Enhancing Security Operations Using Wazuh: Open Source XDR and SIEM

In today's interconnected world, evolving security solutions to meet growing demand is more critical than ever. Collaboration across multiple solutions for intelligence gathering and information sharing is indispensable. The idea of multiple-source intelligence gathering stems from the concept th...

Webinar - Making PAM Great Again: Solving the Top 5 Identity Team PAM Challenges

Privileged Access Management PAM solutions are widely acknowledged as the gold standard for securing critical privileged accounts. However, many security and identity teams face inherent obstacles during the PAM journey, hindering these solutions from reaching their full potential. These challeng...

The vulnerability of the Unified Threat Management (UTM) web filtering function in Juniper Networks’ Junos operating system for SRX devices allows a hacker to trigger a service failure.

The vulnerability of the Unified Threat Management UTM web filtering function in Juniper Networks’ Junos operating system for SRX devices is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2023-3825

PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption. KEPServerEX uses OPC UA, a protocol which defines various object types that can be nested to create complex arrays. It does not implement a...

Tadiran Telecom Aeonix 路径遍历漏洞

Tadiran Telecom Aeonix is a purely software-based Unified Communications and Collaboration UC&C solution from Tadiran Telecom, Israel. A security vulnerability exists in Tadiran Telecom Aeonix that stems from the presence of a path traversal vulnerability...

Tadiran Telecom Composit 安全漏洞

Tadiran Telecom Composit is a unified communications and collaboration platform from Tadiran Telecom, Israel. A security vulnerability exists in Tadiran Telecom Composit that stems from a CSV file with improper element neutralization...

The vulnerability of the OPC UA protocol implementation in the OPC-server software KEPServerEX allows a perpetrator to cause service failure.

The vulnerability of the OPC UA protocol implementation in the OPC-server software of KEPServerEX is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerabilities fixed in Sophos Unified Threat Management (UTM)

Sophos has fixed vulnerabilities in Unified Threat Management UTM. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to execute arbitrary code execute with application privileges. Sophos has released updates to fix the vulnerabilities in UTM 9.716. For more...

Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2013-1181)

Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.03N22, Nexus 3000 devices 5.x before 5.03U32, and Unified Computing System UCS 6200 devices before 2.01w allows remote attackers to cause a denial of service device reload by sending a jumbo packet to the management interface, aka Bug IDs...

Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2014-3261)

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

The vulnerability of the access point management function in microprogrammed software for Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN allows a hacker to execute arbitrary commands.

The vulnerability of the access point management function in Zyxel USG FLEX, USG FLEX 50W, USG20W-VPN, ATP, and VPN software for network devices is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a...

Unspecified Vulnerability in Oracle Database Server (CNVD-2023-71319)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in the Unified Audit component of Oracle Database Serve...

The vulnerability of the Unified Audit component of the Oracle Database Server system allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to read, modify, add, or delete data...

Oracle Database Server (Jul 2023 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July CPU advisory. - Vulnerability in the Oracle Text LibExpat component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and...

Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications products. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution Administrator/Root rights Remote code...

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code executio...

CVE-2023-22034

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and 21.3-21.10. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit...

CVE-2023-22034

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and 21.3-21.10. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit...

Design/Logic Flaw

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and 21.3-21.10. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit...

CVE-2023-22034

The CVE-2023-22034 issue affects Oracle Database Server Unified Audit component. Affected versions are 19.3–19.19 and 21.3–21.10. The root cause is described as insufficient input validation, enabling a high-privileged SYSDBA attacker with network access via Oracle Net to compromise Unified Audit...