Adobe Reader DC Continuous Security Update (APSB21-37) - Windows

Adobe Reader DC Continuous is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat DC (Continuous) Security Update (APSB21-37) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Reader DC Continuous Security Update (APSB21-37) - Mac OS X

Adobe Reader DC Continuous is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat DC (Continuous) Security Update (APSB21-37) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-14317

It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery EAP-CD introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script ...

PT-2021-9712

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform - Continuous Delivery EAP-CD versions affected versions not specified Description A security issue has reappeared in JBoss Enterprise Application Platform - Continuous Delivery EAP-CD due to regression,...

CVE-2020-14317: Signal Handler Race Condition

It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery EAP-CD introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script ...

5 questions to answer before spending big on cloud security

Do your tool diligence Convincing people to sign off on big cloud security spends is, most assuredly, a never-ending process. Because every so often be it in 6 months, 1 year, 2 years, your security organization will have to pitch to the check-writers all over again. Of course, we all know it’s...

MesaLabs AmegaView Command Injection Vulnerability

MesaLabs AmegaView is a continuous monitoring system CMS from MesaLabs USA. A command injection vulnerability exists in MesaLabs AmegaView version 3.0 and prior versions, which stems from passwords in the system that are generated by an easily reversible algorithm, and the use of default cookies...

MesaLabs AmegaView Command Injection Vulnerability (CNVD-2021-39559)

MesaLabs AmegaView is a continuous monitoring system CMS from MesaLabs USA. A command injection vulnerability exists in MesaLabs AmegaView version 3.0 and prior versions. An attacker can exploit this vulnerability to execute commands in the web server...

MesaLabs AmegaView authorization issue vulnerability

MesaLabs AmegaView is a continuous monitoring system CMS from MesaLabs USA. A security vulnerability exists in MesaLabs AmegaView 3.0 and earlier versions, which can be exploited by an attacker to elevate the privileges of the...

Becoming resilient by understanding cybersecurity risks: Part 4—navigating current threats

In part three of this blog series on aligning security with business objectives and risk, we explored what it takes for security leaders to shift from looking at their mission as purely defending against technical attacks, to one that focuses on protecting valuable business assets, data, and...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update

An update is now available for Red Hat OpenShift GitOps 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

JetBrains TeamCity Arbitrary Code Execution Vulnerability

TeamCity is a Java-based build management and continuous integration server from JetBrains. An arbitrary code execution vulnerability exists in JetBrains TeamCity versions prior to 2020.2.4. An attacker can exploit this vulnerability to execute arbitrary code on TeamCity Server...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2021-34744)

TeamCity is a Java-based build management and continuous integration server from JetBrains. A stored cross-site scripting vulnerability exists in several pages in versions of JetBrains TeamCity prior to 2020.2.3. Detailed vulnerability details are not available at this time...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2021-34738)

TeamCity is a Java-based build management and continuous integration server from JetBrains. A stored cross-site scripting vulnerability exists in the test page of JetBrains TeamCity versions prior to 2020.2.2. No detailed vulnerability details are available at this time...

JetBrains TeamCity Server-Side Request Forgery Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A server-side request forgery vulnerability exists...

JetBrains TeamCity Trust Management Issues Vulnerability (CNVD-2021-35238)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A vulnerability exists in JetBrains TeamCity...

The Evolution of DevOps in 2021

DevOps has long been a key tool in helping organizations reliably and rapidly deliver systems into production. While in the past, IT and software development teams suffered from lengthy processes and struggled to resolve incompatible priorities, now DevOps allows for easier collaboration, as well...

com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 (>=1.0.1, <=1.0.2), com.googlecode.wicket-jquery-ui:jquery-ui-calendar (>=1.4.0, <=1.4.1) +220 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.9)

org.apache.wicket:wicket-core MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 =1.0.1, =1.4.0, =1.4.0,...