9174 matches found
Security for Amazon Redshift
We’ll show you how to set up basic monitoring of AWS Redshift using their native security features, including how to set up a Redshift instance, creating S3 buckets, and shipping the audit logs to Cloudwatch. Basic security for Amazon Redshift can be accomplished through standard AWS security...
Securely Managing Entitlement of S3 Resources
Here we’ll talk about securely managing entitlements of S3 resources including managing access control to S3 objects and utilizing audit logging to keep track of the usage of shared resources. Amazon’s AWS services allow for accounts to grant access to resources from other accounts on AWS. This...
A user without PR can reset user authentication failures information
Impact The script service method used to reset the authentication failures record can be executed by any user with Script rights and does not require Programming rights as it should have. Note that being able to reset the authentication failure record mean that an attacker with script right might...
CVE-2021-34382
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tzmapsharedmem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel...
Security update for tor (important)
openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0941-1 Rating: important References: 1179331 1181244 1187322 1187323 1187324 1187325 Cross-References: CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 Affected Products: openSUSE Backports SLE-15-SP2 An update that...
Ubuntu: Security Advisory (USN-4998-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:0926-1 Security update for tor
This update for tor fixes the following issues: tor 0.4.5.9 Don't allow relays to spoof RELAYEND or RELAYRESOLVED cell CVE-2021-34548, boo1187322 Detect more failure conditions from the OpenSSL RNG code boo1187323 Resist a hashtable-based CPU denial-of-service attack against relays CVE-2021-34549...
USN-4998-1: Ceph vulnerabilities
It was discovered that in some situations Ceph logged passwords from the mgr module in clear text. An attacker could use this to expose sensitive information. CVE-2020-25678 Goutham Pacha Ravi, Jahson Babel, and John Garbutt discovered that user credentials in Ceph could be manipulated in certain...
Mattermost: DoS via large console messages
Summary: When server console logging is enabled, it's possible to cause a complete denial of service to the server by submitting large text 64KB that gets output in the console log. This causes the server to become unavailable for all users. Steps To Reproduce: I set up my environment following t...
SUSE-SU-2021:2147-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - Fixed plaintext password entries in logfiles bsc1184016...
CVS Health Records for 1.1 Billion Customers Exposed
More than 1 billion records for CVS Health customers were left in the database of a third-party, unnamed vendor – exposed, unprotected, online. Researchers said the data points revealed could be strung together to create an extremely personal snapshot of someones’s medical situation. The glitch i...
Moderate: Red Hat Security Advisory: Openshift Logging Bug Fix Release (5.0.5)
Openshift Logging Bug Fix Release 5.0.5 This release includes a security update. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...
lua-resty-waf
This is a Lua library for building a web application firewall WAF on top of the OpenResty stack. The library is called "lua-resty-waf" and is maintained by Robert Paprocki p0pr0ck5. The library provides a set of APIs for loading and managing rules, as well as for logging and storing data. It also...
SUSE-SU-2021:1960-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - Do not log passwords in logfiles bsc1184016...
SUSE-SU-2021:1959-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - Fixed plaintext password entries in logfiles bsc1184016...
Samsung Mobile Galaxy Watch PlugIn 日志信息泄露漏洞
The Samsung Galaxy Watch3 is the 3rd generation smartwatch in the Samsung Galaxy Watch series. The Samsung Galaxy Watch3 plug-in has a security vulnerability that allows an attacker with logging privileges to exploit the vulnerability to disclose the Wi-Fi password connected to the user's...
CVE-2020-15380
Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...
CVE-2020-15380
Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...
