5888 matches found
PuTTY Cryptographic Buffer Overflow DoS
The vulnerability of the PuTTY encryption protection mechanism lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Introducing Kernel Data Protection, a new platform security technology for preventing data corruption
Attackers, confronted by security technologies that prevent memory corruption, like Code Integrity CI and Control Flow Guard CFG, are expectedly shifting their techniques towards data corruption. Attackers use data corruption techniques to target system security policy, escalate privileges, tampe...
Dell EMC Data Protection Advisor Operating System Command Injection Vulnerability
Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery and data replication management. An operating system command injection vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1. A...
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
Command injection
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
CVE-2020-5352
Dell EMC Data Protection Advisor (DPA) versions 6.4, 6.5 and 18.1 are affected by an OS command injection vulnerability (CVE-2020-5352). A remote authenticated attacker can execute arbitrary commands on the affected system. The issue is confirmed across multiple feeds (NVD entry and Nessus plugin...
PT-2020-18422
Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions 6.4 through 6.5 Dell EMC Data Protection Advisor version 18.1 Description The issue allows a remote authenticated malicious user to execute arbitrary commands on the affected system due to an OS comman...
CVE-2020-5352: Improper Neutralization of Special Elements used in an OS Command
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
Cisco Webex Meetings Desktop App Info Disclosure
The vulnerability of the Cisco Webex Meetings Desktop App software relates to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...
Microsoft Visual Studio Code Live Share Extension Unauthorized Access
The vulnerability of the Microsoft Visual Studio Code Live Share Extension relates to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by intercepting tokens from the client to...
Afternoon Cyber Tea: Cybersecurity & IoT: New risks and how to minimize them
Recently, Microsoft announced our acquisition of CyberX, a comprehensive network-based security platform with continuous threat monitoring and analytics. This solution builds upon our commitment to provide a unified IoT security solution that addresses connected devices spread across both...
6 Best Practices to Fight a New Breed of Insider Threats
The current global pandemic has disrupted how organizations work. Some businesses quickly adapt while other organizations are still figuring out the new landscape. Unfortunately, criminals are exploiting vulnerabilities during this challenging time. There has been an 238% increase in cyberattacks...
How to Safeguard Data When the Majority of Your Workforce is Remote
Before our current situation, you and your teams may have implemented a comprehensive data protection plan. The scope of change businesses are currently facing is something none of us could have predicted. These changes will continue to impact how we work in the future. How can you be sure your...
Cisco DNA Center Audit Log Unauthorized Access
The vulnerability of the audit log component of the Cisco Digital Network Architecture DNA Center system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
D-Link DIR-865L toolsadmin.php Unauthorized Access
The vulnerability of the toolsadmin.php component in the D-Link DIR-865L router’s microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data...
Time for a Haircut
Like many people around the world, my hair has grown profusely in the past few months and bears little resemblance to the photo in my profile. Without the required care and attention, my hair is getting dangerously close to the bad hairstyles I adopted in the 1980s. I could of course attempt to f...
OpenSSL BN_mod_exp Heap Buffer Overflow DoS
The vulnerability of the BNmodexp function crypto/bn/asm/x8664-mont5.pl in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to confidential data...
OpenSSL AES-NI Fill Checking Unauthorized Access
The vulnerability of the fill-checking function in the AES-NI implementation of the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to confidential data...