Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is associated with insufficient protection of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cluster Shared Volumes File System Unauthorized Access

The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cluster Shared Volumes File System Unauthorized Access

The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cisco Umbrella Secure Web Gateway Automatic Decryption

The vulnerability of the automatic decryption process of the Cisco Umbrella Secure Web Gateway SWG is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

InHand Networks InRouter302信息泄露漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. An information disclosure vulnerability exists in InHand Networks InRouter302 V3.5.4, which stems from the lack of effective protection of data by the router's configuration export feature. An attacker could exploit...

Cisco Firepower Management Center XSS

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

How to Cover 6 Core Areas of PCI Compliance with Armis and Akamai

The joint security solution from Akamai Guardicore Segmentation and Armis supports PCI compliance requirements to protect consumer data across entire networks...

PT-2022-2958 · Sonicwall · Sonicwall Sma1000

Name of the Vulnerable Software and Affected Versions: SonicWall SMA1000 series firmware versions 12.4.0, 12.4.1-02965 and earlier Description: The issue is related to the use of a shared and hard-coded encryption key to store data. This could allow an attacker to disclose protected information...

[White Paper] Social Engineering: What You Need to Know to Stay Resilient

Security and IT teams are losing sleep as would-be intruders lay siege to the weakest link in any organization's digital defense: employees. By preying on human emotion, social engineering scams inflict billions of dollars of damage with minimal planning or expertise. Cybercriminals find it easie...

Forrester Report Reveals the 5 Benefits IT Teams Really Need from API Security Tools

An Application Programming Interface API is a software intermediary that allows applications to communicate with one another. APIs provide routines, protocols, and tools for developers to facilitate and accelerate the creation of software applications. They enable applications to easily access an...

PackageKit Transaction Interface Unauthorized Access

The vulnerability of the transaction interface of the PackageKit package manager is related to insufficient protection of service data. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...

Convert2RHEL Insufficient Protection Password Cracking

The vulnerability of the Convert2RHEL tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker to obtain user passwords using the command line...

Azure Sphere Service Data Protection Unauthorized Access

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-3209 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient protection of internal data in Microsoft Office, allowing an attacker to gain unauthorized access to protected information by opening a special...

PT-2022-3140 · Microsoft · Windows Desired State Configuration +1

Name of the Vulnerable Software and Affected Versions: Windows Desired State Configuration DSC affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Desired State Configuration DSC service. Exploitation of this issue may allow an...

PT-2022-3134 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft Office Web Apps Server affected versions not specified Microsoft Office Online Server affected versio...

Data Protection as the Foundation of Trust: Celebrating Privacy Awareness Week in APAC

As part of our mission to help organisations protect their data and all paths to it, Imperva is supporting Privacy Awareness Week in Australia and Singapore, with the aim of educating individuals and organisations about the importance of data privacy and protection. In today’s digital economy, da...

Hitachi Content Platform Anywhere Insufficient Protection

The vulnerability of the Hitachi Content Platform Anywhere synchronization and sharing software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

“Reject All” cookie consent button is coming to European Google Search and YouTube

Google will soon be giving European countries a "Reject All" button in the Search and YouTube cookie consent banner. This change, which was revealed by Googles Product Manager for Privacy, Safety & Security Sammit Adhya in a blog post, has already been rolled out in France and will be cascaded to...