13132 matches found
PT-2020-12901
Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions prior to 7.1.1 Description The issue is a Cross-Site Scripting vulnerability that could be remotely exploited, resulting in Cross-Site Scripting XSS. Recommendations For versions prior to 7.1.1, update to...
Micro Focus Filr Cross-Site Scripting Vulnerability
Micro Focus Filr is a file access and sharing solution for businesses. A reflected cross-site scripting vulnerability exists in Micro Focus Filr 4.2.1. No detailed vulnerability details are provided at this time...
PT-2020-12893
Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions prior to 7.1.1 Description The issue is an arbitrary code execution vulnerability that could be remotely exploited, resulting in the execution of arbitrary code. Recommendations For versions prior to 7.1.1,...
PT-2020-16234 · Micro Focus · Micro Focus Arcsight Logger
Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger version 7.1 Description: The issue is a Cross-Site Scripting vulnerability that could be remotely exploited, resulting in Cross-Site Scripting XSS. Recommendations: For Micro Focus ArcSight Logger version 7.1, upda...
PT-2020-6074
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure, which could allow an unauthenticated user...
Micro Focus ArcSight Logger Arbitrary Code Execution Vulnerability
ArcSight Logger is a log management solution optimized for extremely high event throughput, efficient long-term storage and fast data analysis. An arbitrary code execution vulnerability exists in Micro Focus ArcSight Logger versions prior to 7.1.1. An attacker could exploit this vulnerability to...
PT-2020-16233
Name of the Vulnerable Software and Affected Versions Micro Focus IDOL versions prior to 12.7 Description The issue is a Persistent cross-Site Scripting vulnerability that could be exploited to perform a Persistent XSS attack. Recommendations For versions prior to 12.7, update to version 12.7 or...
CVE-2020-25834: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting XSS...
Trend Micro InterScan Web Security Virtual Appliance: Operating System Command Injection Vulnerability
Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command injection vulnerability exists in AddVLANItem in Trend Micro InterScan Web...
Trend Micro InterScan Web Security Virtual Appliance Buffer Error Vulnerability
The Trend Micro InterScan Web Security Virtual Appliance is a security gateway that combines application control with zero-day vulnerability detection, advanced anti-malware scanning, real-time Web reputation, and flexible URL filtering to provide superior Internet threat protection. A buffer...
Trend Micro InterScan Web Security Virtual Appliance Buffer Error Vulnerability
Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Trend Micro Web security gateway that provides dynamic, integrated security for enterprise networks against Web-based threats. A stack buffer overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance 6.5...
Cybercrime Moves to the Cloud to Accelerate Attacks Amid Data Glut
Cybercriminals are embracing cloud-based services and technologies in order to accelerate their attacks on organizations and better monetize their wares, researchers have found. This is largely driven by cybercriminals who sell access to what they call “clouds of logs,” which are caches of stolen...
Micro Focus IDOL cross-site scripting vulnerability
Micro Focus IDOL is an AI engine for text analytics, speech analytics, and video analytics from Micro Focus UK. The product can be used in scenarios such as enterprise search, chatbots, government open source intelligence and unstructured data analysis. A cross-site scripting vulnerability exists...
Micro Focus ArcSight Logger cross-site scripting vulnerability
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in Micro Focus...
Micro Focus Filr cross-site scripting vulnerabilities
Micro Focus Filr is a file access and sharing solution for businesses. A reflected cross-site scripting vulnerability exists in Micro Focus Filr 4.2.1. No detailed vulnerability details are provided at this time...
DEBIAN-CVE-2020-12912
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...
Cisco Adaptive Security Appliances TCP DoS
The vulnerability of the TCP packet processing service provided by micro-programmed network interface devices from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor t...
CVE-2020-27019
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key...
CVE-2020-27016
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to a cross-site request forgery CSRF vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must...