3501 matches found
3 Tips to Action Consumer Trust with Data Security and Privacy
Start Playing Here High-profile data breaches and increasingly sophisticated security threats are driving smart brands to better manage the mass amounts of consumer data they've spent years collecting. To do so, brands must prioritize their customers' interests and build a modern data security an...
885 Million First American Financial Records Exposed Online
Real estate giant First American left Social Security numbers, tax documents, and more publicly available...
First American Financial Corp. Leaked Hundreds of Millions of Title Insurance Records
The Web site for Fortune 500 real estate title insurance giant First American Financial Corp. NYSE:FAF leaked hundreds of millions of documents related to mortgage deals going back to 2003, until notified this week by KrebsOnSecurity. The digitized records -- including bank account numbers and...
Schneider Electric 1st Gen Pelco Sarix Enhanced Camera Command Injection Vulnerability (CNVD-2019-16259)
The Schneider Electric 1st Gen Pelco Sarix Enhanced Camera is a series of fixed IP cameras from Schneider Electric France. A command injection vulnerability exists in the web-based GUI in the Schneider Electric 1st Gen Pelco Sarix Enhanced Camera. The vulnerability stems from a network system or...
CVE-2019-11536
creationtimestamp| type| source ---|---|--- 2019-05-22 18:48:26+00:00| seen| https://t.me/cvemitreorg/144...
CVE-2019-5953
creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:34+00:00| seen| https://t.me/cvemitreorg/43...
Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019
Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019 Summary This update includes the quality improvements from KB4493448, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that...
SUSE-SU-2019:1203-1 Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: - Fixed an issue where the first login failed and...
undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests...
CVE-2019-11819
Alkacon OpenCMS v10.5.4 and before is affected by CSV aka Excel Macro Injection in the module New User /opencms/system/workplace/admin/accounts/usernew.jsp via the First Name or Last Name...
undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests...
How Credit Unions Can Optimize & Secure the Mobile App Experience
A small army of digital natives are about to become the largest generation globally. Gen Z, those born after 1996, will account for 32% of the world's population 7.7 billion in 2019 and outnumber millennials for the first time, according to World Economic Forum. This year, it will be critical for...
UBUNTU-CVE-2019-11502
snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory. Remediation...
UBUNTU-CVE-2019-11338
libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...
Mobile-First Phishing Kit Targets Verizon Customers
As people increasingly go mobile-first in their work and personal lives, cybercrime is keeping up: The latest is a phishing kit that specifically targets Verizon Wireless customers in the U.S. According to Jeremy Richards, a researcher at Lookout Security, the kit pushes phishing links to users v...
Directus Suite CMS 7.0.15 Database Disclosure
Exploit Title : Directus Suite CMS 7.0.15 Database Disclosure Exploit Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/04/2019 Vendor Homepage : directus.io Software Download Link : github.com/directus/directus/archive/master.zip Software Information Link :...
CVE-2018-20645
PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...