PT-2021-8129 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the dbgfs component of the Linux kernel and is caused by incorrect locking. This can lead to a use after free bug when the monitoring targets are destroyed...

Time to Ditch Big-Brother Accounts for Network Scanning

In almost every network, there is a highly privileged service account remotely connecting to all computers. These accounts are usually used by backup, security or monitoring solutions. But using such accounts to remotely login to systems on the network introduces unnecessary risk — it’s a bad...

Answering Log4Shell-related questions

Important notice On December 18th, Log4j version 2.17.0 was released to address open vulnerabilities. It is highly recommended to update your systems as soon as possible. History of the Log4j library vulnerabilities CVE-2021-44228 initial vulnerability – partially fixed in 2.15.0 CVE-2021-45046...

The vulnerability of the “device_list” component of the monitoring software for Advantech R-SeeNet routers allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the “devicelist” component of the monitoring software for Advantech R-SeeNet routers involves incorrect processing of the healthfilter parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks by sending specially crafted SQL...

Security update for netdata (moderate)

openSUSE Security Update: Security update for netdata Announcement ID: openSUSE-SU-2021:1603-1 Rating: moderate References: 1139094 1139095 1139098 Cross-References: CVE-2018-18836 CVE-2018-18837 CVE-2018-18838 CVE-2018-18839 CVSS scores: CVE-2018-18836 NVD : 6.5...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-03998)

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-04002)

Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT is vulnerable to a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IOT Elevation of Privilege Vulnerability

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IOT suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-03997)

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-04000)

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IoT Information Disclosure Vulnerability

Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from an information disclosure vulnerability. No detailed vulnerability details are currently available...

Delta Electronics DIAEnergie HandlerEnergyType Parameter Name Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-04003)

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Delta Electronics DIAEnergie .NET Request.QueryString Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-04001)

Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT is vulnerable to a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has patched several open source dependencies

Summary IBM Cloud Pak for Multicloud Management Monitoring has patched several open source dependencies that were inadvertently missed during previous scans. Vulnerability Details CVEID: CVE-2021-21409 DESCRIPTION: Netty is vulnerable to request smuggling, caused by improper validation of request...

Convergence Ahoy: Get Ready for Cloud-Based Ransomware

The two types of cyberattacks that have dominated the news over the past year have been ransomware, and software and service supply-chain attacks. The former have mainly been perpetrated by criminal enterprises looking to turn a quick profit. In contrast, the latter attacks have primarily been th...

Thruk Cross-Site Scripting Vulnerability

Thruk is an open source multi-backend monitoring web interface from the personal developer Sven Nierlein of Germany. cross-site scripting vulnerability exists in Thruk 2.40-2, which stems from the system allowing the storage of XSS. no detailed vulnerability details are currently available...

The vulnerability of the software for remote monitoring and management of IT systems by Kaseya VSA, related to insufficient protection of registration data, allows a hacker to disclose sensitive information that should be protected.

The vulnerability of Kaseya VSA’s remote monitoring and management software lies in the insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to disclose the protected information...