PT-2022-36458 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: The issue is related to the IB/hfi1 component in the Linux Kernel, specifically with the sc disable function. It involves correctly moving a list. The actual impact and attack plausibility...

PT-2022-36266 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to the IB/hfi1 component, specifically in the sc disable function, where a list is not correctly moved. This is an automated identification of a potential security issu...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an unknown function in its getstatecity.php component that operates on the sc parameter to cause SQL...

proposals.berkeleycountysc.gov Cross Site Scripting vulnerability OBB-2938181

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

agronomica.sc.gov.br Cross Site Scripting vulnerability OBB-2923905

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[R1] Stand-alone Security Patch Available for Tenable.sc versions 5.19.0 to 5.21.0: Patch SC-202209.1

R1 Stand-alone Security Patch Available for Tenable.sc versions 5.19.0 to 5.21.0: Patch SC-202209.1 Arnie Cabral Wed, 09/07/2022 - 10:46 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components moment.js was found to contain...

GHSA-QF7J-25G9-R63F elrond-go MultiESDTNFTTransfer call on a SC address with missing function name

Impact Anyone who uses elrond-go to process blocks historical or actual that contains a transaction like this: MultiESDTNFTTransfer@01@54444558544b4b5955532d323631626138@00@0793afc18c8da2ca@ mind the missing function name after the last @ Basic functionality like p2p messaging, storage, API...

elrond-go MultiESDTNFTTransfer call on a SC address with missing function name

Impact Anyone who uses elrond-go to process blocks historical or actual that contains a transaction like this: MultiESDTNFTTransfer@01@54444558544b4b5955532d323631626138@00@0793afc18c8da2ca@ mind the missing function name after the last @ Basic functionality like p2p messaging, storage, API...

Duplicate

This advisory duplicates another...

Imperva Data Security Fabric Wins 2022 SC Media Trust Award for Data Security

SC Media has announced the winners of their 2022 SC Awards, with 38 companies, executives, and security solutions selected by their panel of judges as the best of the year. We are thrilled to report that ​Imperva Data Security Fabric has earned the 2022 SC Media Trust Award for Data Security. For...

Qualys VMDR Recognized as Best VM Solution by SC Awards 2022 & Leader by GigaOm

Qualys VMDR has been recognized for its commanding industry leadership by both the 2022 SC Awards and analyst firm GigaOm. SC Magazine has chosen Qualys VMDR as the winner of the Best Vulnerability Management Solution category in its SC Awards 2022. The SC Awards honors the best solutions in...

PT-2022-4147 · Siemens · Scalance W-700 +9

Name of the Vulnerable Software and Affected Versions: SCALANCE M-800 / S615 versions prior to V2.3.1 SCALANCE SC-600 family versions prior to V2.3.1 SCALANCE W-1700 IEEE 802.11ac family versions prior to V2.3.1 SCALANCE W-700 IEEE 802.11ax family versions prior to V2.3.1 SCALANCE W-700 IEEE...

Siemens SCALANCE

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

southernmotorcosc.com Cross Site Scripting vulnerability OBB-2830630

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tenable SecurityCenter < 5.22.0 Multiple Vulnerabilities (TNS-2022-15)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host has a third-party software vulnerability in Moment.js, prior to version 2.29.4. It contains a denial of service vulnerability due to an inefficient parsing algorithm. An remote attacker can...

Two Rapid7 Solutions Take Top Honors at SC Awards Europe

LONDON—We are pleased to announce that two Rapid7 solutions were recognized on Tuesday, June 21, at the prestigious SC Awards Europe, which were presented at the London Marriott, Grosvenor Square. InsightIDR took the top spot in the Best SIEM Solution category, and Threat Command brought home the...

Malicious code in sc-bing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d7bf56f772259e7de9fe49c4783c15ed5c91abc5a6281a06995c34164106e42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-paul (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad54f4ed59a7b7c15aa41bdea193e0d193255c3effdbde8b9877bb5fde32d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-hydrate-sku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53a18d567459c5ece1b8f35fdb56b6fa60f4a13c6ceff898fbb82c7cb0d7ff80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...