Lucene search
K

4667 matches found

BDU FSTEC
BDU FSTEC
added 2023/02/09 12:0 a.m.5 views

The vulnerability of the application software interface for microprogrammed control devices in AMI MegaRAC allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the application software interface for AMI MegaRAC controllers is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.7AI score0.0171EPSS
Exploits0References2Affected Software1
Wired Threat Level
Wired Threat Level
added 2023/02/08 10:44 p.m.20 views

The Political Theater Behind the State of the Union Data Privacy Push

Biden’s speech calling for better data protections got a standing ovation from both sides of the aisle. So, where’s a federal privacy law?...

1.8AI score
Exploits0
HackRead
HackRead
added 2023/02/08 4:41 p.m.11 views

How to Use Cloud Access Security Brokers for Data Protection

By Owais Sultan A cloud access security broker is a security policy enforcement point that can be located on-premises or in… This is a post from HackRead.com Read the original post: How to Use Cloud Access Security Brokers for Data Protection...

3.7AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2023/02/06 5:0 p.m.18 views

Introducing Adaptive Protection in Microsoft Purview—People-centric data protection for a multiplatform world

At Microsoft, we never stop working to protect you and your data. If the evolving cyberattacks over the past three years have taught us anything, it’s that threat actors are both cunning and committed. At every level of your enterprise, attackers never stop looking for a way in. The massive...

0.2AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2023/02/06 5:0 p.m.20 views

Introducing Adaptive Protection in Microsoft Purview—People-centric data protection for a multiplatform world

At Microsoft, we never stop working to protect you and your data. If the evolving cyberattacks over the past three years have taught us anything, it’s that threat actors are both cunning and committed. At every level of your enterprise, attackers never stop looking for a way in. The massive...

0.2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/02/03 12:0 a.m.2 views

The vulnerability of the Factory Interface Network Service (FINS) protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D allows a intruder to gain access to read, modify, or delete files, execute arbitrary code, or cause a service failure.

The vulnerability of the Factory Interface Network Service FINS protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow an attacker to...

10CVSS8.1AI score0.0117EPSS
Exploits0References4
OSV
OSV
added 2023/02/01 6:15 a.m.2 views

CVE-2022-45102

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

6.1CVSS5.9AI score0.00474EPSS
Exploits0References1
NVD
NVD
added 2023/02/01 6:15 a.m.22 views

CVE-2022-45102

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

6.1CVSS6AI score0.00474EPSS
Exploits0References1
Prion
Prion
added 2023/02/01 6:15 a.m.20 views

Design/Logic Flaw

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

5.8CVSS6.6AI score0.00474EPSS
Exploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2023/02/01 5:11 a.m.8 views

CVE-2022-45102

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

5.4CVSS7.7AI score0.00474EPSS
Exploits0References1
CVE
CVE
added 2023/02/01 5:11 a.m.56 views

CVE-2022-45102

Dell EMC Data Protection Central (CVE-2022-45102) affects versions 19.1–19.7 and involves a Host header injection vulnerability. The underlying issue allows a remote unauthenticated attacker to inject arbitrary Host header values, which can poison a web cache or trigger redirections. Connected so...

6.1CVSS6.5AI score0.00474EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/01 5:11 a.m.26 views

CVE-2022-45102

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

5.4CVSS6.7AI score0.00474EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/02/01 12:0 a.m.3 views

Dell PowerProtect Data Domain 操作系统命令注入漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell Inc. in the United States. A security vulnerability exists in Dell PowerProtect Data Domain versions prior to 7.9. An attacker could exploit the...

8.8CVSS8.5AI score0.01569EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/02/01 12:0 a.m.3 views

Dell EMC Data Protection Central 安全漏洞

Dell EMC Data Protection Central is a management console from Dell USA Inc. It is used for data protection. A security vulnerability exists in Dell EMC Data Protection Central versions 19.1 through 19.7, which originates from an unauthenticated, remote attacker may be able to corrupt the web cach...

6.1CVSS6.5AI score0.00474EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/02/01 12:0 a.m.6 views

PT-2023-14605 · Dell Emc · Dell Emc Data Protection Central

Name of the Vulnerable Software and Affected Versions: Dell EMC Data Protection Central versions 19.1 through 19.7 Description: The issue allows a remote unauthenticated attacker to potentially exploit it by injecting arbitrary Host header values, which could lead to web cache poisoning or trigge...

6.1CVSS6.3AI score0.00474EPSS
Exploits0References3
Malwarebytes
Malwarebytes
added 2023/01/30 8:30 a.m.20 views

A private moment, caught by a Roomba, ended up on Facebook. Eileen Guo explains how: Lock and Code S04E03

In 2020, a photo of a woman sitting on a toilet--her shorts pulled half-way down her thighs--was shared on Facebook, and it was shared by someone whose job it was to look at that photo and, by labeling the objects in it, help train an artificial intelligence system for a vacuum. Bizarre? Yes...

Exploits0
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:0 a.m.4 views

The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 lies in the lack of protection for operational data, allowing attackers to disclose sensitive information.

The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2019, and EcoStruxure Geo SCADA Expert 2021 lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose th...

5CVSS7.1AI score0.00569EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:0 a.m.2 views

The vulnerability of the Point-to-Point Protocol (PPP) implementation in Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Point-to-Point Protocol PPP implementation in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.3CVSS6.5AI score0.01374EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/27 12:0 a.m.1 views

The vulnerability of the Microsoft Edge browser for Android, related to the lack of protection for service data, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge browser for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.1CVSS5.8AI score0.02357EPSS
Exploits0References3Affected Software1
Opera Security Advisories
Opera Security Advisories
added 2023/01/27 12:0 a.m.5 views

It’s Data Privacy Day: Here’s how to protect your data and become your own privacy champion

News, Security It’s Data Privacy Day: Here’s how to protect your data and become your own privacy champion Share January 27th, 2023 Hello readers! January 28 is Data Privacy Day – an annual celebration of all things data protection and online privacy! It’s an opportunity for businesses and users ...

8.8CVSS7.1AI score0.05492EPSS
Exploits4References1
Rows per page
Query Builder