Opened exploitable ports in default docker-compose.yaml in go-ipfs

Impact Allows admin API access to the IPFS node. Who ? This affects people running the docker-compose.yaml service in an environment where the docker host is directly attached to a public or untrusted IP. In the vulnerable version, the private API endpoint is publicly forwarded by exposing it as...

CVE-2021-32982

Automation Direct CLICK PLC CPU Modules (C0-1x CPUs) with firmware

Vulnerability fixed in Zyxel Firewall and VPN systems

Zyxel has fixed a vulnerability in USG/ZyWALL, USG FLEX, ATP, VPN, and NSG systems. An unauthenticated malicious party could potentially exploit the vulnerability to gain access on the vulnerable system and from there move further into the infrastructure to be protectable infrastructure. The...

Security Bulletin: IBM QRadar Network Security is affected by an arbitrary code execution vulnerability (CVE-2016-4658)

Summary IBM QRadar Network Security is affected by a vulnerability in the libxml2 library that may allow arbitrary code execution. IBM QRadar Network Security has addressed this issue with a firmware update. Vulnerability Details CVEID: CVE-2016-4658 DESCRIPTION: The libxml2 library, as used in...

Mozilla NSS resource management error vulnerability

NSS is an underlying cryptography library from the Mozilla Foundation. The library supports a variety of cryptographic algorithms, and the Firefox browser's TLS implementation is based on this library. A resource management error vulnerability exists in Mozilla NSS. An attacker can trigger a memo...

Cyberattackers Target UPS Back-Up Power Devices in Mission-Critical Environments

Cyberattackers are targeting uninterruptible power supply UPS devices, which provide battery backup power during power surges and outages. UPS devices are usually used in mission-critical environments, safeguarding critical infrastructure installations and important computer systems and IT...

Security Bulletin: IBM QRadar Network Security is affected by an OpenSSL vulnerability (CVE-2021-3712)

Summary OpenSSL is used within IBM QRadar Network Security. Openssl has a bug which might lead to a denial of service or the ability for an attacker to read system memory. QRadar Network Security has addressed the issue with a firmware update. Vulnerability Details CVEID: CVE-2021-3712 DESCRIPTIO...

Security Bulletin: IBM QRadar Network Security is affected by Wget vulnerability (CVE-2021-31879)

Summary IBM QRadar Network Security includes wget, which fails to omit the Authorization header during a redirect, possibly allowing an attacker to bypass access restrictions. IBM QRadar Network Security took measures to suppress redirects in wget, avoiding the issue. Vulnerability Details...

Security Bulletin: IBM QRadar Network Security is affected by denial of service vulnerabilities in OpenSSL (CVE-2021-23840, CVE-2021-23841)

Summary IBM QRadar Network Security has addressed vulnerabilities in OpenSSL. The issues could lead to a denial of service. Vulnerability Details CVEID: CVE-2021-23840 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly lo...

Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

EulerOS 2.0 SP8 : polkit (EulerOS-SA-2022-1359)

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow...

Detection of ‘Leave Behinds’ From Nation-State Actors

Who left the backdoor open? By Trellix · March 28, 2022 In our recent report, In the Crosshairs: Companies and Nation-State Cyber Threats, over 800 IT decision makers from around the world were interviewed on their experiences with nation-state cyber attacks. One of the questions sought to...

McAfee Enterprise ePolicy Orchestrator SQL Injection Vulnerability

McAfee Epolicy Orchestrator McAfee Epo is a U.S. based solution for managing endpoint, network, data security, and compliance. a SQL injection vulnerability exists in versions of McAfee Enterprise ePolicy Orchestrator prior to 5.10 Update 13. The vulnerability stems from the application's lack of...

8 Tips for Securing Networks When Time Is Scarce

"At this particular mobile army hospital, we're not concerned with the ultimate reconstruction of the patient. We only care about getting the kid out of here alive enough for someone else to put on the fine touches. We work fast and we're not dainty, because a lot of these kids who can stand 2...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-83622)

MISP is a software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.156, which stem fro...

To Pay or Not to Pay? That is the Ransomware question

During a review of a client’s incident response capabilities the discussion turned to ransomware and strategies for handling it. The client’s board-level view was that if they were unable to restore their systems they would pay-up. They’d gone so far as considering setting up a cryptocurrency...

EulerOS 2.0 SP5 : nfs-utils (EulerOS-SA-2022-1333)

According to the versions of the nfs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15...

EulerOS 2.0 SP5 : mod_security (EulerOS-SA-2022-1332)

According to the versions of the modsecurity package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could...

CVE-2022-0918

CVE-2022-0918 affects the 389-ds-base LDAP server. An unauthenticated attacker with network access to the LDAP port can trigger a denial of service by sending a single crafted TCP message, causing a segmentation fault and a slapd crash. This is exploitable remotely without authentication and resu...

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...