2361 matches found
A playbook for modernizing security operations
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest post from our new Voice of the Community blog series, Microsoft Product Marketing Manager Natalia Godyla talks with Dave Kennedy, Founder and...
CVE-2020-28645
CVE-2020-28645 affects the ownCloud Core before version 10.6. The issue, described as deleting users with certain names causing system files to be deleted, implies a vulnerability in user handling where specific usernames trigger file deletions when data directories are web-rooted. The available ...
Ensuring Security and Compliance in AWS RDS with CDS
If you use AWS RDS, your organization is part of a worldwide trend. Forward-thinking companies everywhere are embracing database-as-a-service DBaaS to help bring new applications and services to market faster, or to reduce the cost and complexity of their database operations. What isn’t changing...
2021 KuppingerCole Leadership Compass names Imperva an overall leader for Database and Big Data Security
It is my pleasure to report that in their 2021 overview of the market for Database and Big Data Security solutions, leading technology analyst KuppingerCole has identified Imperva as an Overall Leader for the first time. Imperva scored five out of five for product security, functionality,...
CVE-2020-8585
CVE-2020-8585 affects NetApp OnCommand Unified Manager Core Package before version 5.2.5. The vulnerability enables disclosure of sensitive account information to unauthorized users via PuTTY Link (plink). No exploitation details are provided in the documents; the root cause is described as an in...
Why Data Security and Privacy in the digital age are crucial
Privacy is considered a basic human right but, with so much of our personal data now ‘out there’ in cyberspace, how private can it really be? Data is everywhere, and with rising internet usage, an increase in cloud technologies, and our growing reliance on IoT devices, it continues to grow...
SQL Injection Vulnerability in Online Order Management System of Foshan Dute Software Technology Co.
Foshan Dutt Software Technology Co., Ltd, is a company specializing in the development and promotion of enterprise management software. Foshan Dutt Software Technology Co., Ltd. online order management system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensiti...
Knight CMS suffers from SQL injection vulnerability (CNVD-2021-09683)
Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in the Website Building System of Shandong Thinking Cloud Education Technology Co.
Ltd. was established on June 02, 2003 by Shandong Imagine Cloud Education Technology Co. The company's business scope includes: software development and production, technical consulting and services; computer technology development, technology transfer; Internet information services; computer...
Importance of Application Security and Customer Data Protection to a Startup
When you are a startup, there are umpteen things that demand your attention. You must give your hundred percent probably even more! to work effectively and efficiently with the limited resources. Understandably, the application security importance may be pushed at the bottom of your things-to-do...
CVE-2021-1135
CVE-2021-1135 concerns Cisco Data Center Network Manager (DCNM) REST API vulnerabilities. The issue arises from an incorrect denylist comparison in a REST API path, enabling an authenticated, remote attacker to view, modify, or delete data without proper authorization. Affected DCNM versions prio...
CVE-2021-2119
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2021-2110
CVE-2021-2110 affects Oracle Argus Safety (Letters component) with affected version 8.2.2. The Red Hat/NVD entries confirm a network-accessible issue exploitable by a low-privileged attacker over HTTP, leading to unauthorized read access to a subset of Oracle Argus Safety data (confidentiality im...
Oracle Food and Beverage Applications 安全漏洞
Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data to provide operational and analytical insights into business operations and improve efficiency by delivering information to all roles within an organization. An unspecified vulnerability...
Cloud Attacks Are Bypassing MFA, Feds Warn
The Feds are warning that cybercriminals are bypassing multi-factor authentication MFA and successfully attacking cloud services at various U.S. organizations. According to an alert issued Wednesday by the Cybersecurity and Infrastructure Security Agency CISA, there have been “several recent...
Backdoor.Win32.NinjaSpy.c Remote Stack Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6eece319bc108576bd1f4a8364616264.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NinjaSpy.c Vulnerability: Remote Stack Buffer Overflow Description: The specimen drop...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
Default configuration
An issue was discovered in Veritas Desktop and Laptop Option DLO before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create...
Forcepoint and Microsoft: Risk-based access control for the remote workforce
This blog post is part of the Microsoft Intelligence Security Association MISA guest blog series. Learn more about MISA here. Adopting cloud-based services as part of an organization’s digital transformation strategy is no longer optional, its a necessity. Last year, only 18 percent of the...
