917 matches found
CVE-2020-10951
Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...
Code injection
Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...
CVE-2020-10951
Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...
CVE-2020-10951: Improper Restriction of Rendered UI Layers or Frames
Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...
PT-2020-12443 · Western Digital · Western Digital My Cloud Home +1
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home and ibi devices versions prior to 2.2.0 Description: The issue allows clickjacking on sign-in pages. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...
MS15-059: Description of the security update for Office 2013: June 9, 2015
MS15-059: Description of the security update for Office 2013: June 9, 2015 INTRODUCTION Microsoft has released security bulletin MS15-059. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:http://www.microsoft.com/security/pc-security/updates.aspx...
Alternative ways for security professionals and IT to achieve modern security controls in today’s unique remote work scenarios
With the bulk of end users now working remotely, legacy network architectures that route all remote traffic through a central corporate network are suddenly under enormous strain. The result can be poorer performance, productivity, and user experience. Many organizations are now rethinking their...
March 17, 2020—KB4541331 (OS Build 17763.1131)
None None...
UBUNTU-CVE-2019-12428
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization...
PT-2020-9314
Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 6.8 through 11.11 Description: An issue allows users to bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. This issue is related ...
February 25, 2020—KB4537816 (OS Build 16299.1717)
None None...
January 23, 2020—KB4534308 (OS Build 17134.1276)
None None...
Design/Logic Flaw
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH SFTP interface. The vulnerability affects only certain SSH SFTP configurations, and is applicable only if the MySQL database is being used...
CVE-2019-18465: Missing Authentication for Critical Function
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH SFTP interface. The vulnerability affects only certain SSH SFTP configurations, and is applicable only if the MySQL database is being used...
PT-2019-15422
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions 11.1 through 11.1.2 Description A vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH SFTP interface. The issue affects only certain SSH SFTP configurations and is...
October 24, 2019—KB4522355 (OS Build 18362.449)
None None...
One simple action you can take to prevent 99.9 percent of attacks on your accounts
There are over 300 million fraudulent sign-in attempts to our cloud services every day. Cyberattacks aren’t slowing down, and it’s worth noting that many attacks have been successful without the use of advanced technology. All it takes is one compromised credential or one legacy application to...
Android Users Can Now Log in to Google Services Using Fingerprint
If you're using Chrome on Android, you can now sign-in to your Google account and some of the other Google services by simply using your fingerprint, instead of typing in your password every time. Google is rolling out a new feature, called "local user verification ," that allows you to log in to...
GitLab: Cross-site Scripting (XSS) - Stored in RDoc wiki pages
Summary When creating an RDoc wiki page it's possible to use a large number of html tags and attributes that are normally sanitized, when creating a linkable image of the format link For example it is possible to specify a class attribute when creating an image link: rdoc a will generate the...