8076 matches found
Windows Trust Verification API Denial of Service Vulnerability
...
Microsoft Windows Security Vulnerabilities
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Trust Authentication API. The following products and editions are affected: Windows 10 Version 20H2 for x64-based...
PT-2021-2054 · Microsoft · Windows Trust Verification Api +1
Name of the Vulnerable Software and Affected Versions: Windows Trust Verification API affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Trust Verification API, which is caused by resource release errors. This vulnerability can be...
Why threat protection is critical to your Zero Trust security strategy
The corporate network perimeter has been completely redefined. Many IT leaders are adopting a Zero Trust security model where identities play a critical role in helping act as the foundation of their modern cybersecurity strategy. As a result, cybercriminals have shifted their focus and identitie...
Why threat protection is critical to your Zero Trust security strategy
The corporate network perimeter has been completely redefined. Many IT leaders are adopting a Zero Trust security model where identities play a critical role in helping act as the foundation of their modern cybersecurity strategy. As a result, cybercriminals have shifted their focus and identitie...
Modernizing your network security strategy
From the global pandemic to recent cyberattacks, our world has faced many challenges during the past 12 months. Some of these challenges we can’t change. However, I’m pleased about the ones we can, and are changing across the cybersecurity landscape. For example, to facilitate remote work and...
Modernizing your network security strategy
From the global pandemic to recent cyberattacks, our world has faced many challenges during the past 12 months. Some of these challenges we can’t change. However, I’m pleased about the ones we can, and are changing across the cybersecurity landscape. For example, to facilitate remote work and...
CVE-2020-13580
An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to writ...
Tenable Network Security Nessus Trust Management Issues Vulnerability
Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. Tenable Network Security Nessus AMI has a security vulnerability that can be exploited by attackers to play the role of a man-in-the-middle on Nessus AMI...
Wolfssl Trust Management Issues Vulnerabilities
Wolfssl CyaSSL is the United States Wolfssl company for embedded systems developers to use a small, portable embedded SSL programming library. A trust management issue vulnerability exists in the DoTls13CertificateVerify function in the WolfSSL version 4.6.0 tls13.c file, which stems from not...
Cisco UCS Central Trust Management Issues Vulnerability
Cisco UCS Central is a server management software from Cisco, USA. The software supports the management of multiple Cisco UCS instances or domains in different locations and environments. The software supports up to 10,000 Cisco UCS servers blades, racks, and minis and Cisco HyperFlex systems. A...
DEBIAN-CVE-2021-20199
Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...
Google Android 信任管理问题漏洞
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Android runtime in Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to obtain sensiti...
Akamai + Fingerbank: How an open source community can transform security
Isn't it amazing how seemingly simple decisions can have far-reaching effects? When the Inverse team in Montreal took over PacketFence in 2008, it was an open source OS solution. They recognized the inherent value in keeping it as such. In so doing, they didn't just launch a product--they created...
Wolfssl 信任管理问题漏洞
Wolfssl CyaSSL is the United States Wolfssl company for embedded systems developers to use a small, portable embedded SSL programming library. A trust management issue vulnerability exists in the DoTls13CertificateVerify function in the WolfSSL version 4.6.0 tls13.c file, which stems from not...
SonicWall SSL-VPN 8.0.0.0 - 'visualdoor' Remote Code Execution (Unauthenticated)
Exploit Title: SonicWall SSL-VPN 8.0.0.0 - 'shellshock/visualdoor' Remote Code Execution Unauthenticated Exploit Author: Darren Martyn Vendor Homepage: https://www.home-assistant.io/ Version: SMA 8.0.0.4 Blog post: https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/...
Why operational resilience will be key in 2021, and how this impacts cybersecurity
The lessons we have learned during the past 12 months have demonstrated that the ability to respond to and bounce back from adversity in general, can impact the short-and long-term success of any organization. It can even dictate the leaders and laggards in any industry. When we take into...
Why operational resilience will be key in 2021, and how this impacts cybersecurity
The lessons we have learned during the past 12 months have demonstrated that the ability to respond to and bounce back from adversity in general, can impact the short-and long-term success of any organization. It can even dictate the leaders and laggards in any industry. When we take into...
5 identity priorities for 2021—strengthening security for the hybrid work era and beyond
When I outlined the five identity priorities for 2020, the world was a very different place. Since then, the COVID-19 pandemic has forever changed how organizations run their businesses. It’s also changed the way we work, learn, and collaborate. What hasn’t changed is the critical role identity...
5 identity priorities for 2021—strengthening security for the hybrid work era and beyond
When I outlined the five identity priorities for 2020, the world was a very different place. Since then, the COVID-19 pandemic has forever changed how organizations run their businesses. It’s also changed the way we work, learn, and collaborate. What hasn’t changed is the critical role identity...