VPNFilter Router Malware Adds 7 New Network Exploitation Modules

Security researchers have discovered even more dangerous capabilities in VPNFilter—the highly sophisticated multi-stage malware that infected 500,000 routers worldwide in May this year, making it much more widespread and sophisticated than earlier. Attributed to Russia's APT 28, also known as...

The vulnerability of the monitoring software for PLK Fuji Electric V-Server Lite allows a intruder to execute arbitrary code, trigger malfunctions, or disclose protected information.

The vulnerability of the monitoring software for PLCCs from Fuji Electric, V-Server Lite, is related to buffer overflow in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, cause system failures, or disclose sensitive information...

CVE-2018-3831

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This...

Credit Freezes are Free: Let the Ice Age Begin

It is now free in every U.S. state to freeze and unfreeze your credit file and that of your dependents, a process that blocks identity thieves and others from looking at private details in your consumer credit history. If you've been holding out because you're not particularly worried about ID...

Security Bulletin: A vulnerability in SQLite affects IBM Cloud Application Performance Management Response Time Monitoring Agent and IBM Tivoli Composite Application Manager for Transactions (CVE-2018-8740)

Summary SQLite is vulnerable to a denial of service, caused by a NULL pointer dereference in the src/build.c, src/prepare.c. By using a corrupted SQLite3 database file, a remote attacker could exploit this vulnerability to cause the application to crash. Vulnerability Details CVEID: CVE-2018-8740...

IBM Tivoli Monitoring Elevation of Privilege Vulnerability

IBM Tivoli Monitoring ITM is a suite of system monitoring software from IBM in the United States. The software supports the detection of system bottlenecks and potential problems, performance monitoring of basic system resources, and automatic recovery from critical situations. An elevation of...

Elasticsearch Alerting and Monitoring Information Disclosure Vulnerability

Elasticsearch is the Netherlands Elasticsearch company's set of Lucene-based open source distributed RESTful search engine , it is mainly used in cloud computing , and supports the use of JSON over HTTP for data indexing . Alerting and Monitoring is one of the alerting and monitoring components...

CVE-2018-3831

Elasticsearch CVE-2018-3831 affects Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12. The root cause is information disclosure via the _cluster/settings API: when queried, it can leak sensitive configuration data (passwords, tokens, usernames) to an authenticated user.reme...

CVE-2017-1794

IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039...

CVE-2017-1794

IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039...

Privilege escalation

IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039...

CVE-2017-1794

IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039...

CVE-2017-1794

IBM Tivoli Monitoring Enterprise Portal is vulnerable to TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. Affected: Enterprise Portal Server 6.2.3 (Fix Pack 5) and 6.3.0 (Fix Pack 7). Root cause is memory growth that can be exploited to escalate pr...

Microsoft Windows Defender AV: Configure local setting override for monitoring file and program activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavoverrideaccessprotection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure local setting override for monitoring file and program activity on your computer Authors: Emanuel Moss Copyright: Copyright c 201...

Microsoft Windows Defender AV: Configure monitoring for incoming and outgoing file and program activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavrealtimescandirection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure monitoring for incoming and outgoing file and program activity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Microsoft Windows Defender AV: Turn on behavior monitoring

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavbehaviormonitoring.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Turn on behavior monitoring Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows Defender AV: Configure local setting override for turn on behavior monitoring

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavoverridebehaviormonitoring.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure local setting override for turn on behavior monitoring Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks Gmb...

Microsoft and Imperva Collaboration Bolsters Data Compliance and Security Capabilities

This article explains how Imperva SecureSphere V13.2 has leveraged the latest Microsoft EventHub enhancements to help customers maintain compliance and security controls as regulated or sensitive data is migrated to Azure SQL database instances. Database as a Service Benefits Platform as a Servic...

Explainer Series: RDaaS Security and Managing Compliance Through Database Audit and Monitoring Controls

As organizations move to cloud database platforms they shouldn't forget that data security and compliance requirements remain an obligation. This article explains how you can apply database audit and monitoring controls using Imperva SecureSphere V13.2 when migrating to database as a service clou...

Security Bulletin: IBM Tivoli Monitoring Client Vulnerabilities

Summary IBM Tivoli Monitoring Client is affected by user privilege escalation and possible denial of service vulnerabilities. IBM has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-1794 DESCRIPTION: IBM Tivoli Monitoring Enterprise Portal is vulnerable to both TEPS user...