Lucene search
+L

2003 matches found

Securelist
Securelist
added 2022/09/28 8:00 a.m.41 views

Prilex: the pricey prickle credit card complex

Prilex is a Brazilian threat actor that has evolved out of ATM-focused malware into modular point-of-sale malware. The group was behind one of the largest attacks on ATMs in the country, infecting and jackpotting more than 1,000 machines, while also cloning in excess of 28,000 credit cards that...

0.4AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2022/09/27 12:15 p.m.16 views

Facebook users sue Meta for allegedly building "secret workaround" to Apple privacy safeguards

Last week, two Facebook users filed a class-action complaint against Meta in San Francisco's federal court, alleging the company built a "secret workaround" to Apple's safeguards that protect iPhone users from tracking. Facebook circumvents Apple's privacy rules by opening in-app browsers within...

1.5AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/09/27 11:15 a.m.14 views

New Report on IoT Security

The Atlantic Council has published a report on securing the Internet of Things: "Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem." The report examines the regulatory approaches taken by four countries--the US, the UK, Australia, and Singapore--to secur...

1.3AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2022/09/26 1:00 p.m.26 views

6 Key Insights from Akamai India Leadership Industry Summits

What does the future look like for consumer-to-internet and OTT media services in India? Here are six thought-provoking insights from CXOs...

3.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.25 views

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-1920) affects Asset and Service Management

Summary A vulnerability in WebSphere Application Server could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

10CVSS6.8AI score0.06885EPSS
SaveExploits0Affected Software15
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.23 views

Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting, caused by improper validation of user-supplied input (CVE-2016-0399)

Summary IBM Maximo Asset Management is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the a specially-crafted URL to execute script in a victim's Web browser within the security context of the...

5.4CVSS5.5AI score0.00783EPSS
SaveExploits0Affected Software14
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.22 views

Security Bulletin: IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser (CVE-2016-5896)

Summary IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser. Vulnerability Details CVEID: CVE-2016-5896 DESCRIPTION: IBM Maximo Asset Management could disclose sensitive information from a stack trace after...

5.3CVSS5AI score0.01172EPSS
SaveExploits0Affected Software8
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.28 views

Security Bulletin: IBM Maximo Asset Management contains a vulnerability that could allow a remote authenticated user to view ticket worklog entries that they should not have access to (CVE-2015-5016)

Summary IBM Maximo Asset Management contains a vulnerability that could allow a remote authenticated user to view ticket worklog entries that they should not have access to. This vulnerability could allow a local attacker to obtain sensitive information. The vulnerability affects Maximo Asset...

4.3CVSS4.1AI score0.01157EPSS
SaveExploits0Affected Software15
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.36 views

Security Bulletin: IBM Maximo Asset Management installs with a default administrator account that a remote intruder could use to gain administrator access to the system. (CVE-2015-4966)

Summary IBM Maximo Asset Management installs with a default administrator account that a remote intruder could use to gain administrator access to the system. Vulnerability Details CVEID: CVE-2015-4966 DESCRIPTION: IBM Maximo Asset Management installs with a default administrator account that a...

6.5CVSS8.6AI score0.01527EPSS
SaveExploits0Affected Software15
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.39 views

Security Bulletin: Security vulnerabilities have been identified in IBM® DB2® shipped with Asset and Service Management (CVE-2013-6747, CVE-2014-0963)

Summary IBM DB2 is shipped as a component of Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for Utilities, Tivo...

7.1CVSS7.2AI score0.03077EPSS
SaveExploits1Affected Software7
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.17 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2017-1380)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Energy Optimization, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life...

5.4CVSS5.6AI score0.01377EPSS
SaveExploits0Affected Software15
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.24 views

Security Bulletin: Potential denial of service may affect IBM HTTP Server on Windows (CVE-2015-1829), impacting Asset and Service Management

Summary There is a potential denial of service that may affect IBM HTTP Server on Windows CVE-2015-1829. To exploit the attack requires local access to the server system. The attack affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for...

5CVSS7.7AI score0.02552EPSS
SaveExploits0Affected Software15
Qualys Blog
Qualys Blog
added 2022/09/20 9:08 p.m.24 views

Why Organizations Struggle with Patch Management (and What to Do about It)

The cybersecurity attack surface continues to grow exponentially. Modern technologies are being deployed on-premises and in the cloud as part of digital transformation journeys. Meanwhile, the current practice of identifying, classifying, prioritizing, and remediating vulnerabilities has become...

0.3AI score
SaveExploits0
Fedora
Fedora
added 2022/09/20 12:17 a.m.28 views

[SECURITY] Fedora 37 Update: containerd-1.6.8-4.fc37

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

7.5AI score
SaveExploits0
Lenovo
Lenovo
added 2022/09/19 6:56 p.m.10 views

Intel AMT Advisory - Lenovo Support US

No description provided...

4.6CVSS4.8AI score0.00251EPSS
SaveExploits0
Lenovo
Lenovo
added 2022/09/19 5:30 p.m.39 views

Intel Graphics Drivers Advisory - Lenovo Support US

No description provided...

7.8CVSS6.1AI score0.00255EPSS
SaveExploits0
Lenovo
Lenovo
added 2022/09/19 4:16 p.m.69 views

Intel CSME, SPS, and LMS Advisory - Lenovo Support US

No description provided...

6.7CVSS5.4AI score0.00346EPSS
SaveExploits0
Fedora
Fedora
added 2022/09/16 12:18 a.m.44 views

[SECURITY] Fedora 37 Update: containerd-1.6.8-2.fc37

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

6.3CVSS6.8AI score0.00854EPSS
SaveExploits0
HackRead
HackRead
added 2022/09/15 2:38 p.m.18 views

The Benefits Of Blockchain In The Travel Industry

By Owais Sultan Blockchain technology advocates say it’s poised to disrupt numerous industries, ranging from finance to supply chain tracking and real estate. This is a post from HackRead.com Read the original post: The Benefits Of Blockchain In The Travel Industry...

1.8AI score
SaveExploits0
Lenovo
Lenovo
added 2022/09/13 1:52 p.m.10 views

Multi-Vendor BIOS Security Vulnerabilities (September 2022) - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Rows per page
Query Builder