2003 matches found
Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL Injection (CVE-2019-4671)
Summary IBM Maximo Asset Management is vulnerable to SQL Injection. Vulnerability Details CVEID: CVE-2019-4671 DESCRIPTION: IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modif...
CVE-2020-25249
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only when a client application specifies that logging is desired. This can be problematic for use cases in...
Design/Logic Flaw
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only when a client application specifies that logging is desired. This can be problematic for use cases in...
The U.S. Secret Service Selects Tom Kellermann to Serve on Inaugural Cyber Investigations Advisory Board
Cybersecurity has become a recurring global news headline. From ransomware to data breaches, cyberattacks continue to be one of the biggest threats to both the private and public sectors. Earlier this year, the FBI reported a 400 percent increase in cybercrime1. And for the public sector, this is...
Web Application and API Protection -- From SQL Injection to Magecart
SQL injections were first discovered in 1998, and over 20 years later, they remain an unsolved challenge and an ongoing threat for every web application and API. The Open Web Application Security Project OWASP highlighted injection flaws in its Top 10 lists for both web application security risks...
AMD Radeon DirectX 11 Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-42153 Potential Impact: Code execution Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-6100, CVE-2020-6101, CVE-2020-6102, CVE-2020-6103 Summary Description: AMD reported potential vulnerabilities in a specific virtual machine VM configuration...
AMD Radeon DirectX 11 Driver Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA GeForce Experience - July 2020 - Lenovo Support US
No description provided...
NVIDIA GeForce Experience - July 2020 - Lenovo Support US
Lenovo Security Advisory: LEN-43116 Potential Impact: Code execution, denial of service, privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE‑2020‑5964 Summary Description: NVIDIA has released a software security update for NVIDIA GeForce Experience software...
Brocade Fabric OS and SANnav Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-46654 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6447, CVE-2018-6448, CVE-2018-6449, CVE-2019-16211, CVE-2019-16212, CVE-2020-15369, CVE-2020-15370,...
Intel AMT and Intel ISM Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-41856 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8758 Summary Description: Intel reported potential security vulnerabilities in Intel Active Management Technology AMT and Intel Standard Manageability...
Intel AMT and Intel ISM Advisory - Lenovo Support US
No description provided...
Intel BIOS Advisory - Lenovo Support US
No description provided...
jrh-industry.com Cross Site Scripting vulnerability OBB-1302067
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PCI DSS compliance: why it’s important and how to adhere
PCI DSS is short for Payment Card Industry Data Security Standard. Every party involved in accepting credit card payments is expected to comply with the PCI DSS. The PCI Standard is mandated by the card brands, but administered by the Payment Card Industry Security Standards Council PCI SSC. The...
Tackling Video Piracy Head-On
We are clearly in a "new" golden age of TV. Audiences around the world have never had so many viewing options available. This has led to a creative surge in new groundbreaking storytelling and entertainment as both broadcasters and digital giants try to maintain the loyalty of their viewers. This...
The Changing Face of Loyalty Programs Amid and Post-COVID-19
COVID-19 has undoubtedly prompted the Hospitality and Travel industry into a new era of customer loyalty. Currently, "shelter in place" or similar nonessential travel bans are instituted by many countries and companies across the world. Once travel restrictions are lifted, there will be a...
How Criminals Attack the Games Industry
If you work in the video games industry, it's already obvious that security is a challenge, and criminals are a threat. But how much do you know about how the criminal economy works? What actually motivates them? What specific methods do they use? And how do they interact with one another? If you...
Voice Phishers Targeting Corporate VPNs
The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers networks. But one increasingly brazen group of crooks is taking your standard phishing attack to the next level,...
How Criminals Attack the Games Industry
If you work in the video games industry, it's already obvious that security is a challenge, and criminals are a threat. But how much do you know about how the criminal economy works? What actually motivates them? What specific methods do they use? And how do they interact with one another?...