6963 matches found
CVE-2024-6359
OpenText ArcSight Intelligence is associated with CVE-2024-6359, described as a privilege-escalation vulnerability. Connected sources identify the affected product but do not provide root-cause details or explicit fixes. NVD data shows a high-severity score (9.8/3.1) with network access, no user ...
CVE-2024-6358 Incorrect Authorization vulnerability
Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence...
CVE-2024-6358 Incorrect Authorization vulnerability
Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence...
CVE-2024-6358
The CVE-2024-6358 entry concerns OpenText ArcSight Intelligence with an Incorrect Authorization vulnerability. Public sources (NVD, Red Hat, CVE list, etc.) describe a network-exposed issue with low complexity and user interaction required (from the CNA vector) and potential high impact on confid...
2024 Midyear Threat Landscape Review
As we navigate the complexities of 2024, its crucial to pause and reflect on the evolving threat landscape that surrounds us. This moment offers a unique opportunity to scrutinize our triumphs and missteps, understand the events that have decisively shaped our environment, and consider those that...
PT-2024-37564 · Opentext · Opentext Arcsight Intelligence
Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A privilege escalation issue has been identified. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
OpenText ArcSight Intelligence 安全漏洞
OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an elevation of privilege vulnerability...
OpenText ArcSight Intelligence 安全漏洞
OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an unsafe direct object reference vulnerability...
PT-2024-37562 · Opentext · Opentext Arcsight Intelligence
Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A security issue has been identified in OpenText ArcSight Intelligence, related to an Insecure Direct Object Reference. Recommendations: At the moment, there is no...
PT-2024-37563 · Opentext · Opentext Arcsight Intelligence
Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A vulnerability related to incorrect authorization has been identified. Recommendations: At the moment, there is no information about a newer version that contains a...
OpenText ArcSight Intelligence 安全漏洞
OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an incorrect authorization vulnerability...
Ryan Pentney reflects on 10 years of Talos and his many roles from the Sourcefire days
As the adage goes: "You dont know what you dont know." For Ryan Pentney and his team, they know what they dont know. And they wake up every morning trying to figure out how they can answer those questions about emerging threats and some of the largest state-sponsored actors in the world. Pentney ...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024)
Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $10,400, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest...
Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now!
Apple has released security updates for many of its products in order to patch several vulnerabilities that could allow an attacker to steal sensitive information from a locked device. Included in the patches for Apple Watch, iOS, and iPadOS are four vulnerabilities in Siri. While your device is...
A Senate Bill Would Radically Improve Voting Machine Security
This year’s Intelligence Authorization Act would mandate penetration testing for federally certified voting machines and allow independent researchers to work on exposing vulnerabilities...
Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill's threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you can do to mitigate risk. The deep and dar...
A Scenario: Protecting a Financial Institution from External Threats With EASM
Background Carman Bank, a mid-sized financial institution, has experienced rapid growth over the past five years. As part of its expansion, the bank has significantly increased its digital presence by launching new online banking services, mobile applications, and integrating various third-party...
Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List
USDoD hacker scrapes and leaks a 100,000-line Indicator of Compromise IoC list from CrowdStrike, revealing detailed threat intelligence…...
WordPress Intelligence plugin <= 1.4.0 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Intelligence versions = 1.4.0...
WordPress Intelligence Plugin <= 1.4.0 is vulnerable to Sensitive Data Exposure
Software Intelligence Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6573 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bdfe8c7e8b17 Credits stealthcopter Required privileg...