1965 matches found
Default credentials
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8...
CVE-2022-3754 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8...
CVE-2022-3754 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8...
CVE-2022-3754
CVE-2022-3754 affects the phpMyFAQ project (thorsten/phpmyfaq), before version 3.1.8. The root issue is weak password requirements; versions prior to 3.1.8 allow inadequate password length. The 3.1.8 release introduces an eight-character minimum password length. No exploit details are provided in...
How businesses are gaining integrated data protection with Microsoft Purview
Currently, our interconnected world is creating 2.5 quintillion bytes of data every day.1 Every purchase made, every email sent, every contract signed: all of it gets shared, accessed, and stored. We take it on faith that organizations are doing all this safely; however, data loss is becoming a...
Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for IBM Java XML vulnerability CVE-2022-21299
Summary A flaw in the XML component allows attackers to inflict a denial-of-service and/or access external entities which should be inaccessible. Vulnerability is identified in Java versions 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.5 and earlier. Vulnerability Details Refer to the securit...
[The Lost Bots] S02E05: The real magic in the Magic Quadrant
!\The Lost Bots\ S02E05: The real magic in the Magic Quadranthttps://blog.rapid7.com/content/images/2022/10/The-Lost-Bots-logo-large.png In this episode, we discuss the best use of market research reports, like Magic Quadrants and Waves. If you're in the market for a new cybersecurity solution, d...
The Intelligent Listing: Cybersecurity Job Descriptions That Deliver
Modern job descriptions have quite the reputation for causing reactionary eye-rolling. Why? Because what used to be a couple of paragraphs – about requirements and experience for performing a cybersecurity analyst job – is actually now filled with a laundry list of criteria that make candidates...
PT-2022-6680 · Juniper Networks · Junos Evolved +1
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S9 Juniper Networks Junos OS versions 19.2 prior to 19.2R3-S5 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S3 Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S9 Juniper...
CVE-2022-33748
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...
Design/Logic Flaw
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...
lock order inversion in transitive grant copy handling
ISSUE DESCRIPTION As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, b...
CVE-2022-33748
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...
CVE-2022-3376
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
Default credentials
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PYSEC-2022-43157
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PYSEC-2022-43157
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
CVE-2022-3376
CVE-2022-3376 affects rdiffweb (ikus060/rdiffweb) prior to version 2.5.0a4. The reported issue is weak password requirements that allow a new password to be the same as the old one during password reset. According to multiple sources (GHSA/OSV/PYSEC and NVD entries), this is mitigated in 2.5.0a4 ...