Detecting PrintNightmare Exploit Attempts using Trend Micro Vision One and Cloud One

We look into the different implementations of PrintNightmare and include recommendations on how security teams can safeguard their workloads...

PT-2021-7495 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6 and below Description: The issue is related to an use-after-free in the my strcasecmp 8bit component of MariaDB Server, which can be exploited through specially crafted SQL statements, potentially allowing a remot...

PT-2021-16044 · WordPress · Profilepress

Name of the Vulnerable Software and Affected Versions: User Registration, User Profile, Login & Membership – ProfilePress Formerly WP User Avatar versions prior to 3.1.11 Description: The issue concerns a lack of proper escaping in the widget for tabbed login/register, which could be exploited in...

PT-2021-6585 · Oracle +11 · Mysql Server +10

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.34 and prior MySQL Server versions 8.0.25 and prior Description: The issue is related to errors in resource release in the InnoDB component of MySQL Server, allowing an unauthenticated attacker with network access vi...

PT-2021-6456

Name of the Vulnerable Software and Affected Versions Java SE version 7u301 Description The issue is related to the JNDI component and can be exploited by an unauthenticated attacker with network access via multiple protocols, potentially leading to a partial denial of service DOS of Java SE. Thi...

PT-2021-14787 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.12 Description: A local file inclusion LFI vulnerability exists in the options.php script functionality. A specially crafted HTTP request can lead to arbitrary PHP code execution. An attacker can send a crafted...

PT-2021-3933 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.12 Description: The issue exists in the ssh form.php script functionality, allowing for cross-site scripting vulnerabilities. If a user visits a specially crafted URL, it can lead to arbitrary JavaScript code...

PT-2021-20256 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Reconciliation Framework versions 700 through 75F Description: A function module in the Reconciliation Framework of SAP NetWeaver AS ABAP allows a high-privileged attacker to inject code that can be executed by the...

PT-2021-19742 · Qsan · Qsan Storage Manager

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: The issue is related to improper access control in the share link feature of QSAN Storage Manager, allowing remote attackers to download arbitrary files by exploiting a particular...

PT-2021-7498 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6 and below Description: An issue in the component Field::set default of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The vulnerability is...

PT-2021-3474 · Chamilo · Chamilo

Name of the Vulnerable Software and Affected Versions: Chamilo versions prior to 1.11.14 Description: The issue is related to a lack of protection in the SQL query structure, which can be exploited to impact the confidentiality, integrity, and availability of protected information. The searchFiel...

PT-2021-5840

Name of the Vulnerable Software and Affected Versions vsftpd affected versions not specified Sendmail affected versions not specified Nginx affected versions not specified Description The issue is related to an application layer protocol content confusion attack, exploiting TLS servers implementi...

PT-2021-7501 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.3 and below Description: An issue in the component my decimal::operator= of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The vulnerability...

Is this the “Summer of Cybercrime”?

Summer is just around the corner, and malicious actors don’t seem to be planning a vacation as cybercrime continues to ramp up. Learn some security recommendation you can implement to help minimize the risk of compromise...

PT-2021-18047

Name of the Vulnerable Software and Affected Versions: Liferay DXP versions 7.0 through 7.0 before fix pack 99 Liferay DXP versions 7.1 through 7.1 before fix pack 23 Liferay DXP versions 7.2 through 7.2 before fix pack 12 Liferay DXP versions 7.3 through 7.3 before fix pack 1 Description: A...

PT-2021-19975 · Rockwell Automation · Micro800 +1

Name of the Vulnerable Software and Affected Versions: Micro800 versions All MicroLogix 1400 versions 21 and later Description: This issue allows an attacker to intercept and replace a legitimate new password hash with an illegitimate one during an authenticated password change request. This...

PT-2021-16719 · Apache · Apache Dubbo

Name of the Vulnerable Software and Affected Versions: Apache Dubbo versions prior to 2.6.9 and 2.7.9 Apache Dubbo versions prior to 2.6.9 and 2.7.10 Apache Dubbo versions prior to 2.6.12 and 2.7.15 However, to consolidate the ranges of affected versions into the most concise form and avoid...

PT-2021-18039 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.4 and earlier Liferay DXP versions 7.0 through 7.0 before fix pack 97 Liferay DXP versions 7.1 through 7.1 before fix pack 20 Liferay DXP versions 7.2 through 7.2 before fix pack 10 Description: The JSON web servic...

Microsoft Office SharePoint Targeted With High-Risk Phish, Ransomware Attacks

A phishing campaign, discovered by researchers at Cofense, is draping itself in a Microsoft Office SharePoint theme and successfully bypassing security email gateways SEGs. In a post on Tuesday, the firm said that this is an example of why it’s not always prudent to share documents via Microsoft’...

PT-2021-2863 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to errors in the authorization procedure of the Cisco SD-WAN vManage web interface. It allows a remote attacker to gain unauthorized access to...