May 10, 2022-KB5013868 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

Five Eyes Alliance Advisory & Using Threat Intelligence

Trellix Global Defenders: Five Eyes Alliance Advisory and Using Threat Intelligence to Protect Against Future Attacks By Taylor Mullins · May 6, 2022 Evolving intelligence continues to indicate that the Russian government is exploring options to launch cyberattacks in retaliation against...

MDR, MEDR, SOCaaS: Which Is Right for You?

Getting the most from managed services Even if a security team was given a blank check to spend whatever they wanted and hire however they wanted, it would still be a massive effort to build a detection and response D&R program tailored to that organization’s specific needs. Thankfully, the...

Command Execution Vulnerability in PatrolFlow Multi-Service Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2022-38233)

hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building a next-generation secure Internet. Byzoro Networks PatrolFlow multi-service security gateway intelligent management platform has a command execution vulnerability, which can be exploited by attackers to...

Update on WhisperGate, Destructive Malware Targeting Ukraine – Threat Intelligence & Protections Update

Update on WhisperGate, Destructive Malware Targeting Ukraine – Threat Intelligence & Protections Update By Taylor Mullins, Mo Cashman and Raj Samani · January 20, 2022 Recent news reports of a “ransomware” campaign targeting Ukraine has resulted in significant press coverage regarding not only...

KLA12374 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to spoof user interface, perform cross-site scripting attack, obtain sensitive information, cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete...

SUSE-SU-2021:2928-1 Security update for rubygem-addressable

This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates bsc1188207...

SQL Injection Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks, which can be exploited by...

Arbitrary File Download Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. The PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks suffers from an arbitrary file download vulnerability, which can be...

Command Execution Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2021-51332)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A command execution vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks, which can be exploited by...

File Upload Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2021-51415)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A file upload vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks, which can be exploited by an...

Command Execution Vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A command execution vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Byzor...

Unauthorized Access Vulnerability in Byzoro Networks Smart Multiservice Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An unauthorized access vulnerability exists in Byzoro's Smart Multi-service Security Gateway Intelligent Management Platform...

Logic Flaw Vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A logic flaw vulnerability exists in Byzoro's Smart Multi-service Security Gateway Intelligent Management Platform. Attackers...

SQL Injection Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Limited (CNVD-2021-39833)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Networks Technology Co. Ltd, which ca...

SQL Injection Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Beijing...

PT-2021-3058 · Netbsd +8 · Netbsd +8

Name of the Vulnerable Software and Affected Versions: NetBSD version 7.1 Description: An issue was discovered in the kernel where an Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected...

SUSE: Security Advisory (SUSE-SU-2017:0771-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2020-13577

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. Allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service elevation vulnerability. The following products and editions are affected:Windows Server 2008 R...