PT-2018-4422

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.0.1 through 3.0.1.6 iFix7 Interim Fix 1, versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 IBM Rational Quality Manag...

CVE-2018-0902

The Cryptography Next Generation CNG kernel-mode driver cng.sys in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, ak...

Microsoft Windows Multiple Vulnerabilities (KB4088782)

This host is missing a critical security update according to Microsoft KB4088782 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4088787)

This host is missing a critical security update according to Microsoft KB4088787 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CNG Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Cryptography Next Generation CNG kernel-mode driver cng.sys when it fails to properly validate and enforce impersonation levels. An attacker could exploit this vulnerability by convincing a user to run a specially crafted application that is...

Essays from 7 Experts on Moving to a Cloud-Based Endpoint Security Platform

Carbon Black recently published a series of essays about the experiences of experts in the field on information security as they moved their endpoint security program to the cloud; this is one of those essays. To read the full series check out 7 Experts on Moving to a Cloud-Based Endpoint Securit...

AxxonSoft Axxon Next Directory Traversal Vulnerability

Axxon Next is a new generation of open platform video management software. AxxonSoft Axxon Next suffers from a directory traversal vulnerability that can be exploited by an attacker to perform directory traversal via a string in a URL...

AxxonSoft Axxon Next Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits Title AxxonSoft Axxon Next - AxxonSoft Client Directory Traversal via an initial /css//..%2f substring in a URI. CVE-2018-7467 Vulnerability Type Directory Traversal via an initial /css//..%2f substring in a URI Vendor of Product AxxonSoft...

Directory traversal

AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI...

CVE-2018-7467

AxxonSoft Axxon Next is affected by a directory traversal vulnerability exposed via a URI containing /css//..%2f. The connected sources consistently refer to CVE-2018-7467 as a directory traversal issue (also described as local file inclusion in some templates) affecting the Axxon Next client web...

CVE-2018-7467

AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI...

Contain Attacks in Real Time with Live Response in Cb Defense

Endpoint security is broken. Yes, you’ve heard it before - traditional, signature-based antivirus AV can’t keep up with the volume of new malware and advanced attack methods being developed by cyber criminals every day. And that’s absolutely true. But a report published last year highlights an ev...

CVE-2018-7467: Improper Limitation of a Pathname to a Restricted Directory

AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI...

PT-2018-3858 · Axxonsoft · Axxon Next

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon Next affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access. Exploitation of this issue may allow a remote attacker to disclose protected...

DEBIAN-CVE-2018-7420

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in wiretap/pcapng.c by adding a block-size check for sysdig event blocks...

PT-2018-18073

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description An issue was discovered in FreeXL, where there is a heap-based buffer over-read in the read mini biff next record function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...

Cloud & Big Data: The Future of Security – Carbon Black & VMware’s 15-City Tour “Cloud Force Security” Kicks Off Feb. 20!

Endpoint Security is Broken Attackers are innovating faster than traditional defenses can keep up. In response, the security stack has become too complicated as more products that don’t work together are introduced to fill the gaps. There is a better way. Organizations are moving their endpoint a...

PT-2018-17497

Name of the Vulnerable Software and Affected Versions Formspree before 2018-01-23 Description The issue is related to an XSS problem in the templates/forms/thanks.html file, specifically concerning the next parameter. Recommendations For versions prior to 2018-01-23, update to a version released...

Why Stand-Alone IDPS Matters More Than Ever, and the 2018 Gartner Magic Quadrant

First, What is IDPS and Why Do We Care? Intrusion Prevention Systems IPS emerged as an improvement on Intrusion Detection Systems IDS. IDS are out-of-band collectors of network traffic that analyze the information and provide alerts. The “eureka” of IPS was that instead of just alerting, why not...

PT-2018-17392

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 4.2.3 Description The issue concerns a Directory Traversal vulnerability under the "/ next" request namespace. This allows for potential unauthorized access to sensitive files and directories. Recommendations For...