Design/Logic Flaw

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465...

CVE-2023-28953

CVE-2023-28953 affects IBM Cognos Analytics on Cloud Pak for Data 4.0. Root cause: misconfigured security context (seccomp/security context settings) in pod specifications that could allow a process to make system calls, potentially compromising container security. Reported CVSS base score ~3.1 (...

Atlassian Crowd 授权问题漏洞

Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multi-user, web applications and directory servers. Atlassian Crowd suffers from an authorization issue vulnerability that stems from the fact...

CVE-2021-27762 HCL BigFix Platform is affected by misconfigured security-related HTTP headers

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses...

CVE-2021-45641

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 befor...

CVE-2021-45644

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2...

Unspecified Vulnerability in NETGEAR R7800

The NETGEAR R7800 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.46, which stems from a misconfiguration of security settings. No details of the vulnerability are available at this time...

CVE-2018-21159

NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings...

Unspecified Vulnerability in Multiple NETGEAR Products (CNVD-2020-28014)

NETGEAR D7800 and others are products of NETGEAR USA.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR WNDR3700 is a wireless router. A security vulnerability exists in multiple NETGEAR products that stems from a misconfiguration of security settings. No detailed...

Multiple NETGEAR Products Input Validation Error Vulnerability (CNVD-2021-67651)

NETGEAR JNR1010 and others are a wireless router from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products, which stems from misconfigured security settings. No detailed vulnerability details are available at this time...

Unspecified Vulnerability in NETGEAR WAC505 and WAC510

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. A security vulnerability exists in the NETGEAR WAC505 prior to version 8.0.6.4 and the WAC510 prior to version 8.0.6.4, which stems from a misconfiguration of security settings. Detailed vulnerability details...

VOIPO Database Exposes Millions of Texts, Call Logs

UPDATE An improperly secured database owned by a California voice-over-internet provider left millions of customer call logs, SMS message logs and credentials in plain text open for months for the taking. The database belongs to VOIPO, which provides mobile services for consumers and commercial...

Gain Visibility and Continuous Security Across All Your Public Clouds

As organizations increase their use of public cloud platforms, they encounter cloud-specific security and compliance threats, which can be challenging to address without the right tools and processes. Organizations’ cloud security difficulties lie in two main areas: Lack of visibility into their...