Lucene search
K

4667 matches found

CNNVD
CNNVD
added 2024/06/07 12:0 a.m.3 views

WordPress plugin GDPR CCPA Compliance & Cookie Consent Banner Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin GDP...

5.4CVSS6.6AI score0.00276EPSS
Exploits0References3
OSV
OSV
added 2024/06/06 12:23 p.m.8 views

CGA-6W44-GG42-VWCQ

Bulletin has no description...

7.5CVSS7.1AI score0.01262EPSS
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2024/06/05 1:0 p.m.4 views

Securing AI Development in the Cloud: Navigating the Risks and Opportunities

AI-TRiSM - Trust, Risk and Security Management in the Age of AI Co-authored by Lara Sunday and Pojan Shahrivar As artificial intelligence AI and machine learning ML technologies continue to advance and proliferate, organizations across industries are investing heavily in these transformative...

5.8AI score
Exploits0
Qualys Blog
Qualys Blog
added 2024/06/04 3:0 p.m.15 views

TotalCloud Insights: Securing Your Data—The Power of Encryption in Preventing Threats

Introduction Did you know there is a 90% failure rate for encryption-related controls of MySQL Server in Microsoft Azure? The issue isnt confined to Azure; in Google Cloud Platform GCP environments there is a 98% failure rate of encryption-related controls for both compute engine and storage...

7.2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/06/04 12:0 a.m.2 views

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Server, which allows attackers to disclose sensitive information.

The vulnerability of the Oracle MySQL Server component in the Oracle database management system involves insufficient protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...

2.2CVSS6.9AI score0.00401EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2024/05/31 12:0 a.m.5 views

Dell Data Protection Advisor Encryption Issue Vulnerability

Dell Data Protection Advisor is a reporting and analytics platform from Dell USA. A cryptographic issue vulnerability exists in Dell Data Protection Advisor version 19.9 that stems from insufficient encryption strength and can be exploited by an attacker to conduct a denial of service DOS attack...

7.6CVSS6.7AI score0.00128EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/05/31 12:0 a.m.2 views

The vulnerability of intermediate software for the Express Webpack-dev-middleware is related to insufficient checking of URL addresses, which allows unauthorized access to protected information.

The vulnerability of intermediate software for the Express Webpack-dev-middleware relates to insufficient validation of the URL address before returning the local file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.01199EPSS
Exploits1References11Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/31 12:0 a.m.2 views

The vulnerability of software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP platform lies in the insufficient protection of operational data, which allows attackers to disclose confidential information.

The vulnerabilities of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server are related to insufficient protection of operational data. Exploiting these vulnerabilities can allow attackers to disclose sensitive information...

5.3CVSS5.9AI score0.0036EPSS
Exploits0References4
OSV
OSV
added 2024/05/29 4:15 p.m.1 views

CVE-2024-28974

Dell Data Protection Advisor, versions 19.9, contains an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

6.5CVSS5.8AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2024/05/29 4:15 p.m.11 views

CVE-2024-28974

Dell Data Protection Advisor, versions 19.9, contains an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

7.6CVSS7.3AI score0.00128EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/29 3:21 p.m.15 views

CVE-2024-28974

Dell Data Protection Advisor, versions 19.9, contains an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

7.6CVSS6.8AI score0.00128EPSS
Exploits0References1
CVE
CVE
added 2024/05/29 3:21 p.m.51 views

CVE-2024-28974

CVE-2024-28974 concerns Dell Data Protection Advisor (DP A) 19.9 with an inadequate encryption strength vulnerability. A low-privileged, remote attacker could exploit this to cause a Denial of Service. Documents consistently identify the affected component as DP A 19.9 and describe the root cause...

7.6CVSS6.7AI score0.00128EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/29 3:21 p.m.18 views

CVE-2024-28974

Dell Data Protection Advisor, versions 19.9, contains an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

7.6CVSS7.3AI score0.00128EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.3 views

Dell Data Protection Advisor 加密问题漏洞

Dell Data Protection Advisor is a reporting and analytics platform from Dell USA. A cryptographic issue vulnerability exists in Dell Data Protection Advisor version 19.9 that stems from insufficient encryption strength and can be exploited by an attacker to conduct a denial of service DOS attack...

7.6CVSS6.6AI score0.00128EPSS
Exploits0References2
HackRead
HackRead
added 2024/05/28 10:44 a.m.7 views

What is an Infosec Audit and Why Does Your Company Need One?

By Uzair Amir Uncover IT security weaknesses and ensure compliance with infosec audits. Regular audits protect your data from breaches &… This is a post from HackRead.com Read the original post: What is an Infosec Audit and Why Does Your Company Need One?...

7.4AI score
Exploits0
CNVD
CNVD
added 2024/05/28 12:0 a.m.8 views

IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2024-26498)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security...

5.4CVSS6AI score0.00249EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/05/28 12:0 a.m.1 views

The vulnerability of the scrub_submit_initial_read() function in the file system of the brtfs kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scrubsubmitinitialread function in the fs/btrfs/scrub.c file of the Linux operating system’s file system brtfs relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

8.4CVSS6.2AI score0.00291EPSS
Exploits0References11Affected Software1
HackRead
HackRead
added 2024/05/27 10:5 p.m.17 views

Best Practices for Cloud Computing Security

By Owais Sultan Cloud security is crucial for businesses. Here are vital tips to safeguard your data, including choosing a secure… This is a post from HackRead.com Read the original post: Best Practices for Cloud Computing Security...

7.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2024/05/27 9:59 a.m.7 views

europa-diffusion.com Improper Access Control vulnerability OBB-3930746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.1 views

The vulnerability of GE HealthCare EchoPAC medical software, related to insufficient protection of registration data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of GE HealthCare EchoPAC medical software is related to insufficient protection of registration data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

7.6CVSS5.5AI score0.00343EPSS
Exploits0References3
Rows per page
Query Builder