788 matches found
The vulnerabilities of the Airflow MSSQL Provider and Airflow ODBC Provider, which are used in software for creating, monitoring, and orchestrating data processing scenarios, allow attackers to gain access to protected information.
The vulnerabilities of the Airflow MSSQL Provider and Airflow ODBC Provider, which are used in software for creating, monitoring, and orchestrating data processing scenarios, are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to gain access ...
The vulnerability of operating systems for managing cloud applications, such as Sealos, stems from deficiencies in authentication procedures. This allows attackers to escalate their privileges and gain full control over the application.
The vulnerability of operating systems for managing cloud applications related to Sealos stems from deficiencies in authentication procedures due to the use of Role-Based Access Control RBAC policies. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full...
MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?
MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...
MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?
MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...
2023 CWE Top 25 Most Dangerous Software Weaknesses
The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2023 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesseslink is external. The CWE Top 25 is calculated by analyzing...
The vulnerability of the Windows Authentication component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Authentication component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2023-3555 · Ibm · Ibm Robotic Process Automation
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6 IBM Robotic Process Automation versions 23.0.0 through 23.0.6 Description: The issue is related to weaknesses in the authentication procedure of the software. Exploitation of thi...
Dr. Active Directory vs. Mr. Exposed Attack Surface: Who'll Win This Fight?
Active Directory AD is among the oldest pieces of software still used in the production environment and can be found in most organizations today. This is despite the fact that its historical security gaps have never been amended. For example, because of its inability to apply any security measure...
PT-2023-2775 · Cisco · Cisco Dna Center
Name of the Vulnerable Software and Affected Versions: Cisco DNA Center Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the API of Cisco DNA Center Software. These vulnerabilities could allow an authenticated, remote attacker to read...
Industrial Cellular Routers at Risk: 11 New Vulnerabilities Expose OT Networks
Several security vulnerabilities have been disclosed in cloud management platforms associated with three industrial cellular router vendors that could expose operational technology OT networks to external attacks. The findings were presented by Israeli industrial cybersecurity firm OTORIO at the...
The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to bypass security restrictions and execute arbitrary commands.
The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands...
Why Chaos Engineering is a Good Stress Test Strategy
Learn about chaos engineering, a method of resilience testing that intentionally introduces “chaos” into a system to discover vulnerabilities and weaknesses that can be exploited by attackers...
PT-2023-2172 · Cisco · Cisco Prime Infrastructure +1
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface,...
Debian dla-3380 : firmware-adi - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3380 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3380-1 [email protected]...
The vulnerability of the collaboration data application for VMware Workspace ONE Content, related to authentication procedures that allow attackers to bypass the authentication process
The vulnerability of the collaboration data application for VMware Workspace ONE Content is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to bypass the authentication process...
The vulnerability of microprogrammed software in ZTE ZXvSTB TV devices, related to deficiencies in access control, allows attackers to delete arbitrary data.
The vulnerability of the microprogramming software in ZTE ZXvSTB TVs is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary data remotely...
QRExfiltrate - Tool That Allows You To Convert Any Binary File Into A QRcode Movie. The Data Can Then Be Reassembled Visually Allowing Exfiltration Of Data In Air Gapped Systems
This tool is a command line utility that allows you to convert any binary file into a QRcode GIF. The data can then be reassembled visually allowing exfiltration of data in air gapped systems. It was designed as a proof of concept to demonstrate weaknesses in DLP software; that is, the assumption...
The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a hacker to increase their privileges within the system.
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...
The vulnerability of the PCL6 Class Printer driver for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the PCL6 Class Printer driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Apache Groovy
Summary Vulnerabilities in Apache Groovy such as remote attacker executing arbitrary code on the system, allowing a local authenticated attacker to obtain sensitive information, may affect IBM Spectrum Control. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2015-3253...