6107 matches found
Accruent LLC Maintenance Connection SQL Injection Vulnerability
Accruent LLC Maintenance Connection is a comprehensive work order management, preventive maintenance program and parts inventory solution. A security vulnerability exists in Accruent LLC Maintenance Connection versions 2021 and 2022.2, which stems from an SQL injection during emailing to the work...
PT-2023-14949
Name of the Vulnerable Software and Affected Versions Accruent LLC Maintenance Connection versions 2021 through 2022.2 Description The issue is related to a SQL injection vulnerability via the E-Mail to Work Order function. Recommendations For Accruent LLC Maintenance Connection versions 2021...
CISOs Are Stressed Out and It's Putting Companies at Risk
Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of how employee mental health impacts business outcomes. But for cybersecurity professionals, stress has always been a part of the job. A new survey revealed that one of the...
LastPass was undone by an attack on a remote employee
Last August, LastPass suffered a well publicised breach: Developer systems were compromised and source code stolen. This resulted in a second breach in November, which was revealed by LastPass in December. The company has now revealed that the individuals responsible for the attack also compromis...
5 reasons to adopt a Zero Trust security strategy for your business
Adopting Zero Trust security for your enterprise is no longer a wish-list item—it’s a business imperative. The workplace today extends to almost anywhere, anytime, from any device. Siloed, patchwork security solutions leave gaps that threat actors continue to exploit. A comprehensive Zero Trust...
5 reasons to adopt a Zero Trust security strategy for your business
Adopting Zero Trust security for your enterprise is no longer a wish-list item—it’s a business imperative. The workplace today extends to almost anywhere, anytime, from any device. Siloed, patchwork security solutions leave gaps that threat actors continue to exploit. A comprehensive Zero Trust...
How to work from home securely, the NSA way
People working remotely is no longer unusual, so the National Security Agency NSA has produced a short Best Practices PDF document detailing how remote workers can keep themselves safe from harm. In fact, the guide can also be applied to people using computers at home generally and is written in ...
PT-2025-18803
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential use-after-free issue has been identified in the Linux kernel, specifically in the intel-ish-hid ipc component. This issue occurs when a reset notify IPC message is received,...
PT-2025-40166
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mcp-2221 driver within the Linux kernel. The issue occurs when a device is plugged or unplugged without allowing the mcp init work function to...
PT-2025-53992
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists within the ksmbd module, specifically in the smb2 lock function. The issue occurs when the argv variable is not properly freed under certain conditions: when setup...
SUSE CVE-2017-9230
The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. Th...
SUSE CVE-2018-16875
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients a...
DEBIAN-CVE-2023-23946
Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to git apply, a path outside the working tree can be overwritten as the user who is running git apply. A...
Learn what an AI-driven future means for cybersecurity at Microsoft Secure
Maintaining security across today’s vast digital ecosystem is a team effort. AI and machine learning have helped to detect threats quickly and respond effectively. Yet we all know that the best defense still requires human wisdom and experience. From a frontline security operations admin to the...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
Design/Logic Flaw
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-48085: Improper Neutralization of Input During Web Page Generation
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
