SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities

Document Title: =============== SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2209 Release Date: ============= 2020-04-14 Vulnerability Laboratory ID VL-ID: ====================================...

Deploy a Cloud WAF & DDoS Solution While Complying with Australian Data Sovereignty

Australia has strict data sovereignty laws in place to ensure that personal customer data remains within the country’s borders. However, we often hear about cloud-based WAF vendors being unable to guarantee that data will not be moved across borders for inspection and data logging purposes. This...

Micro Focus ArcSight Logger Cross-Site Request Forgery Vulnerability

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site request forgery vulnerability exists in Micro...

SQL Injection Vulnerability in NetMizer Log Management System

The NetMizer system records all session logs flowing through the device and transmits them to an external management center, which is an analysis system in conjunction with the NetMizer system. NetMizer log management system has a SQL injection vulnerability, through which an attacker can steal...

SQL Injection Vulnerability in NetMizer Log Management System de***.php Page

The NetMizer log management system is a stand-alone log management and analysis tool. A SQL injection vulnerability exists in the de.php page of the NetMizer Log Management System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in NetMizer Log Management System ge***.php Page

The NetMizer log management system is a stand-alone log management and analysis tool. A SQL injection vulnerability exists in the NetMizer Log Management System ge.php page, which can be exploited by attackers to obtain sensitive information...

[SECURITY] Fedora 30 Update: rsyslog-8.1911.0-1.fc30

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...

Partner Perspectives: Disrupt Advanced Threats with Blumira + Carbon Black

Matt Warner is the CTO of Blumira. Modern security challenges are not easy to fix or even identify, and despite misleading advertising from some vendors, there is no one-size-fits-all solution. Blumira frequently observes large visibility gaps in existing security implementations, allowing obviou...

CVE-2019-11207

The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contains multiple vulnerabilities that theoretically allow persistent and reflected cross-site scripting XSS attacks, as well as cross-site request forgery...

Stored XSS Vulnerability in legacy IBM System x IMM - US

Lenovo Security Advisory: LEN-24785 Potential Impact: Code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6159 Summary Description: A stored cross-site scripting XSS vulnerability exists in the legacy IBM System x IMM IMM v1 embedded Baseboard Management...

Dashboards to Use on Palo Alto Networks for Effective Management

Enterprises should expect to see more cyberattacks launched against them. The data that they now gather and store have made their infrastructures key targets for hackers. Customer data and intellectual property can be sold in the black market for profit, and sensitive information can also be used...

Dashboards to Use on Palo Alto Networks for Effective Management

Enterprises should expect to see more cyberattacks launched against them. The data that they now gather and store have made their infrastructures key targets for hackers. Customer data and intellectual property can be sold in the black market for profit, and sensitive information can also be used...

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

Directory traversal

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5889

CVE-2019-5889 concerns a log-management directory traversal vulnerability in OverIT Geocall, affecting version 6.3 prior to build 2:346977. The root cause is a failure to properly filter path elements in the log-management component, enabling access to locations outside of a restricted directory....

PT-2019-17847 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions prior to 6.3 build 2:346977 Description: A directory traversal issue was discovered in the log-management component. Recommendations: For OverIT Geocall versions prior to 6.3 build 2:346977, update to a version that...

Microsoft PowerShell Tampering Vulnerability

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code. To exploit this vulnerability, an attacker would need to log on to the affected system and run a specially crafted application. The security update addresses the vulnerability by correcting log...

SUSE-SU-2018:2603-1 Security update for crowbar, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui

This update for crowbar, crowbar-ha, crowbar-init, crowbar-openstack, crowbar-ui fixes the following issues: This security issues was fixed: - CVE-2018-3760: Upgrade rubygem-sprockets to prevent an information leak. Specially crafted requests could have been be used to access files that exists on...