Lucene search
K

684 matches found

The Hacker News
The Hacker News
added 2023/11/22 4:49 a.m.116 views

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler application delivery control ADC and Gateway appliances to obtain initial access to target environments. The joint advisory comes from the U.S...

9.4CVSS8.1AI score0.99999EPSS
Exploits15
Positive Technologies
Positive Technologies
added 2023/11/15 12:0 a.m.6 views

PT-2023-32256 · Eclipse +4 · Eclipse Openj9 +4

Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions prior to 0.41.0 Description: The issue is related to a denial of service caused by a flaw when a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing. This can lead to an...

9.1CVSS6AI score0.17673EPSS
Exploits3References210
The Hacker News
The Hacker News
added 2023/11/10 9:0 a.m.53 views

The New 80/20 Rule for SecOps: Customize Where it Matters, Automate the Rest

There is a seemingly never-ending quest to find the right security tools that offer the right capabilities for your organization. SOC teams tend to spend about a third of their...

7AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2023/11/06 5:0 p.m.12 views

Automatic Conditional Access policies in Microsoft Entra streamline identity protection

Extending our commitment to help customers be secure by default, today were announcing the auto-rollout of Microsoft Entra Conditional Access policies that will automatically protect tenants based on risk signals, licensing, and usage. Weve designed these policies based on our deep knowledge of t...

7.2AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2023/11/06 5:0 p.m.10 views

Automatic Conditional Access policies in Microsoft Entra streamline identity protection

Extending our commitment to help customers be secure by default, today were announcing the auto-rollout of Microsoft Entra Conditional Access policies that will automatically protect tenants based on risk signals, licensing, and usage. Weve designed these policies based on our deep knowledge of t...

7.3AI score
Exploits0
NVD
NVD
added 2023/10/27 2:15 p.m.24 views

CVE-2023-5443

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1...

7.5CVSS7.5AI score0.00448EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/27 2:15 p.m.6 views

CVE-2023-5443

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1...

7.5CVSS7.1AI score0.00448EPSS
Exploits0References3
Prion
Prion
added 2023/10/27 2:15 p.m.24 views

Input validation

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting.This issue affects E-invoice: before 2.1...

5CVSS7.6AI score0.00448EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/27 1:0 p.m.28 views

CVE-2023-5443 User Enumeration in EDM Informatic's E-Invoice Software

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1...

7.5CVSS7.7AI score0.00448EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/10/27 1:0 p.m.14 views

CVE-2023-5443 User Enumeration in EDM Informatic's E-Invoice Software

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1...

7.5CVSS7.1AI score0.00448EPSS
Exploits0References2
NVD
NVD
added 2023/10/27 12:15 p.m.18 views

CVE-2023-5570

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12...

7.5CVSS7.5AI score0.00448EPSS
Exploits0References2
Prion
Prion
added 2023/10/27 12:15 p.m.12 views

Input validation

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting.This issue affects Home Manager Gateway: before v.1.27.12...

5CVSS7.6AI score0.00448EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/27 11:53 a.m.9 views

CVE-2023-5570 User Enumeration in Inohom's Home Manager Gateway

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12...

7.5CVSS7.1AI score0.00448EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/10/27 11:53 a.m.23 views

CVE-2023-5570 User Enumeration in Inohom's Home Manager Gateway

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12...

7.5CVSS7.7AI score0.00448EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.3 views

Infodrom Software E-Invoice Approval System Security Breach

Infodrom Software E-Invoice Approval System is an electronic invoice approval system from Infodrom Software, Turkey. A security vulnerability exists in Infodrom Software E-Invoice Approval System version 2.1 that stems from improper protection of outbound error messages and alert signals...

7.5CVSS6.8AI score0.00448EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.2 views

Inohom Home Manager Gateway Security Vulnerability

Inohom Home Manager Gateway is a home management gateway from Inohom. A security vulnerability exists in Inohom Home Manager Gateway version v.1.27.12 that stems from improper protection of outbound error messages and alarm signals...

7.5CVSS6.8AI score0.00448EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/27 12:0 a.m.4 views

PT-2023-32183

Name of the Vulnerable Software and Affected Versions Inohom Home Manager Gateway versions prior to 1.27.12 Description The issue affects Inohom Home Manager Gateway, allowing Account Footprinting due to an Improper Protection for Outbound Error Messages and Alert Signals vulnerability...

7.5CVSS7.1AI score0.00448EPSS
Exploits0References10
Wired Threat Level
Wired Threat Level
added 2023/09/25 11:0 a.m.17 views

A Tricky New Way to Sneak Past Repressive Internet Censorship

With the number of internet blackouts on the rise, cybersecurity firm eQualitie figured out how to hide censored online news in satellite TV signals...

7AI score
Exploits0
OSV
OSV
added 2023/09/02 11:5 a.m.4 views

OESA-2023-1568 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

8.8CVSS9.9AI score0.01572EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2023/08/28 3:47 p.m.29 views

CVE-2020-21469

A flaw was found in PostgreSQL 12.2. This issue may allow an attacker to cause a denial of service via repeatedly sending SIGHUP signals...

4.4CVSS4.9AI score0.00361EPSS
Exploits1References7
Rows per page
Query Builder