5434 matches found
Gimme! Gimme! Gimme! (More Data): What Security Pros Are Saying
Eight in 10 organizations collect, process, and analyze security operations data from more than 10 sources, ESG identified in a new ebook SOC Modernization and the Role of XDR, sponsored by Rapid7. Security professionals believe that the most important sources are endpoint security data 24%, thre...
CVE-2022-31260
In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value...
CVE-2022-31260
In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value...
CVE-2022-31260
In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value...
PT-2022-20648 · Montala · Resourcespace
Name of the Vulnerable Software and Affected Versions: Montala ResourceSpace versions prior to r19636 Description: The issue allows attackers to export collection metadata via a non-NULL k value in the csv export results metadata.php file. Recommendations: For versions prior to r19636, update to ...
Montala ResourceSpace 安全漏洞
Montala ResourceSpace is an open source digital asset management tool from Montala UK. It enables users to organize their digital assets. A security vulnerability exists in Montala ResourceSpace version 9.8 and earlier versions, which stems from csvexportresultsmetadata.php Allows an attacker to...
TikTok is “unacceptable security risk” and should be removed from app stores, says FCC
Brendan Carr, the commissioner of the FCC Federal Communications Commission, called on the CEOs of Apple and Google to remove TikTok from their app stores. In a letter dated June 24, 2022, Carr told Tim Cook and Sundar Pichai that "TikTok poses an unacceptable national security risk due to its...
My Body, My Data Act would lock down reproductive and sexual health data
A new bill entered into both the House of Representatives and the Senate proposes the strongest Federal data privacy protections yet for an increasingly scrutinized form of data in the United States—reproductive and sexual health data. The “My Body, My Data Act of 2022” was announced in early Jun...
user can get document content even after removed
Description Admin can add a member to his personal collection .But if admin removed that user from this collection then that user still can see realtime document update content. Proof of Concept 1. From admin account invite user-B as member role .\ \ 2. From admin account create a private...
New 'FabricScape' Bug in Microsoft Azure Service Fabric Impacts Linux Workloads
Cybersecurity researchers from Palo Alto Networks Unit 42 disclosed details of a new security flaw affecting Microsoft's Service Fabric that could be exploited to obtain elevated permissions and seize control of all nodes in a cluster. The issue, which has been dubbed FabricScape CVE-2022-30137,...
systemtap bug fix and enhancement update
An update is available for systemtap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SystemTap is an instrumentation system for systems running the Linux kernel...
Splunk Command Injection Vulnerability
Splunk is a suite of data collection and analysis software from Splunk, Inc. The software is primarily used to collect, index, and analyze the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A command injection vulnerability...
Splunk Resource Permission Assignment Error Vulnerability
Splunk is a suite of data collection and analysis software from Splunk, Inc. The software is primarily used to collect, index, and analyze the data it generates, including data generated by all IT systems and infrastructure physical, virtual machines, and cloud.A resource privilege assignment err...
Malicious code in collection-events-discord-webhook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d12cf97df99bb97e69ef2b265ec820acb8cc39d7026d03d62e053b706505142 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
June 14, 2022-KB5013887 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2
None None...
June 14, 2022-KB5013889 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 11
None None...
June 14, 2022-KB5013890 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
June 14, 2022-KB5014630 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...