1904 matches found
February 19, 2019—KB4487029 (OS Build 17134.619)
None None...
chrome-js (>=0.1.8, <=0.2.0), cpos (>=0.1.3, <=0.1.9) +26 more potentially affected by CVE-2016-10580 via nodewebkit (>=0.7.5, <=0.11.6)
nodewebkit NPM version =0.7.5, =0.1.8, =0.1.3, =0.1.0, =0.0.1, =0.1.0, =0.0.0, =0.0.1, =0.0.0, =0.0.24, =0.0.6, =1.6.1, =0.0.0, =0.1.0, =1.0.1, =1.0.2 and more Source cves: CVE-2016-10580 Source advisory: OSV:GHSA-GC6C-5V9W-XMHW...
[SECURITY] Fedora 28 Update: matrix-synapse-0.34.0.1-2.fc28
Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...
[SECURITY] Fedora 29 Update: matrix-synapse-0.34.0.1-1.fc29
Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...
@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2018-6342 via react-dev-utils (>=5.0.0, <=5.0.1)
react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2018-6342 Source advisory:...
Notes on Self-Publishing a Book
In this post I would like to share a few thoughts on self-publishing a book, in case anyone is considering that option. As I mentioned in my post on burnout, one of my goals was to publish a book on a subject other than cyber security. A friend from my Krav Maga school, Anna Wonsley, learned that...
WordPress. org can be worm attack stored XSS vulnerability disclosure-vulnerability warning-the black bar safety net
WP GDPR Compliance is WordPress, a very popular plugin, it is found that the presence of privilege escalation vulnerabilities, the exploits, the attacker can easily hijack thousands of websites. Although a plug-in vulnerability represents only use it on the website of the security flaws, however,...
Wormable Stored XSS on WordPress.org
Introduction Finding a critical vulnerability in one popular WordPress plugin and exploiting it in the wild could allow attackers to easily hijack thousands to millions of websites. An example of this could be observed lately in the case of the popular plugin WP GDPR Compliance. One plugin thus...
Hey Belfast, Imperva’s Moving Into The Neighborhood
As a local, I’m very excited to be Imperva’s first Belfast hire, in charge of spinning up the operation in our new European location. Imperva provides best-in-class data and application security solutions on premises, in the cloud, and in hybrid environments. As we position ourselves for the next...
India's Startup Story - The Future of India's Digital Economy
India's goal of reaching a $1 trillion digital economy by 20221 is said to be fuelled, in part, by the spurt in the growth of startups across the country. The number of Internet users in India is growing at an enormous rate with close to 500 million internet users today2. Indians are at the...
@aikiwangdake/nsg-editor-library (>=2.0.0, <=2.0.4), @becomes/cms-ui (>=2.0.0, <=2.0.51) +293 more potentially affected by CVE-2018-19057 via simplemde (1.11.2)
simplemde NPM version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on simplemde and may be impacted: - @aikiwangdake/nsg-editor-library =2.0.0, =2.0.0, =0.1.0, =0.1.27, =0.2.6, =1.0.0-alpha.1, =1.10.0, =1.0.5, =1.0.26, =1.4.0, =1.4.4 and more...
Cb Customer Spotlight Series: Q&A with Integral’s Sean McFeely
Featuring Sean McFeely, Sr. Information Analyst at Valvoline’s Integral Defense This year at Cb Connect 2018, we had our first ever Developer Day to recognize our vibrant partner and developer ecosystem. We had an amazing group of 100 developers attend, culminating in a hackathon. Sean McFeely, S...
2co-client (>=0.0.11, <=0.0.12), 4sq (0.1.2) +860 more potentially affected by CVE-2017-16005 via http-signature (>=0.9.7, <=0.9.11)
http-signature NPM version =0.9.7, =0.0.11, =0.0.0, =0.1.43, =0.1.1, =0.1.1, =1.0.0-0, =0.0.2, =1.0.0-alpha.4, =1.0.0-alpha.3, =1.0.8, =1.0.9 and more Source cves: CVE-2017-16005 Source advisory: OSV:GHSA-Q257-VV4P-FG92...
00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +20115 more potentially affected by CVE-2017-16026 via request (>=2.2.6, <=2.67.0)
request NPM version =2.2.6, =2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on request and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 -...
192.168.0.172 (4.6.1), 3loc (>=0.2.0, <=0.4.0) +3457 more potentially affected by CVE-2016-1000232 via tough-cookie (>=2.0.0, <=2.2.2)
tough-cookie NPM version =2.0.0, =0.2.0, =0.0.1, =0.0.1, =2.1.0, =0.0.0, =0.1.0-alpha.1, =1.0.1, =0.11.0-atomist-update-branch-master-1541106195325.20181102202646, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2-20180615211533, =0.2.4-20180621213746, =0.1.0-20180815155955,...
IBM Security Guardium Information Disclosure Vulnerability (CNVD-2019-00994)
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in EcoSystem in IBM Security Guardium...
IBM Security Guardium Man-in-the-Middle Attack Vulnerability
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium version 10.5...
CVE-2018-1509
IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...
CVE-2018-1509
IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a trusted host, or the...