70 matches found
Why all organizations must better protect sensitive data
About two weeks ago, National Cybersecurity Awareness Month NCSAM kicked off with a new message stressing personal responsibility for users keeping themselves safe online: “Own IT. Secure IT. Protect IT.” NCSAM asked users to consider best practices for both securing their own devices and...
SUSE SLES12 Security Update : php7 (SUSE-SU-2017:0899-1)
This update for php7 fixes the following issues: Security issue fixed : - CVE-2015-8994: code permission/sensitive data protection vulnerability bsc1027210. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
Jelastic 5.4 - host SQL Injection
Jelastic 5.4 - host SQL Injection Exploit Title: Jelastic 5.4 - 'host' SQL injection Google Dork: N/A Date: date Exploit Author: Procode701 Vendor Homepage: https://jelastic.com/ Software Link: https://jelastic.com/ Version: 5.4 Tested on: Kali Linux CVE : N/A POC: The application...
Path traversal
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by...
Australia’s “Essential Eight” is Critical to Meet 2018 Cybersecurity Mandates & Privacy Laws
Christopher Strand, Carbon Black’s security risk and compliance officer recently wrote a blog discussing how the new mandatory data breach notification rule in the Privacy Amendment Notifiable Data Breaches Bill 2016, helps bring attention to cybersecurity solutions and focus on the practices...
PDF Viewer Memory Leak
The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow a malicious actor to trigger a memory lea...
openSUSE Security Update : php7 (openSUSE-2017-458)
This update for php7 fixes the following issues : Security issue fixed : - CVE-2015-8994: code permission/sensitive data protection vulnerability bsc1027210. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
SUSE-SU-2017:0899-1 Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2015-8994: code permission/sensitive data protection vulnerability bsc1027210...
