2381 matches found
EUVD-2025-200734
BlazeMeter Jenkins Plugin is Missing Authorization for Available Resources...
CVE-2025-13472 Missing authorization in BlazeMeter Jenkins Plugin
A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm workspaces and bzm project Ids. Prior to this fix, anyone could see this list as a dropdown on the Jenkins UI...
Empower CISOs with Visibility, Agility, Compliance, and Strategic ROI
Learn how Akamai Prolexic Network Cloud Firewall allows CISOs to manage risk, resilience, and reputation by delivering visibility, agility, and proactive defense...
Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership
Give security and developers a shared view of cloud risk, aligned to the way applications are built and maintained...
Mastering Software Governance with Hosted Technologies Inventory
Gain visibility into every technology in your environment and eliminate governance gaps...
CVE-2025-54515
The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were...
Beyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human Identities
Identity security fabric ISF is a unified architectural framework that brings together disparate identity capabilities. Through ISF, identity governance and administration IGA, access management AM, privileged access management PAM, and identity threat detection and response ITDR are all integrat...
6 Actionable Vulnerability Management Best Practices
Every unpatched vulnerability is more than just a technical flaw; it's a direct business risk. These security gaps are the entry points for breaches that lead to devastating financial losses, operational downtime, and long-term damage to your brand's reputation. When viewed through this lens,...
EUVD-2025-150361
Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed vi...
IBM Infrastructure: Continuous Risk & Compliance
Learn all about AI-powered visibility, telemetry, and proactive security across mainframe, cloud, containers, and enterprise workloads...
Malicious code in wawan-toge26-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf98d9343b03867e6d258a595062e3503482e1ab4222fffe65f011e57af7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
9 Key Areas to Monitor for Potential Security Threats
The old "castle-and-moat" approach to security is a thing of the past. Your organization's perimeter is no longer a single, defensible line; it's a distributed and porous collection of remote employees, cloud services, and third-party vendors. Every connection is a potential entry point, and your...
CVE-2025-62721
LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class fail to implement proper authorization checks, allowing any authenticated user to access all links, lists, and tags from all users in the system,...
Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection
Providing unconditional visibility into your environment...
Securing AI Agents with Wiz AI-SPM
How Wiz brings visibility, context, and continuous defense to the new era of intelligent automation...
LinkAce 访问控制错误漏洞
LinkAce is a self-hosted archive of links to your favorite websites by Kevin Woblick Individual Developer. An Access Control Error vulnerability exists in LinkAce 2.3.1 and prior versions, which stems from the HTML and CSV export functionality in the ExportController class not applying ownership ...
How are you managing cloud risk?
Learn why managing cloud risk demands unified visibility, continuous risk assessment, and efficient security operations. Discover how a full-featured CNAPP like Trend Vision One™ Cloud Security enables organizations to move from reactive to proactive cloud protection...
Attack Surface Exposures: A Practical Guide
Many security teams believe their existing tools have them fully covered. With a firewall, endpoint protection, and a vulnerability scanner, it’s easy to assume you can see everything that matters. This is one of the most dangerous myths in cybersecurity today. These tools often operate in silos,...
