14502 matches found
CVE-2021-1461
A vulnerability in the Image Signature Verification feature of Cisco SD-WAN Software could allow an authenticated, remote attacker with Administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital...
CVE-2021-1461 Cisco SD-WAN Software Signature Verification Bypass Vulnerability
A vulnerability in the Image Signature Verification feature of Cisco SD-WAN Software could allow an authenticated, remote attacker with Administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital...
CVE-2024-52435 WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through = 6.0.5...
CVE-2024-3334
A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...
CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...
CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...
Malicious QR codes sent in the mail deliver malware
Physical letters that contain a QR code to trick people into downloading malware are being sent through the mail, according to a warning issued by The Swiss National Cyber Security Centre NCSC. The letters are sent as if they come from the official Swiss Federal Office of Meteorology and...
Live Webinar: Dive Deep into Crypto Agility and Certificate Management
In the fast-paced digital world, trust is everything—but what happens when that trust is disrupted? Certificate revocations, though rare, can send shockwaves through your operations, impacting security, customer confidence, and business continuity. Are you prepared to act swiftly when the...
Digital Guardian Agent 安全漏洞
Digital Guardian Agent is a widely used data protection platform for cloud environments from US-based Digital Guardian, Inc. It can discover, categorize and control the movement of data across endpoints, networks and clouds. A security vulnerability exists in Digital Guardian Agent versions prior...
CVE-2024-3334: Insecure Storage of Sensitive Information
A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...
Information Disclosure Vulnerability in YonBIP of UFIDA Network Technology Co.
YonBIP is a digital intelligence business innovation platform created by UFIDA Group, aiming to help enterprises realize digital intelligence transformation and business innovation. An information leakage vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which can be exploit...
PT-2024-25212 · Digital Guardian · Digital Guardian Windows Agents
Name of the Vulnerable Software and Affected Versions: Digital Guardian Windows Agents versions prior to 8.2.0 Description: A security bypass issue exists in the Removable Media Encryption RME component, allowing users to circumvent encryption controls by modifying metadata on USB devices, thereb...
122 million people’s business contact info leaked by data broker
A data broker has confirmed a business contact information database containing 132.8 million records has been leaked online. In February, 2024, a cybercriminal offered the records for sale on a data breach forum claiming the information came from pureincubation.com. Pure Incubation was founded in...
The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to the assignment of the NULL pointer in the edpsetreplayallowactive function. Exploiting this vulnerability can allow a hacker to trigger a service failure...
Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2024-005)
The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2024-005 advisory. Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice...
The vulnerability of the DRM component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel DRM component is related to errors in reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: Linux kernel: Denial of Service in dvb-usb-v2 gl861 due to null-pointer dereference
A flaw was found in the Linux kernel's dvb-usb-v2 gl861 module. A local user could exploit this null-pointer dereference vulnerability by providing specially crafted input to the gl861i2cmasterxfer function. This could lead to a system crash, resulting in a Denial of Service DoS...
SQL Injection Vulnerability in BlueLine EKP of Shenzhen BlueLine Software Co.
BlueLine EKP is a fully online digital OA for large and medium-sized enterprises. Ltd. SQL injection vulnerability exists in BlueLine EKP, which can be exploited by attackers to obtain sensitive information from the database...
