337 matches found
Can Edge Computing Exist Without the Edge? Part 2: Edge Computing
In part 1 of this series, I drew the architectural distinction between a centralized cloud platform and a distributed edge network. This is an important foundation upon which to explain the difference between cloud computing and edge computing. The two serve very different and complementary...
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...
Citrix ADC FIPS Compliance/Validation FAQ
General Overview 1. What are Federal Information Processing Standards FIPS? FIPS are standards and guidelines for federal computer systems that are developed by National Institute of Standards and Technology NIST in accordance with the Federal Information Security Management Act FISMA and approve...
Friday Squid Blogging: Calamari vs. Squid
St. Louis Magazine answers the important question: "Is there a difference between calamari and squid?" Short answer: no. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...
AZL-44778 CVE-2020-14019 affecting package python-rtslib 2.1.fb69-9
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus permissions are not preserved...
PT-2020-5323
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 68.9.0 Firefox versions prior to 77 Thunderbird versions prior to 68.9.0 Description The issue is related to a DSA signature vulnerability in web browsers and a mail client, which can lead to information disclosur...
PT-2019-15966
Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.3 Description The issue allows an attacker to enumerate accounts by guessing email addresses due to a timing difference in the response of the account forgot password.ajax.php file. This timing...
CVE-2015-0837
The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...
CVE-2019-12623
A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform file enumeration on an affected system. The vulnerability is due to the web server responding with different...
ImageMagick stack buffer overflow vulnerability (CNVD-2019-29232)
ImageMagick Studio ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A stack buffer overflow vulnerability exists in WritePNMImage in coders/pnm.c in ImageMagick 7.0.8-50 Q16. The vulnerability stems from a strncpy misalignment and the...
CVE-2019-0259
SAP BusinessObjects, versions 4.2 and 4.3, Visual Difference allows an attacker to upload any file including script files without proper file format validation...
CVE-2019-0259
CVE-2019-0259 relates to SAP BusinessObjects (versions 4.2 and 4.3) and is a vulnerability where an attacker can upload arbitrary files, including scripts, due to insufficient file format validation. The root cause is inadequate validation during the file upload process, enabling remote, unauthen...
Information Disclosure
openssh is vulnerable to information disclosure attacks. The vulnerability exists as sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users ...
Low, Medium and High Interaction Honeypot Security
Honeypots are a popular way to protect data centers and learn about attackers. Learn the difference between high and low interaction honeypot security...
Veeam Availability Orchestrator cannot add vCenter Server or standalone host due to time difference
Challenge When you try to add a VMware vCenter Server or a standalone VMware ESXi with a different time zone, the operation may fail with an error informing that time difference between Veeam Availability Orchestrator and the remote host is too large. Solution To resolve the issue, follow the nex...
Citrix License Server system clocks is not synchronized with the Delivery Controller
If the system clock time difference between Delivery Controller and License Server is is greater than maximum allowed 5 minutes, License Server might not work properly...
What is the difference between Basic DEP and Authorized DEP?
What is the difference between Basic DEP and Authorized DEP?...
How artificial intelligence and machine learning will impact cybersecurity
Artificial intelligence AI and machine learning ML are hot topics in technology. New use cases and applications are discussed daily—from search results recommendations to smart cars. But what are cybersecurity organizations doing with this tech? What does it take to render additional security out...
Heap overflow
readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow...