IBM QRadar SIEM Encryption Issue Vulnerability

IBM QRadar SIEM is a U.S.-based solution from IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture and generates detailed reports on data access and user activity. IBM QRadar ha...

It’s a Wrap! QSC 2021 Las Vegas Laid Out Problems, Solutions and Innovation

Although organizations have made moves toward it for years, digital transformation, in a way, has only just begun. The pandemic may have accelerated migration to the cloud but going forward business will drive continued transformation—and innovation. But to get the most out of the investments in...

[SECURITY] Fedora 35 Update: mingw-gstreamer1-1.19.3-1.fc35

GStreamer is a streaming-media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plug-in-based architecture means that new data types...

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures lies in the use of memory after it is freed. This allows attackers to elevate their privileges or gain unauthorized access to protected information.

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or gain unauthorized access to protected information...

ALPINE-CVE-2021-28709

issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...

Xen 输入验证错误漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. An input validation error vulnerability...

IBM AIX Information Disclosure Vulnerability (CNVD-2021-91419)

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX has an information disclosure vulnerability that stems from a problem with IBM AIX's handling of user privileges, which can be exploited by a non-privileged local attacker to gain...

PT-2021-23999 · Freertos · Freertos

Name of the Vulnerable Software and Affected Versions: FreeRTOS versions 10.2.0 through 10.4.5 FreeRTOS versions through 10.4.6 Description: The issue affects FreeRTOS on ARMv7-M and ARMv8-M MPU platforms, where non-kernel code can call internal functions to raise privilege. This can lead to...

CVE-2020-12951

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM System Management Mode operations...

IBM AIX 信息泄露漏洞

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. An information disclosure vulnerability exists in IBM AIX, which can be exploited by attackers to obtain sensitive information...

CVE-2021-41263

railsmultisite provides multi-db support for Rails applications. In affected versions this vulnerability impacts any Rails applications using railsmultisite alongside Rails' signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker t...

CVE-2021-41263

railsmultisite provides multi-db support for Rails applications. In affected versions this vulnerability impacts any Rails applications using railsmultisite alongside Rails' signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker t...

AMD EPYC 信息泄露漏洞

AMD EPYC is an x86 server microprocessor product line from AMD, known as "Xiao Long" in Chinese, which utilizes the Zen microarchitecture. AMD EPYC has an information disclosure vulnerability that can be exploited by attackers to exploit multiple vulnerabilities in AMD processors...

CVE-2021-40871

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service DoS by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted...

Softing Industrial Automation OPC 安全漏洞

Softing Industrial Automation OPC is an OPC OLE for Process Control solution from Softing Industrial Automation, Germany. A security vulnerability exists in the Softing Industrial Automation OPC UA c++ SDK, which can be exploited by a remote attacker to cause a denial of service DoS by sending a...

Softing Industrial Automation OPC 资源管理错误漏洞

Softing Industrial Automation OPC is a suite of OPC OLE for Process Control solutions from Softing Industrial Automation, Germany. A security vulnerability exists in the Softing Industrial Automation OPC UA c++ SDK that originates from a remote attacker who can exploit the vulnerability to cause ...

rouger-architecture-interieure.fr Improper Access Control vulnerability OBB-2239397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Infographic: What is the economic impact of a data security platform?

Data security is important regardless of how your organization approaches cybersecurity. Whether it’s a protection-first approach, detection and remediation, or somewhere in between, data security enables organizations to inform on risk posture, protect against unauthorized data access and may...

Our journey to API security at Raiffeisen Bank International

This article was written by Peter Gerdenitsch, Group CISO at Raiffeisen Bank International, and is based on a presentation given during Imvision's Executive Education Program, a series of events focused on how enterprises are taking charge of the API security lifecycle. Launching the "Security in...