragon Active Assurance Control Center is an authentication bypass vulnerability. An attacker with deployment-specific information could mimic an already registered Test Agent and access its configuration and related inventory details, potentially lea...
Evolving beyond password complexity as an identity strategy
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Troy Hunt, founder of Have I Been Pwned,...
PT-2021-12945 · Juniper Networks · Paragon Active Assurance Control Center
Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance Control Center versions prior to 2.35.6 Juniper Networks Paragon Active Assurance Control Center version 2.36 versions prior to 2.36.2 Description: An authentication bypass issue may allow an attacker...
CVE-2021-0232: Improper Access Control
An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...
Pulse Connect Secure contains a use-after-free vulnerability
Overview Pulse Connect Secure PCS gateway contains a use-after-free vulnerability that can allow an unauthenticated remote attacker to execute arbitrary code. Description CVE-2021-22893 A use-after-free vulnerability that can be reached via a license server handling endpoint may allow a remote,...
Juniper Networks Paragon 访问控制错误漏洞
Juniper Networks Paragon is a software application from Juniper, USA. A real-time network topology view. An Access Control Error vulnerability exists in Paragon Active Assurance Control Center version 2.36, which allows remote attackers to bypass the authentication process. The following products...
CVE-2021-0232
An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...
How far have we come? The evolution of securing identities
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Troy Hunt, founder of Have I Been Pwned,...
How far have we come? The evolution of securing identities
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Troy Hunt, founder of Have I Been Pwned,...
Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504723)
None None...
The casrvc program in CA Common Services as used in CA Client Automation 12.8 12.9 and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA Workload Automation AE 11 11.3 11.3.5 and 11.3.6 on AIX HP-UX Linux and Solaris allows local users to modify arbitrary files and consequently gain root privileges via vectors related to insufficient validation.
...