SUSE-SU-2024:0121-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer bsc1218582 - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory access bsc1218583 - CVE-2024-21885: Fixed he...

Microsoft named a Leader in 2023 Gartner® Magic Quadrant™ for Access Management for the 7th year​​

Protecting identity from compromise is top of mind for security professionals as identity attacks continue to intensify. Earlier this year we reported that we had observed a nearly three-fold increase in password attacks per second in the last two years, from 579 in 2021 to 4,000 in 2023.1 Identi...

How to Enable/Disable SSH on XenServer Host

How to Enable/Disable SSH on XenServer Host...

CVE-2023-40168 Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop

TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only required user interaction is opening th...

PT-2023-23600 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega platform versions 6.1 through 7.3.1 Description: The issue concerns the use of default credentials by Pega platform clients. This could potentially lead to unauthorized access. Recommendations: For versions 6.1 through 7.3.1, change the...

PT-2023-3677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the init cea offsets function in the /arch/x86/mm/cpu entry area.c module of the Linux kernel's memory management subsystem. It concerns the accessibility of the...

PT-2023-22127 · Marksoft · Marksoft

Name of the Vulnerable Software and Affected Versions: Marksoft versions through Mobile:v.7.1.7 Marksoft version Login:1.4 Marksoft version API:20230605 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command...

IBM Security Verify Access Input Validation Error Vulnerability (CNVD-2023-41894)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. IBM Security Verify Access suffers from an input validation error vulnerability that stems from improper input validation of the application, which can be exploited by an...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation in LTE for NAS secure mode command replay attacks...

Simplify Access Security: Integrate ZTNA with Your Cloud Identity Solution

...

PT-2023-14630 · Unknown · Livebox Collaboration Vdesk

Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v018 Description: An issue allows an Insecure Direct Object Reference to occur under the "5.6.5-3/doc/ID-FILE/c/N/C/websocket" endpoint. A malicious unauthenticated user can access cached files in...

CVE-2023-26063

Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type...

Fortinet FortiNAC 安全漏洞

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. A security vulnerability exists in Fortinet FortiNAC that stems from improper privilege management...

K4616: BSD telnet environment vulnerability CAN-2005-0488

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

CVE-2022-30339

Out-of-bounds read in firmware for the IntelR Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access...

AMI MegaRAC SP-X BMC Redfish Vulnerabilities - Lenovo Support US

No description provided...

SA44399 - 2020-03: Out-of-Cycle Advisory: Pulse Secure recommendations for Enterprise VPN Security (AA20-073A)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Many organizations are switching to alternate workplace options for employees in response to the rapidly spreading Novel Coronavirus COVID-19. Malicious cyber actors will inevitably...

How to Use Cloud Access Security Brokers for Data Protection

By Owais Sultan A cloud access security broker is a security policy enforcement point that can be located on-premises or in… This is a post from HackRead.com Read the original post: How to Use Cloud Access Security Brokers for Data Protection...

CVE-2021-36503

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...

CVE-2022-4236 Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server...