1538 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to bypass intended access restrictions by injecting a 1 DLL or 2 configuration file...
CVE-2013-5448
Cross-site scripting XSS vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-5448
CVE-2013-5448 is an XSS in IBM QRadar SIEM (Right Click Plugin context menus for IP information). The vulnerability affects QRadar SIEM 7.1 and 7.2 (enabled via ip_context_menu.xml). The IBM bulletin states the attack can be carried out over the network and does not require authentication, potent...
CVE-2013-5463
CVE-2013-5463 affects IBM QRadar SIEM WinCollect Agent prior to version 7.1.1.569824. The vulnerability allows remote attackers to bypass access restrictions by injecting a malicious DLL or a configuration file, bypassing intended protections and potentially affecting the security of the host. Th...
CVE-2013-6307
IBM QRadar SIEM 7.0 contains a Cross-Site Scripting (XSS) flaw (CVE-2013-6307) that allows remote attackers with network access to inject arbitrary script via unspecified vectors. The IBM advisory notes the issue affects QRadar SIEM 7.0 and, in terms of impact, can affect data integrity while not...
Top 3 Focus Areas that can help you in Data Loss Prevention
One of the most intimidating issues that gives nightmares to IT teams across organizations is data breaches or data loss. Typically, data loss happens when security is compromised and corporate sensitive data is accessed. It might fall under any of these categories: Unauthorized, intentional or...
Top 3 Focus Areas that can help you in Data Loss Prevention
One of the most intimidating issues that gives nightmares to IT teams across organizations is data breaches or data loss. Typically, data loss happens when security is compromised and corporate sensitive data is accessed. It might fall under any of these categories: Unauthorized, intentional or...
Alienvault Open Source SIEM (OSSIM) - Timestamp Directory Traversal
Alienvault Open Source SIEM OSSIM - Timestamp Directory Traversal source: https://www.securityfocus.com/bid/62899/info Open Source SIEM OSSIM is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker ...
Importance of Logs and Log Management for IT Security
IT Security is the name of the game and no matter how big or small the size of your organization, you will always invest enough on securing certain aspects of your IT network. In many organizations, it starts with monitoring your network for vulnerabilities that may enter the network to access...
Importance of Logs and Log Management for IT Security
IT Security is the name of the game and no matter how big or small the size of your organization, you will always invest enough on securing certain aspects of your IT network. In many organizations, it starts with monitoring your network for vulnerabilities that may enter the network to access...
Alienvault Open Source SIEM (OSSIM) 3.1 - 'date_from' Multiple SQL Injections
source: https://www.securityfocus.com/bid/62790/info Open Source SIEM OSSIM is prone to multiple SQL-injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Open Sourc...
Alienvault Open Source SIEM (OSSIM) 3.1 - date_from Multiple SQL Injections
Alienvault Open Source SIEM OSSIM 3.1 - datefrom Multiple SQL Injections source: https://www.securityfocus.com/bid/62790/info Open Source SIEM OSSIM is prone to multiple SQL-injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data,...
[ThreatFactor NSIA v1.0.6] Network System Integrity Analysis
ThreatFactor NSIA is a website scanner that monitors websites in real-time in order to detect defacements, compliance violations, exploits, sensitive information disclosure and other issues. ThreatFactor detects issues remotely and therefore requires no software to install, does not introduce any...
What to Look For in a SIEM Solution
Security Information & Event Management SIEM has evolved over the years to become one of the most trusted and reliable solutions for log management, security, and compliance. The demand for SIEM tools is constantly increasing within network and IT security teams. This is due particularly to the...
What to Look For in a SIEM Solution
Security Information & Event Management SIEM has evolved over the years to become one of the most trusted and reliable solutions for log management, security, and compliance. The demand for SIEM tools is constantly increasing within network and IT security teams. This is due particularly to the...
Alienvault Open Source SIEM (OSSIM) - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61456/info Open Source SIEM OSSIM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...
Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities
Alienvault Open Source SIEM OSSIM 4.1 - Multiple SQL Injection Vulnerabilities Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013...
Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities
Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013 Timeline: --------- 17 Feb 2013: Vulnerability Reported to AlienVault 19 Feb 2013:...
Alienvault OSSIM SIEM 4.1 SQL Injection Vulnerability
Alienvault OSSIM open source SIEM version 4.1 suffers from multiple remote SQL injection vulnerabilities. Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reporte...