PT-2024-1644 · Dell · Dell Endpoint Security Suite Enterprise +2

Name of the Vulnerable Software and Affected Versions: Dell Encryption versions prior to 11.9.0 Dell Endpoint Security Suite Enterprise versions prior to 11.9.0 Dell Security Management Server versions prior to 11.9.0 Description: The issue is related to a privilege escalation vulnerability due t...

HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform due to a missing specific...

SQL Injection Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-11424)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

Information leakage vulnerability in the electronic document security management system of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-10034)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

Command Execution Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-06018)

Beijing Yisaitong Science and Technology Development Limited Liability Company is a company whose business scope includes general items: technical services, technology development, technology consulting, technology exchanges, technology transfer and so on. There is a command execution vulnerabili...

We Asked ChatGPT for 2024 Cybersecurity Predictions but You Should Make These Resolutions Instead

By Caitlin Condon, Senior Manager, Vulnerability Research at Rapid7, and Christiaan Beek, Senior Director, Threat Analytics at Rapid7 It’s that time of year again — time for the annual tradition of cybersecurity predictions. Here at Rapid7 we’ve seen a whole lot of threats and exploited...

Imperva Named an Overall Leader in the KuppingerCole Leadership Compass: API Security and Management Report

Imperva named an Overall Leader Were thrilled to share that Imperva has achieved the prestigious status of Overall Leader in the KuppingerCole Leadership Compass: API Security and Management report. Our Leadership excels across the sub-categories of Product, Innovation, and Market Leadership and ...

What Is Network Security Management?

At the Heart of The Matter: Unraveling Essential Elements of Network Safeguard Administration in Digital Space The sphere of Online Network Safeguard Supervision presents a vast playground, humming with an abundance of methods, protocols, and modern-day tech tools. Together, their role is to...

The vulnerability of the FortiSIEM security management system arises from the failure to take measures to neutralize specific elements, allowing attackers to execute arbitrary commands.

The vulnerability of the FortiSIEM security management system exists due to the lack of measures to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

Design/Logic Flaw

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server are affected by CVE-2023-39246 due to an Insecure Operation on Windows Junction during installation. The issue allows a local attacker with low privileges and no user interaction to create an arbitrary f...

Dell Multiple Products Backlink Vulnerability

Dell Security Management Server is a data security management solution.Dell Encryption is a data protection solution.Dell Endpoint Dell Endpoint Security Suite is a network security suite. A security vulnerability exists in Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Securi...

PT-2023-26846 · Dell +1 · Dell Endpoint Security Suite Enterprise +3

Name of the Vulnerable Software and Affected Versions: Dell Encryption versions prior to 11.8.1 Dell Endpoint Security Suite Enterprise versions prior to 11.8.1 Dell Security Management Server versions prior to 11.8.1 Description: The issue is related to an Insecure Operation on Windows Junction...

Command Execution Vulnerability in Green Alliance Operations and Maintenance Security Management System

Beijing Shenzhou Green Alliance Technology Co., Ltd. is a company whose business scope includes technology development, technology consulting, technology services; computer system services and so on. A command execution vulnerability exists in the Green Alliance Operations and Maintenance Securit...

The vulnerability of the FortiSIEM security management software’s programming interface lies in insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary code.

The vulnerability of the FortiSIEM security management software interface is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MOXA MXsecurity Trust Management Issue Vulnerability

MOXA MXsecurity is a management platform from China-based MOXA. that provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MXsecurity v1.0....

PT-2023-12989 · Intel · Intel Csme Software Installer

Name of the Vulnerable Software and Affected Versions: IntelR CSME software installer versions prior to 2239.3.7.0 Description: The issue is related to improper access control in the IntelR CSME software installer, which may allow an authenticated user to potentially enable escalation of privileg...

Hive Pro Achieves ISO/IEC 27001: 2022 Certification

Hive Pro has achieved ISO 27001: 2022 Certification, Demonstrating A Continuous Commitment to Excellence in Information Security August 8th, 2023 - HERNDON, VA: Hive Pro, a pioneer in the Threat Exposure Management market, is thrilled to announce that they have successfully attained ISO 27001:202...

F5 BIG-IP (APM) Elevation of Privilege Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP APM elevation of privilege vulnerability, which is caused by incorrect verification of cryptographic signatures duri...