10328 matches found
Security Bulletin: A vulnerability in Apache CXF could affect IBM Performance Management products (CVE-2017-12624)
Summary Apache CXF is vulnerable to a denial of service. By using a specially crafted message attachment header, a remote attacker could exploit this vulnerability to cause the AX-WS and JAX-RS services to stop responding. Vulnerability Details CVEID: CVE-2017-12624 DESCRIPTION: Apache CXF is...
[SECURITY] Fedora 27 Update: rsyslog-8.37.0-1.fc27
Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...
ThreatList: Telecom Sector Plagued with Advanced Malware
The telecom sector is being plagued with dangerous types of malware that can lead to significant loss of confidential or regulated data, a report has found. Lastline’s findings, published today, found that telecom sector threats are “ahead of the curve,” based on an analysis of threats to the...
airbrushes.com XSS vulnerability
Open Bug Bounty ID: OBB-665008 Description| Value ---|--- Affected Website:| airbrushes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
airemilitar.com XSS vulnerability
Open Bug Bounty ID: OBB-664984 Description| Value ---|--- Affected Website:| airemilitar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Microsoft Windows Firewall: Public: Logging: Log successful connections
This setting specifies logging when Windows Firewall with Advanced Security allows an inbound connection. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Windows Firewall: Domain: Settings: Display a notification
This setting controls if Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Microsoft Windows Firewall: Public: Logging: Log dropped packets
This setting specifies logging when Windows Firewall with Advanced Security discards an inbound packet for any reason. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Microsoft Windows Firewall: Private: Logging: Name
This setting specifies the path and name of the file in which Windows Firewall will write its log information. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Microsoft Windows Firewall: Private: Outbound connections
This setting determines the behavior for outbound connections that do not match an outbound firewall rule. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Email Phishers Using New Way to Bypass Microsoft Office 365 Protections
Phishing works no matter how hard a company tries to protect its customers or employees. Security researchers have been warning of a new phishing attack that cybercriminals and email scammers are using in the wild to bypass the Advanced Threat Protection ATP mechanism implemented by widely used...
CVE-2018-7077
A security vulnerability in HPE XP P9000 Command View Advanced Edition CVAE Device Manager DevMgr 8.5.0-00 and prior to 8.6.0-00, Configuration Manager CM 8.5.0-00 and prior to 8.6.0-00 could be exploited to allow local and remote unauthorized access to sensitive information...
Information disclosure
A security vulnerability in HPE XP P9000 Command View Advanced Edition CVAE Device Manager DevMgr 8.5.0-00 and prior to 8.6.0-00, Configuration Manager CM 8.5.0-00 and prior to 8.6.0-00 could be exploited to allow local and remote unauthorized access to sensitive information...
CVE-2018-7077
A security vulnerability in HPE XP P9000 Command View Advanced Edition CVAE Device Manager DevMgr 8.5.0-00 and prior to 8.6.0-00, Configuration Manager CM 8.5.0-00 and prior to 8.6.0-00 could be exploited to allow local and remote unauthorized access to sensitive information...
CVE-2018-7077
A security vulnerability in HPE XP P9000 Command View Advanced Edition CVAE Device Manager DevMgr 8.5.0-00 and prior to 8.6.0-00, Configuration Manager CM 8.5.0-00 and prior to 8.6.0-00 could be exploited to allow local and remote unauthorized access to sensitive information...
CVE-2018-7077
The CVE-2018-7077 entry describes an information-disclosure vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager and Configuration Manager: DevMgr 8.5.0-00 and earlier, CM 8.5.0-00 and earlier, up to 8.6.0-00. Exploitation could allow local and remote unauthorized acc...
PHP Scripts Mall advanced-real-estate-script Cross-Site Request Forgery Vulnerability
PHP Scripts Mall advanced-real-estate-script is a PHP and MySQL based real estate website system script by PHP Scripts Mall India. A cross-site request forgery vulnerability exists in PHP Scripts Mall advanced-real-estate-script version 4.0.9. A remote attacker can exploit this vulnerability to...
Cisco AMP for Endpoints macOS Connector Denial of Service Vulnerability
Cisco AMP for Endpoints Mac Connector Software for macOS is the United States Cisco Cisco company's set of macOS platform based on the integration of static and dynamic malware analysis and threat intelligence in one of the endpoint applications. The program can analyze the behavior and intent of...
Cybersecurity threats: How to discover, remediate, and mitigate
This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blog, Protect...