22072 matches found
Security Bulletin: IBM Sterling Control Center is vulnerable to Apache Tomcat vulnerability
Summary Reverse Tabnabbing target="blank" from Apache Tomcat is affecting Control Center v6.2.1 and v6.3.1. Vulnerability Details CVEID:CVE-2018-11784 DESCRIPTION: Apache Tomcat could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in the default...
The vulnerability of the Kerberos Key Distribution Center (KDC) Proxy Protocol implementation in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Kerberos Key Distribution Center KDC Proxy Protocol implementation in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Transforming Threat Actor Research into a Strong Defense Strategy
Transforming Threat Actor Research into a Strong Defense Strategy By James Murphy, Ale Houspanossian, Leandro Velasco LV and Ilya Kolmanovich · November 14, 2024 What does it take to transform threat actor research into detection engineering? If we look at threat intelligence at its core, then we...
The vulnerability of the ConsumerPullTransferTokenValidationApiController component in the data-processing and information ecosystem software for Eclipse EDC allows a perpetrator to bypass token expiration checks.
The vulnerability of the ConsumerPullTransferTokenValidationApiController component in the data-processing and information ecosystem of Eclipse EDC is related to authentication procedures’ flaws. Exploiting this vulnerability could allow a malicious actor to bypass token expiration checks...
CVE-2024-38819: Path traversal vulnerability in org.springframework:spring-webmvc used by Confluence Data Center
h3. Issue Summary Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the...
Incognito Service Activation Center 安全漏洞
Incognito Service Activation Center Incognito SAC is a cloud-native solution from Incognito that automates the delivery of intent-based IP services through any access technology and simplifies back-end processes to reduce operational expenses. A security vulnerability exists in Incognito Service...
CVE-2024-42834
A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...
Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed...
CVE-2024-43639
Windows KDC Proxy Remote Code Execution Vulnerability...
CVE-2024-21938
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2024-21938
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2024-21938
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2024-21938
Summary: CVE-2024-21938 concerns the AMD Management Plugin for Microsoft System Center Configuration Manager (SCCM). The root cause is incorrect default permissions in the SCCM installation directory, which could let a low-privilege attacker escalate privileges and potentially achieve arbitrary c...
5 Ways Behavioral Analytics is Revolutionizing Incident Response
Behavioral analytics, long associated with threat detection i.e. UEBA or UBA, is experiencing a renaissance. Once primarily used to identify suspicious activity, it's now being reimagined as a powerful post-detection technology that enhances incident response processes. By leveraging behavioral...
KB5046862 - Description of the security update for SQL Server 2022 CU15: November 12, 2024
None None...
Description of the security update for Excel 2016: November 12, 2024 (KB5002653)
None None...
KB5046861 - Description of the security update for SQL Server 2022 GDR: November 12, 2024
None None...
Description of the security update for Word 2016: November 12, 2024 (KB5002619)
None None...