Agents are not enough: Why cloud security needs agentless deep scanning

In this post, we’re going to dive into the role and limitations of security agents in the cloud, and put forth a different approach for cloud infrastructure security: agentless deep scanning...

CVE-2020-8468

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication...

Sql injection

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0147

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0146

Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2010-0146

CVE-2010-0146 refers to a directory traversal vulnerability in the Management Center for Cisco Security Agents, affected only for Cisco Security Agent Release 6.0 (Management Center). Exploitation requires an authenticated user and may allow reading arbitrary files on the Management Center server...

CVE-2010-0147

The CVE-2010-0147 issue affects the Management Center for Cisco Security Agents. A SQL injection vulnerability exists that allows remote authenticated users to execute arbitrary SQL commands. Affected versions are Cisco Security Agent Management Center: 5.1 prior to 5.1.0.117, 5.2 prior to 5.2.0....

CVE-2010-0147

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0146: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2010-0147: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

F-Secure Products Web Console Buffer Overflow (CVE-2006-2838)

F-Secure Corporation is an established developer of many anti-virus and security-related products. Two of the products provided by F-Secure can be deployed in enterprise environments and managed through a web interface. The web interface allows an administrator access to a console, through which ...