9798 matches found
CVE-2021-40860
A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution IWD before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the qlexpression parameter, with which all data in the database can be extracted and OS command execution is possible...
CVE-2021-40861: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution IWD 9.0.017.07 allows an attacker to execute arbitrary SQL queries via the value attribute, with which all data in the database can be extracted and OS command execution is possible depending on the...
CVE-2021-40860: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution IWD before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the qlexpression parameter, with which all data in the database can be extracted and OS command execution is possible...
PT-2021-22989
Name of the Vulnerable Software and Affected Versions Genesys intelligent Workload Distribution IWD versions prior to 9.0.013.11 Description A SQL Injection issue in the custom filter query component allows an attacker to execute arbitrary SQL queries via the ql expression parameter. This enables...
PT-2021-22990
Name of the Vulnerable Software and Affected Versions Genesys intelligent Workload Distribution IWD version 9.0.017.07 Description A SQL Injection issue in the custom filter query component allows an attacker to execute arbitrary SQL queries via the value attribute. This enables the extraction of...
Genesys Intelligent Workload Distribution SQL injection vulnerability
Genesys Intelligent Workload Distribution Iwd is an application from Genesys, Inc. It can be used with the Genesys Customer Interaction Management Cim platform to assign tasks to the resources best suited to handle them. A SQL injection vulnerability exists in Genesys Intelligent Workload...
Genesys Intelligent Workload Distribution SQL injection vulnerability
Genesys Intelligent Workload Distribution Iwd is an application from Genesys, Inc. It can be used with the Genesys Customer Interaction Management Cim platform to assign tasks to the resources best suited to handle them. A SQL injection vulnerability exists in Genesys Intelligent Workload...
dynamic configuration server RPCbind DoS
The vulnerability of the dynamic configuration server for RPC ports, RPCbind, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
openSUSE 15 Security Update : singularity (openSUSE-SU-2021:1525-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1525-1 advisory. - The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution...
Emotet’s back and it isn’t wasting any time
Emotet is one of the best known, and most dangerous, malware threats of the past several years. On several occasions it appeared to take an early retirement, but it has always came back. In January of this year, a global police operation dismantled Emotets botnet. Law enforcement then used their...
Emotet being spread via malicious Windows App Installer packages
As reported by Cryptolaemus on Twitter, and demonstrated step by step by BleepingComputer, Emotet is now being distributed through malicious Windows App Installer packages that pretend to be Adobe PDF software. How does the attack work? To understand what Microsoft is supposed to do about this...
MGASA-2021-0531 Updated docker-containerd packages fix security vulnerability
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents...
Updated docker-containerd packages fix security vulnerability
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents...
Magnat campaigns use malvertising to deliver information stealer, backdoor and malicious Chrome extension
By Tiago Pereira. Talos recently observed a malicious campaign offering fake installers of popular software as bait to get users to execute malware on their systems. This campaign includes a set of malware distribution campaigns that started in late 2018 and have targeted mainly Canada, along...
[SECURITY] Fedora 35 Update: stargz-snapshotter-0.10.1-1.fc35
Fast container image distribution plugin with lazy pulling...
[SECURITY] Fedora 34 Update: stargz-snapshotter-0.10.1-1.fc34
Fast container image distribution plugin with lazy pulling...
krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field
A flaw was found in krb5. The Key Distribution Center KDC in MIT Kerberos 5 has a NULL pointer dereference via a FAST inner body that lacks a server field. An authenticated attacker could use this flaw to crash the Kerberos KDC server. The highest threat from this vulnerability is to system...
CVE-2021-41190
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Image Specification, the manifest and index documents were not self-describing and documents with a single digest could be interpreted as either a manifest or an index. ...
Clarify Content-Type handling
Impact In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both “manifests” and “layers” fields could be interpreted as either a manifest or an index in the...
GHSA-MC8V-MGRF-8F4M Clarify Content-Type handling
Impact In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both “manifests” and “layers” fields could be interpreted as either a manifest or an index in the...