Lucene search
+L

2481 matches found

The Hacker News
The Hacker News
added 2021/11/23 7:39 a.m.24 views

GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

Web hosting giant GoDaddy on Monday disclosed a data breach that resulted in the unauthorized access of data belonging to a total of 1.2 million active and inactive customers, making it the third security incident to come to light since 2018. In a filing with the U.S. Securities and Exchange...

6.6AI score
SaveExploits0
Wordfence Blog
Wordfence Blog
added 2021/11/22 7:28 p.m.23 views

GoDaddy Breached – Plaintext Passwords – 1.2M Affected

There is an update available here: GoDaddy Breach Widens to tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host Europe This morning, GoDaddy disclosed that an unknown attacker had gained unauthorized access to the system used to provision the company’s Managed WordPress sites,...

6.8AI score
SaveExploits0
Fedora
Fedora
added 2021/11/19 1:16 a.m.68 views

[SECURITY] Fedora 35 Update: freeipa-4.9.7-4.fc35

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

9CVSS7.5AI score0.02064EPSS
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/11/15 7:0 p.m.37 views

How Open Systems uses Microsoft tools to improve security maturity

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. We’ve all seen it happen—an organization has all the top-notch security tools in place and still, they get breached. In today’s rapidly evolving threat landscape, complexity leads to...

6.8AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2021/11/15 7:0 p.m.26 views

How Open Systems uses Microsoft tools to improve security maturity

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. We’ve all seen it happen—an organization has all the top-notch security tools in place and still, they get breached. In today’s rapidly evolving threat landscape, complexity leads to...

6.8AI score
SaveExploits0
Palo Alto Networks
Palo Alto Networks
added 2021/11/10 5:0 p.m.173 views

PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol SCEP feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root user privileges. The attacker must have...

8.1CVSS8.8AI score0.33875EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:33 p.m.32 views

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22918 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by an out-of-bounds read in the libuv's...

5.3CVSS0.5AI score0.23132EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:30 p.m.45 views

Security Bulletin: A security vulnerability in Node.js tar module affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js tar module affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID: CVE-2021-32803 DESCRIPTION: Node.js tar module could allow a local attacker to traverse directories on the system, caused by insufficient symlink...

8.2CVSS1.8AI score0.07795EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:27 p.m.32 views

Security Bulletin: A security vulnerability in Golang Go affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Golang Go affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID: CVE-2021-34558 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by the failure to properly assert that the type of public key in an X.509...

6.5CVSS0.9AI score0.06975EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:25 p.m.50 views

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22940 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by an incomplete fix f...

9.8CVSS0.9AI score0.36453EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:12 p.m.36 views

Security Bulletin: A security vulnerability in Node.js tar module affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js tar module affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID: CVE-2021-37701 DESCRIPTION: Node.js tar module could allow a local attacker to execute arbitrary code on the system, caused by an arbitrary file...

8.6CVSS1.1AI score0.03286EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:11 p.m.44 views

Security Bulletin: A security vulnerability in Node.js tar module affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js tar module affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID: CVE-2021-37712 DESCRIPTION: Node.js tar module could allow a local attacker to execute arbitrary code on the system, caused by an arbitrary file...

8.6CVSS1AI score0.0185EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 6:8 p.m.33 views

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22931 DESCRIPTION: Node.js could provide weaker than expected security, caused by missing input validation on hostnames...

9.8CVSS1AI score0.21952EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/09 5:59 p.m.39 views

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22939 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions. If the https API was used...

5.3CVSS1.5AI score0.1473EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2021/11/09 3:15 p.m.27 views

CVE-2019-16240

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain...

9.1CVSS0.01311EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/09 2:37 p.m.63 views

CVE-2019-16240

CVE-2019-16240 concerns a Buffer Overflow and Information Disclosure in HP OfficeJet Pro printers (before 001.1937C) and HP PageWide Managed/HP PageWide Pro printers (before 001.1937D). A maliciously crafted print file may cause the printer to assert, potentially producing a core dump to a local ...

9.1CVSS8.8AI score0.01311EPSS
SaveExploits0References1Affected Software1
Citrix
Citrix
added 2021/11/09 10:23 a.m.263 views

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADC,Citrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issues: CVE-ID|...

7.5CVSS7.4AI score0.00894EPSS
SaveExploits0Affected Software5
HackRead
HackRead
added 2021/11/08 2:54 p.m.21 views

Managed vs. Unmanaged VPS hosting -What are the Differences?

By Owais Sultan VPS hosting is beneficial for many reasons but what is the difference between Managed vs. Unmanaged VPS hosting and why does it matter? This is a post from HackRead.com Read the original post: Managed vs. Unmanaged VPS hosting -What are the Differences?...

7AI score
SaveExploits0
OSV
OSV
added 2021/11/03 1:15 a.m.7 views

CVE-2021-39237

Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure...

4.6CVSS5.8AI score0.02358EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/03 1:15 a.m.7 views

CVE-2021-39238

Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow...

9.8CVSS6.1AI score0.12135EPSS
SaveExploits0References1
Rows per page
Query Builder