661 matches found
The vulnerability in the implementation of the HTTP Live Streaming protocol in Firefox and Firefox ESR browsers, as well as in the Thunderbird email client for Android, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the implementation of the HTTP Live Streaming protocol for Firefox and Firefox ESR browsers, as well as the Thunderbird email client for Android, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the...
The vulnerability of the FortiOS operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.
The vulnerability of the FortiOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using specially crafted SSL/TLS or HTTP traffic...
The vulnerability of the Site Isolation function in Google Chrome web browsers allows attackers to circumvent existing security restrictions.
The vulnerability of Site Isolation in the Google Chrome web browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using a specially crafted web page...
The vulnerability of the JunOS operating system, related to security configuration errors, allows attackers to compromise the integrity of protected information.
The vulnerability of the JunOS operating system is related to security configuration errors due to reserved multicast addresses like 224.0.0.x not being correctly aligned with addresses like 224.x.x.x. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...
The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core-based automation tool for application management, allows attackers to bypass the PowerShell Core Constrained Language Mode and compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...
The vulnerability of the Active Directory Federation Services (AD FS) on Windows operating systems allows a perpetrator to bypass the authentication process.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures remotely...
MongoDB Leak Exposed Millions of Medical Insurance Records
An online database belonging to insurance marketing website MedicareSupplement.com was found exposing more than 5 million records with personal information. MedicareSupplement.com is a U.S.-based marketing site that allows users to find supplemental medical insurance available in their area...
The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to induce a service failure.
The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software suite relates to security configuration errors, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created page in the vulnerable version of Microsof...
The vulnerability of the Microsoft Dynamics resource planning software, related to security configuration errors, allows a hacker to circumvent existing restrictions on embedded email files.
The vulnerability of the Microsoft Dynamics resource planning software is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on email attachments by intercepting POST requests...
The vulnerability of PowerShell command interpreters in Windows operating systems allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of PowerShell command interpreters in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected information...
Schneider Electric Modicon M580 UMAS strategy read information disclosure vulnerability
Summary An exploitable information disclosure vulnerability exists in the UMAS strategy read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of the programmed...
Schneider Electric Modicon M580 UMAS read system blocks and bits information disclosure vulnerability
Summary An exploitable information disclosure vulnerability exists in the UMAS Read System Blocks and Bits functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of...
The vulnerability of the Spring Framework software, related to security configuration errors, allows attackers to compromise the confidentiality of protected information.
The vulnerability of the Spring Framework is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the information being protected...
The vulnerability of the Apache Tomcat application server, related to security configuration errors, allows attackers to gain access to web application resources.
The vulnerability of the Apache Tomcat application server is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to web application resources...
The vulnerability of the Apache ActiveMQ software platform, related to security configuration errors, allows attackers to execute a type of “man-in-the-middle” attack.
The vulnerability of the Apache ActiveMQ software platform is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...
The vulnerability of Junos OS’ firewall filter configuration allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Junos OS’ firewall filter configuration is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
Introducing the security configuration framework: A prioritized guide to hardening Windows 10
In the past, we left defining the security configuration for Windows 10 as a task for every customer to sort out. As a result, we saw as many different configurations as we saw customers. Standardization has many advantages, so we developed a security configuration framework to help simplify...