CVE-2017-2293

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...

CVE-2017-2293

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...

CVE-2017-2293

Removed by vendor...

PT-2018-7107

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions prior to 2016.4.5 Puppet Enterprise versions prior to 2017.2.1 Description: The issue concerns a configuration in MCollective that allows the package plugin to install or remove arbitrary packages on all managed...

VulnCheck KEV: CVE-2018-20753

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices...

HP Printers DLL Signature Validation Vulnerability (Jan 2018)

Multiple HP Printers perform insufficient Solution DLL Signature Validation, allowing for potential execution of arbitrary code. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Carbon Black Named a Visionary in Gartner’s 2018 Magic Quadrant for Endpoint Protection Platforms

For the second consecutive year, Carbon Black has been named a “Visionary” in Gartner’s Magic Quadrant for Endpoint Protection Platforms. For this year’s edition of the MQ, Gartner evaluated Cb Defense, our flagship solution built on the Cb Predictive Security Cloud ™ PSC. Our vision for the PSC ...

Carbon Black To Work Hand-In-Hand to Drive Partner Demand Through Cb ThreatSight

This week, Carbon Black launched Cb ThreatSight, a brand new managed threat hunting service staffed by world-class threat experts who keep watch over customer environments 24×7. As part of the new service, Carbon Black’s internal Cb ThreatSight team performs round-the-clock threat validation,...

Introducing Cb ThreatSight: Managed Threat Hunting and Triage

As the global threat landscape accelerates, security teams are always worried something will slip through. Many companies lack the security professionals needed to investigate and respond to the flood of cybersecurity incidents they face. Others don’t even understand the threats they face — thoug...

CVE-2017-2750: Improper Input Validation

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

PT-2018-7183

Name of the Vulnerable Software and Affected Versions: HP LaserJet Enterprise printers versions prior to 2308937 578479 HP PageWide Enterprise printers versions prior to 2308937 578479 HP LaserJet Managed printers versions prior to 2308937 578479 HP OfficeJet Enterprise printers versions prior to...

Cisco Small Business 300 and 500 Series HTTP Response Splitting Vulnerability

Cisco 350 Series Managed Switches and so on are the United States Cisco Cisco company's switch equipment.Cisco Small Business Managed Switches software is running in which a set of switch management software. An HTTP response splitting vulnerability exists in the web framework of the Cisco Small...

Cisco Small Business Switches Cross-Site Scripting Vulnerability

Cisco Small Business 300 Series Managed Switches and so on are American Cisco Cisco company's switch equipment.Cisco Small Business Managed Switches software is running in which a set of switch management software. A cross-site scripting vulnerability exists in Cisco Small Business Managed Switch...

Cross site scripting

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

Input validation

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

CVE-2017-12308

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

CVE-2017-12308

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...