ELECOM WRC-X3000GS2-W Security Vulnerability

The ELECOM WRC-X3000GS2-W is a wireless router from ELECOM. A security vulnerability exists in the ELECOM WRC-X3000GS2-W that originates from the possibility that an attacker may be able to guess the encryption key used for wireless LAN communication and intercept the communication...

PT-2023-26505 · Ivanti · Secure Access Linux +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Software affected versions not specified Description: A logged in user can modify specific files, potentially leading to unauthorized changes in system-wide configuration settings, which could...

cloud-init security, bug fix, and enhancement update

23.1.1-11.0.2 - Fix Oracle Datasource network and getdata methods for OCI OL Orabug: 35950168 23.1.1-11.0.1 - Increase retry value and add timeout for OCI Orabug: 35329883 - Fix log file permission Orabug: 35302969 - Update detection logic for OL distros in config template Orabug: 34845400 - Adde...

Sql injection

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

CVE-2023-41285

CVE-2023-41285 affects QuMagie prior to version 2.1.4. The issue is a SQL injection vulnerability that could be exploited by authenticated users over the network to inject malicious code. Affected software: QuMagie (QNAP) with versions before 2.1.4. Root cause described in available documents is ...

CVE-2023-41284

CVE-2023-41284 affects QuMagie. A SQL injection vulnerability could let authenticated users inject malicious code over the network. QuMagie 2.1.4 and later fixes exist; versions prior to 2.1.4 are affected. Official disclosures cite high-impact metrics (network attack, low complexity, low privile...

CVE-2023-39295

QuMagie has an OS command injection vulnerability that allows authenticated users to execute commands over the network. Affected versions are prior to 2.1.3; the issue is fixed in 2.1.3 and later. CVSS v3.1 metrics indicate high impact (C/H, I/H, A/H) with network exploitability and low privilege...

What is NIS2, and how can you best prepare for the new cybersecurity requirements in the EU?

NIS2 is a European directive that includes new measures to ensure that organizations operating in the European Union EU have a high common level of network and infrastructure security. The "directive" outlines the goals all EU member states must achieve. However, each country will implement it in...

CVE-2023-45225

Zavio IP Cameras (CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, CD321) with firmware version M2.1.6.05 are affected by multiple stack-based overflows. The root cause is insufficient validation of allocated buffer size while processing/parsing XML elements in incomi...

Moderate: containernetworking-plugins security and bug fix update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

Zero Day Threat Protection for Your Network

Explore the world of zero day threats and gain valuable insight into the importance of proactive detection and remediation...

Fedora: Security Advisory (FEDORA-2023-035866b576)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-23368

CVE-2023-23368 is an OS command injection affecting QNAP QTS/QuTS systems, allowing network-based command execution. Affected products and fixed versions are documented: QTS 5.0.1.2376 build 20230421 and later; QTS 4.5.4.2374 build 20230416 and later; QuTS hero h5.0.1.2376 build 20230421 and late...

What Is Zero Trust Network Access (ZTNA) ?

Unraveling the Mysteries Behind the Zero Trust Network Access ZTNA Paradigm Digital protection strategies have traditionally relied heavily on the concept of trust. However, these conventional notions, which assume a considerable measure of security within an organization's connectivity sphere,...

CVE-2023-46725

CVE-2023-46725 affects FoodCoopShop open‑source software. Versions 3.2.0 up to 3.6.0 are vulnerable to server‑side request forgery via the Network module: an attacker with a manufacturer account can abuse the /api/updateProducts.json endpoint to cause the server to proxy requests to an arbitrary ...

CVE-2023-26454

CVE-2023-26454 affects the Open-Xchange App Suite imageconverter service. The vulnerability allows injecting and executing arbitrary SQL via requests that fetch image metadata, with the attacker needing access to adjacent networks (not exposed to the public Internet by default). Arbitrary SQL sta...

CVE-2023-26452

Open-Xchange App Suite's imageconverter service is affected by an SQL injection vulnerability triggered when caching an image and returning its metadata, allowing arbitrary SQL statements to execute in the service DB user context. Exploitation requires access to adjacent networks (not exposed pub...

Improper access control

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

Zero Day Threat Protection for Your Network

Explore the world of zero day threats and gain valuable insight into the importance of proactive detection and remediation...

XDR vs. SIEM

Enhanced Discovery and Resolution, or more commonly known as XDR, serves as a revolutionary model in cybersecurity. It works by combining multiple security apparatuses into a solitary system, thus uplifting the ability for threat detections and subsequent responses. Unlike the standard...