Symantec Management Center 安全漏洞

Symantec Management Agent is a suite of software used to manage computers in bulk. The software supports communication between Notification Server computers and computers on the network. symantec Management Agent has a security vulnerability that can be exploited by attackers to elevate a low...

ウクライナにおけるサイバー脅威アクティビティ: 分析とリソース

本ブログは、Cyber threat activity in Ukraine: analysis and resources – Microsoft Security Response Center の抄訳版です。最新の情報は原文を参照してください。 2022 年...

March 1, 2022, update for Office 2016 (KB5002160)

None None...

How Insider Threats Drive Better Data Protection Strategies

Fifty-eight percent of sensitive data security incidents are caused by insider threats, according to a recent study by Forrester Research. Insider threats originate from inappropriate use of legitimate authorized user accounts. These accounts - assigned to internal employees and business associat...

CVE-2021-43945

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored Cross-Site Scripting SXSS vulnerability in the /rest/jpo/1.0/hierarchyConfiguration endpoint. The affected versions are...

CVE-2021-43945

Summary (CVE-2021-43945): Atlassian Jira Server/Data Center is affected by a Stored XSS in the /rest/jpo/1.0/hierarchyConfiguration endpoint. Remote attackers with Roadmaps Administrator permissions can inject arbitrary HTML/JavaScript through this SXSS. Affected versions are before 8.20.3; fixed...

CVE-2021-43945

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored Cross-Site Scripting SXSS vulnerability in the /rest/jpo/1.0/hierarchyConfiguration endpoint. The affected versions are...

NetApp SnapCenter 信息泄露漏洞

NetApp SnapCenter is a suite of applications from U.S.-based NetApp that provides the ability to back up, verify, clone, and restore NetApp storage systems. An information disclosure vulnerability exists in NetApp SnapCenter, which could allow an attacker to bypass access restrictions to SnapCent...

WordPress ActiveCampaign Email Preference Center plugin < 2.0.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress ActiveCampaign Email Preference Center plugin versions 2.0.10. Solution Update the WordPress ActiveCampaign Email Preference Center plugin to the latest available version at least 2.0.10...

WordPress ActiveCampaign Email Preference Center plugin < 2.0.10 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress ActiveCampaign Email Preference Center plugin versions 2.0.10. Solution Update the WordPress ActiveCampaign Email Preference Center plugin to the latest available version at least 2.0.10...

gainwellnesscenter.com Cross Site Scripting vulnerability OBB-2385053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

Design/Logic Flaw

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

CVE-2020-27958

The CVE affects the Open OnDemand Open OnDemand Job Composer app used by Ohio Supercomputer Center, specifically versions before 1.7.19 (and 1.8.x before 1.8.18). The reported issue is that remote authenticated users can supply crafted input through a job template, potentially impacting how jobs ...

MSTICPy January 2022 hackathon highlights

During the month of January 2022, the Microsoft Threat Intelligence Center MSTIC ran its inaugural hackathon for the open-source Jupyter and Python Security Tools library, MSTICPy. We asked the security community for their contributions to expand and improve MSTICPy’s features and capabilities, a...

MSTICPy January 2022 hackathon highlights

During the month of January 2022, the Microsoft Threat Intelligence Center MSTIC ran its inaugural hackathon for the open-source Jupyter and Python Security Tools library, MSTICPy. We asked the security community for their contributions to expand and improve MSTICPy’s features and capabilities, a...

PT-2022-2556 · Atlassian · Bitbucket

Name of the Vulnerable Software and Affected Versions: Atlassian Bitbucket Data Center versions 5.14.0 through 7.6.13 Atlassian Bitbucket Data Center versions 7.7.0 through 7.17.5 Atlassian Bitbucket Data Center versions 7.18.0 through 7.18.3 Atlassian Bitbucket Data Center versions 7.19.0 throug...

Unauthorized Access Vulnerability in Seven Bulls Logkit Monitoring Center

Shanghai Seven Bulls Information Technology Co., Ltd. is a cloud computing and data service provider. An unauthorized access vulnerability exists in Seven Bulls Logkit Monitoring Center, which can be exploited by attackers to obtain sensitive information...

Cross site scripting

Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the "Object Schema" field of /secure/admin/InsightDefaultCustomFieldConfig.jspa. The...