cPanel Trust Management Issues Vulnerability (CNVD-2019-29631)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

MicroDigital N-series cameras trust management issue vulnerability

MICRODIGITAL N-series cameras is a N-series network camera from MICRODIGITAL in Korea. A trust management issue vulnerability exists in the /usr/local/ipsca/mipsca.db file in MicroDigital N-series cameras using firmware version 6400.0.8.5 and earlier, which can be exploited by an attacker to gain...

CloudBees Jenkins Configuration as Code Plugin Trust Issues Management Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Configuration as Code Plugin is used in which a Jenki...

Making the case: How to get the board to invest in government cybersecurity

Security leaders are no longer simply expected to design and implement a security strategy for their organization. As a key member of the business—and one that often sits in the C-suite—CISOs and security managers must demonstrate business acumen. In fact, Gartner estimates by 2020, 100 percent o...

cPanel Trust Management Issues Vulnerabilities

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel before version 76.0.8 that stems from the program not securely changing the PostgreSQL...

Ubiquiti Networks UniFi Controller Trust Management Issue Vulnerability

Ubiquiti Networks UniFi Controller is a suite of software from Ubiquiti Networks, Inc. for managing multiple wireless access point devices in a single platform. A trust management issue vulnerability exists in Ubiquiti Networks UniFi Controller version 5.10.21 and prior versions, which can be...

Easy VPN Transition With Zero Trust Access

Akamai recently announced Enterprise Application Access capabilities designed to improve performance and user experience, as well as provide an easy migration away from VPN, reducing complexity and risk. The new capabilities -- IP address-based access, on-premises network detection, and captive...

EspoCRM Trust Management Issue Vulnerabilities

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. EspoCRM is vulnerable to a trust management issue. An attacker can exploit this vulnerability to brute-force break a user's...

July 26, 2019—KB4505903 (OS Build 18362.267)

None None...

Why Identity Aware Proxies are Key to Adaptive Access Controls

By now, you have likely heard the term "Zero Trust". From tech seminars and industry events to webinars and whitepapers, it is popping up everywhere. CISOs and CTOs are constantly inundated with calls and messages from different vendors proclaiming different ways their solutions can help them...

AKUVOX NETWORKS R50P VoIP phone Trust Management Issue Vulnerability

AKUVOX NETWORKS R50P VoIP phone is an IP phone from AKUVOX NETWORKS, China. A trust management issue vulnerability exists in AKUVOX NETWORKS R50P VoIP phone version 50.0.6.156, which arises from the lack of an effective trust management mechanism in a networked system or product, and can be...

Infinova Swann SWWHD-INTCAM-HD Trust Management Issues Vulnerability

The Infinova Swann SWWHD-INTCAM-HD is a webcam from Infinova USA. A vulnerability with trust management issues exists in the Infinova Swann SWWHD-INTCAM-HD device. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can...

MOMO Momo application for Android trust management issue vulnerability

MOMO Momo application for Android is an open social application based on Android platform by China Stranger Technology MOMO. A trust management vulnerability exists in version 2.1.9 of the MOMO Momo application for Android, which stems from the program's failure to securely store confidential...

TronLink Wallet Trust Management Issues Vulnerability

TronLink Wallet is a cryptocurrency wallet application. A trust management issue vulnerability exists in TronLink Wallet version 2.2.0, which can be exploited to read and use a user's keystore to gain unauthorized access with /data/data/com.tronlink.wallet/sharedprefs/.xml...

Send Anywhere application for Android trust management issue vulnerability

Send Anywhere application for Android is a file transfer application based on Android platform. A trust management issue vulnerability exists in version 9.4.18 of the Send Anywhere application for the Android platform, which stems from a failure of the program to securely store information, which...

Multiple AudioCodes Products Trust Management Issue Vulnerabilities

AudioCodes Mediant 500L-MSBR and so on are products of AudioCodes Israel.AudioCodes Mediant 500L-MSBR is a 500L series all-in-one SOHO/SMB router.AudioCodes Mediant 500-MSBR is a 500 The AudioCodes Mediant 500-MSBR is a 500L series all-in-one SOHO/SMB router. A trust management issue vulnerabilit...

helm trust management issue vulnerability

helm is a Kubernetes package manager. A trust management issue vulnerability exists in versions of helm prior to 2.7.2. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can leverage default passwords or hard-coded...

SQL Injection Vulnerability in Trust Call OA System (CNVD-2019-23862)

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Trust Call OA System (CNVD-2019-23863)

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...