1413 matches found
Update adds BPA rules for DirectAccess in Windows Server 2012 R2 or Windows Server 2012
Update adds BPA rules for DirectAccess in Windows Server 2012 R2 or Windows Server 2012 Introduction This article describes an update that adds new Best Practices Analyzer BPA rules. The rules are for DirectAccess on the servers that are running Windows Server 2012 R2 or Windows Server 2012. The...
jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_text_region
Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5644208745742336 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
Code injection
When TLS is enabled with ssl-endpoint-identification-enabled set to true, Apache Geode fails to perform hostname verification of the entries in the certificate SAN during the SSL handshake. This could compromise intra-cluster communication using a man-in-the-middle attack...
CVE-2019-10091
CVE-2019-10091 affects Apache Geode. When TLS is enabled and ssl-endpoint-identification-enabled is true, Geode may fail to verify hostnames in the certificate SAN during the SSL handshake, enabling potential man-in-the-middle scenarios and compromising intra-cluster communications. The issue is ...
Information Leakage Vulnerability in H3C Cloud Desktop System of Xinhua San Technologies Co.
Xinhua San Group is dedicated to worded solutions. It provides one-stop digitalization solutions including cloud computing, big data, intelligent connectivity, information security, new security, IoT, edge computing, artificial intelligence, 5G, etc., as well as end-to-end technical services. An...
Security Bulletin: Vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in DCNM Network Management Software used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL could allow a local attacker to bypass security restrictions, caused by the building of . mingw...
Security Bulletin: Vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in DCNM Network Management Software used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability ...
H3C Cloud Desktop suffers from information leakage vulnerability
H3C cloud desktop Xinhua San Group self-developed cloud desktop products. H3C Cloud Desktop has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...
Faraday presents the latest version of their Security Platform for Vulnerability Management Automation
Miami, February 19, 2020 - Faraday is opening 2020 by strengthening their releases using the featured cybersecurity worldwide events calendar, starting next week with BSides and RSAC in San Francisco. As a Blackhat Global Partner, the company will also participate as a sponsor in all BH’s global...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I'll be at RSA Conference 2020 in San Francisco. On Wednesday, February 26, at 2:50 PM, I'll be part of a panel on "How to Reduce Supply Chain Risk: Lessons from Efforts to Block Huawei." On Thursday, February 27, at 9:20 AM, I'm...
PT-2022-1547 · Node.Js +7 · Node.Js +7
Name of the Vulnerable Software and Affected Versions: Node.js versions 12.22.9 Node.js versions 14.18.3 Node.js versions 16.13.2 Node.js versions 17.3.1 Description: The issue is related to the conversion of SANs Subject Alternative Names to a string format in Node.js, which is used to check pee...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I'm speaking at Indiana University Bloomington on January 30, 2020. I'll be at RSA Conference 2020 in San Francisco. On Wednesday, February 26, at 2:50 PM, I'll be part of a panel on "How to Reduce Supply Chain Risk: Lessons from...
Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2018-0734 DESCRIPTION: The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use...
Security Bulletin: Vulnerability in the Fabric OS used by IBM b-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2018-0735 DESCRIPTION: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use...
Security Bulletin: Vulnerability in the Fabric OS used by IBM b-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2017-3737 DESCRIPTION: OpenSSL 1.0.2 starting from version 1.0.2b introduced an "error state" mechanism. The intent was that if a fatal error occurr...
Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2018-0737 DESCRIPTION: The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker...
Western Digital SSD Dashboard and SanDisk SSD Dashboard Trust Management Issue Vulnerability
Western Digital SSD Dashboard and SanDisk SSD Dashboard are both products of Western Digital, Inc. Western Digital SSD Dashboard is a dashboard software for managing and monitoring SSD Solid State Drive devices. SanDisk SSD Dashboard is a dashboard software for managing and monitoring SanDisk SSD...
Weak Password Vulnerability in Xinhua San Technologies ER8300 Router
ER8300 is a full gigabit router for Internet cafes from H3C, featuring a professional 64-bit dual-core network processor. A weak password vulnerability exists in the ER8300 router of Xinhua San Technologies Co. An attacker can exploit this vulnerability to log into the system to obtain sensitive...
san-jose-del-valle.listado-empresas.es Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-980021 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
California Passes Bill to Ban Police Use of Facial Recognition
The California Senate has passed a bill in a 22-15 vote that would ban the use by law enforcement of body cams that use facial recognition. The move will send AB 1215, already passed by the California Assembly back in May on a 45-17 vote, to the desk of Gov. Gavin Newsom to be signed into law. Th...