Denial of service

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

CVE-2020-11848

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

CVE-2020-11848

CVE-2020-11848 is a DoS vulnerability in Micro Focus ArcSight Management Center (ArcMC). Connected documents confirm affected software as ArcMC versions prior to 2.9.5, with the impact described as the server becoming unavailable (denial of service). The Red Hat and CNVD entries corroborate the s...

CVE-2020-11848: Undefined Security Weakness

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

PT-2020-12891

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Management Center versions prior to 2.9.5 Description The issue is a denial of service vulnerability that could cause the server to become unavailable. Recommendations For versions prior to 2.9.5, update to version 2.9.5 o...

Trend Micro Worry-Free Business Security Path Traversal Authentication Bypass (000245572)

The Trend Micro Worry-Free Business Security WFBS is affected by a path traversal vulnerability in cgiRecvFile.exe due to improper validation of a user-supplied path prior to using it in file operations when handling the TempFileName parameter in an HTTP request. An unauthenticated, remote attack...

Trend Micro Worry-Free Business Security Detection

Binary data trendmicrowfbsdetect.nbin...

This Week in Security News: Microsoft Patches 120 Vulnerabilities, Including Two Zero-Days and Trend Micro Brings DevOps Agility and Automation to Security Operations Through Integration with AWS Solutions

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about one of Microsoft’s largest Patch Tuesday updates ever, including fixes for 120 vulnerabilities and two zero-days. Also, learn abo...

Heybbs micro community us***.php suffers from SQL injection vulnerability

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs micro-community us.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Micro Focus Secure Messaging Gateway Injection Vulnerability

Micro Focus Secure Messaging Gateway SMG is a secure messaging gateway product from Micro Focus UK. The product supports features such as email scanning and inbound and outbound protection. A security vulnerability exists in Micro Focus SMG versions prior to 2020-7. An attacker could exploit the...

Automate Compliance in the Well-Architected Framework

Explore how Edrans, a DevOps, IT, and software consultancy, is using Trend Micro Cloud One™ – Conformity to adhere to the Well-Architected Framework and boost customers’ security, performance, and compliance...

Pilot Future (Beijing) Technology Co., Ltd. micro-knowledge inventory in the file upload vulnerability

Microknowledge Base is to provide a platform for the operation and management of self-resource libraries. Pilot Future Beijing Technology Co., Ltd. micro-knowledge library in the file upload vulnerability, attackers can use the vulnerability to obtain server privileges...

Trend Micro™ Deep Security™ 20 is Here

Chuck Losh, Solutions Architect, takes us through the deployment of Trend Micro™ Deep Security™ 20 software in Microsoft® Azure® and runs through how to connect the database element to the Azure SQL Database...

CVE-2020-11852

DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway SMG. Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM syst...

CVE-2020-11852

DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway SMG. Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM syst...

Command injection

DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway SMG. Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM syst...

CVE-2020-11852

CVE-2020-11852 is a command-injection vulnerability in Micro Focus Secure Messaging Gateway (SMG) affecting the DKIM key management page. The issue allows a logged-in user with rights to generate DKIM key information to inject system commands into the DKIM system command call. Affected are SMG Ap...

CVE-2020-11852

DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway SMG. Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM syst...

CVE-2020-11852: Improper Neutralization of Special Elements used in an OS Command

DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway SMG. Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM syst...

How to Improve Azure Security with CIS Benchmarks

View Trend Micro Cloud One™ – Conformity in action! Read along as Chuck walks you through how to run a CIS report to see how to improve and remediate misconfigurations via a Conformity Bot...