85 matches found
Code injection
A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...
CVE-2022-4313
A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...
PT-2023-14178 · Tenable · Tenable
Name of the Vulnerable Software and Affected Versions: Tenable products affected versions not specified Description: A vulnerability was reported where an authenticated user with Scan Policy Configuration roles in Tenable products could manipulate audit policy variables by modifying the scan...
Tenable Network Security Tenable.Sc和Nessus 安全漏洞
Tenable Network Security Nessus and Tenable.Sc are both products of Tenable Network Security, U.S.A. Nessus is an open-source system vulnerability scanner.Tenable.Sc is a vulnerability analysis solution. Sc is a vulnerability analysis solution that supports real-time vulnerability assessment and...
[R1] Tenable Plugin Feed ID #202212081952 Fixes Arbitrary Code Execution Vulnerability
R1 Tenable Plugin Feed ID 202212081952 Fixes Arbitrary Code Execution Vulnerability Arnie Cabral Fri, 03/10/2023 - 16:28 Audit files that are built into the Tenable products provide capability to adjust the audit evaluation to meet organizational requirements. A vulnerability was reported where...
usbguard: Fix unauthorized access via D-Bus
A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...
usbguard: Fix unauthorized access via D-Bus
A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...
usbguard: Fix unauthorized access via D-Bus
A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...
usbguard: Fix unauthorized access via D-Bus
A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...
The vulnerability of the PAN-OS operating system, related to errors in configuring URL filtering policies, allows a perpetrator to trigger a Denial-of-Service Attack (RDoS).
The vulnerability of the PAN-OS operating system is related to errors in configuring URL filtering policies. Exploiting this vulnerability can allow a malicious actor to perform a Denial-of-Service Attack RDoS...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP TMM iRule, which stems from the fact that when configuring a BIG-IP...
CVE-2021-37151
CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy configurations with MFA, the API response length can be used to differentiate between a valid user and an invalid one aka Username...
How to Enable and Manage Client Audio Settings for the Citrix Receiver using a Group Policy
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article explainsCitrix Administrators how to configure the different audio options for Citrix...
Wynis - Audit Windows Security With Best Practice
Just a powershell scripts for auditing security with CIS BEST Practices Windows 10 and Window Server 2016 You just need to run the script, it will create a directory named : AUDITCONF%DATE% The directory output will contain the files belows: -Antivirus-%COMPUTERNAME% : List installed Antivirus...
F5 Networks BIG-IP : BIG-IP ASM XSS vulnerability (K12002065)
A cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened...
CVE-2020-3312 Cisco Firepower Threat Defense Software Information Disclosure Vulnerability
A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data on an affected device. The vulnerability is due to insufficient application identification. An...
PT-2020-2506 · Cisco · Cisco Ftd
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...
Traffic of any type doesn't pass through SDWAN Firewall
Traffic is sent from Zone A to Zone B. Firewall Policy Policy Ais configured to ALLOW 10.10.10.x IP source to Any destination with Highest Priority. Another Firewall policy Policy Bis set to DENY from Any source to Any destination with Least priority. Issue is that the Traffic always hits the Den...
Cisco Firepower Threat Defense Software Information Disclosure Vulnerability
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software, which could allow an unauthenticated, remote attacker to gain unauthorized read access to...
CVE-2019-12627
A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...