1335 matches found
CVE-2023-35335: Improper Neutralization of Input During Web Page Generation
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2023-32604
Affected versions Trend Micro Apex Central on-premise are vulnerable to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order ...
CVE-2023-32536
Affected versions Trend Micro Apex Central on-premise are vulnerable to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order ...
CVE-2023-32531
Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32532 through 32535...
CVE-2023-32530
Vulnerable modules of Trend Micro Apex Central on-premise contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these...
CVE-2023-32529
Vulnerable modules of Trend Micro Apex Central on-premise contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these...
CVE-2023-24546
On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts...
Webinar - Mastering API Security: Understanding Your True Attack Surface
Believe it or not, your attack surface is expanding faster than you realize. How? APIs, of course! More formally known as application programming interfaces, API calls are growing twice as fast as HTML traffic, making APIs an ideal candidate for new security solutions aimed at protecting customer...
Security Bulletin: Apache Commons Text vulnerability affects Netcool Operations Insight [CVE-2022-42889]
Summary Apache Commons Text vulnerability affects Netcool Operations Insight. Apache Commons Text is used by multiple Netcool Operation Insight Services. The vulnerability has been addressed. CVE-2022-42889 Vulnerability Details CVEID:CVE-2022-42889 DESCRIPTION: OX AppSuite could allow a remote...
User may be redirected to On-premises AAA Logout Page after Logging off Citrix Cloud
When you deploy an on-premises Citrix GatewayNetScaler Gateway as the OAuth IDP for Citrix Cloud. User may be redirected toon-premises IDP logout page/vpn/tmlogout.html instead of Citrix Cloud login page after logging out Citrix Cloud. For example, you have the following URLs: Citrix Cloud URL:...
Bridging the Security Gap: Mitigating Lateral Movement Risks from On-Premises to Cloud Environments
This blog post will discuss lateral movement risks from on-prem to the cloud. We will explain attacker TTPs, and outline best practices for cloud builders and defenders to help secure their cloud environments and mitigate risk...
PT-2023-23861 · Trend Micro · Trend Micro Apex Central
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central on-premise affected versions not specified Description: The issue concerns certain dashboard widgets that are susceptible to cross-site scripting XSS attacks. This could potentially allow an attacker to achieve remote...
Dr. Active Directory vs. Mr. Exposed Attack Surface: Who'll Win This Fight?
Active Directory AD is among the oldest pieces of software still used in the production environment and can be found in most organizations today. This is despite the fact that its historical security gaps have never been amended. For example, because of its inability to apply any security measure...
Cisco Smart Software Manager On-Prem SQL注入漏洞
Cisco Smart Software Manager On-Prem SSM On-Prem is a Cisco component for Cisco product license management. Cisco Smart Software Manager On-Prem SSM On-Prem suffers from a SQL injection vulnerability that originates from the web-based management interface not adequately validating user input. An...
Cyolo Product Overview: Secure Remote Access to All Environments
Operational technology OT cybersecurity is a challenging but critical aspect of protecting organizations' essential systems and resources. Cybercriminals no longer break into systems, but instead log in – making access security more complex and also more important to manage and control than ever...
PT-2023-3783
Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central on-premise affected versions not specified Description The issue concerns certain dashboard widgets in Trend Micro Apex Central that are susceptible to cross-site scripting XSS attacks. This could potentially allow an...
CVE-2022-47878: Unrestricted Upload of File with Dangerous Type
Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that the vulnerability...
Security Benefits of Enhanced Cloud Visibility
On the fence about migrating to the cloud because security seems complex and abstract? Let go of your on-premises point products and discover how a platform with enhanced cloud visibility can help smooth out your cloud journey...
CVE-2023-28971 Paragon Active Assurance: Enabling the timescaledb enables IP forwarding
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance PAA Formerly Netrounds allows an attacker to bypass existing firewall rules and limitations used to restrict internal communcations. The Tes...