Ceph storage insufficient protection confidential data compromise

The vulnerability of the Ceph storage system lies in the rehydration of user data. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

FortiOS Application Control Block Unauthorized Access

The vulnerability of the Application Control Block in FortiOS operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools

It's no secret that the internet isn't a very safe place. And it's not hard to understand why. It's a medium that connects billions of people around the world that affords bad actors enough anonymity to wreak havoc without getting caught. It's almost as if the internet's tailor-made to enable sca...

IBM Spectrum Protect Client Buffer Overflow Vulnerability (CNVD-2021-103663)

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a data protection platform from IBM of America. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. IBM Spectrum...

HP LaserJet Unauthorized Access

The vulnerability of HP LaserJet, PageWide, Scanjet Enterprise, and LaserJet Managed printer microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

FSLogix Automated Control Software Unauthorized Access

The vulnerability of the FSLogix automated desktop virtualization control software lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the device...

IBM Spectrum Protect Plus Access Control Error Vulnerability

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of all sizes.A security vulnerability exists in IBM Spectrum Protect...

IBM Spectrum Protect Plus server-side request forgery vulnerability

IBM Spectrum Protect Plus is a data protection platform from IBM Corporation. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes.A security vulnerability exists in IBM Spectrum...

IBM Spectrum Protect Plus Information Disclosure Vulnerability (CNVD-2022-05087)

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes.IBM Spectrum Protect Plus has a security vulnerability...

Jenkins Data Protection Breach

The vulnerability of the Jenkins automation server relates to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

D-Link DIR-2640-US Privilege Escalation

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

New research reveals that one third of all log-in attempts on eCommerce sites are malicious

What do humans and bots have in common? A love for visiting online shopping sites: more than half 57% of all attacks on retail websites in 2021 were carried out by bots, compared to 33% for all other industries. It gets worse: a third of all log-in attempts on retail eCommerce websites are accoun...

CVE-2021-42023

A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...

PT-2021-5673 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of protection for service data, which could allow a remote attacker to gain unauthorized access to a device. Recommendations: At the moment...

IBM Spectrum Protect Plus 信任管理问题漏洞

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes.IBM Spectrum Protect Plus has a security vulnerability...

Intel BIOS/UEFI Privilege Escalation

The vulnerability of Intel BIOS/UEFI processor microprogramming systems is related to insufficient protection of system data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...

Adobe Experience Manager Information Disclosure

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

Cisco ThousandEyes Recorder Disclosure

The vulnerability of the software installer for Cisco ThousandEyes Recorder relates to insufficient protection of registration data. Exploiting this vulnerability could allow a hacker to disclose protected information...

Azure RTOS Data Protection Unauthorized Access

The vulnerability of Azure RTOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Remote Desktop Protocol Client Unauthorized Access

The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...