PT-2020-1799

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to incorrect handling of file operations in the Work Folder Service of Windows operating systems. It allows an attacker to potentially elevate their privileges using a...

Unifying security policy across all mobile form-factors with Wandera and Microsoft

The way we work is evolving—technology enables more effective employees by helping them to be productive where and when they choose. Businesses have also been enjoying the productivity benefits of an always-on and always-connected workforce. While new business applications and device form-factors...

The vulnerability of the mobile application—the SAP WorkManager diagnostic application and the SAP InventoryManager inventory management application—is related to access control deficiencies, allowing an intruder to trigger a service failure.

The vulnerability of the SAP Work Manager mobile application, which is used for equipment diagnostics, and the SAP Inventory Manager application, which is used for inventory management, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause...

Oracle E-Business Suite SQL Injection (CVE-2019-2633; CVE-2019-2638)

An SQL vulnerability exists in the Work In Process component of Oracle E-Business Suite. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements with the privileges of the APPS database user...

Zero Trust Access: Santa Claus Wasn't the Only One Working Christmas Eve

The days from Christmas Eve to New Year's Day are filled with celebrations. Many companies shut down and encourage their employees to take vacations. However, a sample of data comparing an average work week around the holiday, shows the idea of "downtime" isn't exactly accurate. In fact, many use...

work-centric.com Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting work-centric.com website and its users. Following...

CVE-2020-6638

Grin through 2.1.1 has Insufficient Validation...

Microsoft Word fails to launch as a published app with Error: "Word could not create the work file. Check the temp environment variable"

Microsoft Word fails to launch as a published app. Error: "Word could not create the work file. Check the temp environment variable". But Microsoft Word launches properly within a published Desktop session...

Rethinking cyber scenarios—learning (and training) as you defend

In two recent posts I discussed with Circadence the increasing importance of gamification for cybersecurity learning and how to get started as a practitioner while being supported by an enterprise learning officer or security team lead. In this third and final post in the series, Keenan and I...

[SECURITY] [DSA 4592-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4592-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2019 https://www.debian.org/security/faq -...

CVE-2019-19748

The Work Time Calendar app before 4.7.1 for Jira allows XSS...

Cross site scripting

The Work Time Calendar app before 4.7.1 for Jira allows XSS...

CVE-2019-19748

The Work Time Calendar app before 4.7.1 for Jira allows XSS...

CVE-2019-19748

The CVE-2019-19748 entry concerns the Work Time Calendar app for Jira, vulnerable before version 4.7.1 due to a lack of proper validation of client-side data in the web application, enabling cross-site scripting (XSS). Impact is a browser-based code execution vulnerability on affected Jira deploy...

Atlassian Jira Work Time Calendar app cross-site scripting vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage all types of issues and defects in the workplace.Work Time Calendar app is one of the work planning applications used in it. A cross-site scripting vulnerability exists in...

PT-2019-15946

Name of the Vulnerable Software and Affected Versions Work Time Calendar app for Jira versions prior to 4.7.1 Description The issue allows for XSS, which can be exploited by attackers. Recommendations For versions prior to 4.7.1, update to version 4.7.1 or later to resolve the issue...

CVE-2019-19748: Improper Neutralization of Input During Web Page Generation

The Work Time Calendar app before 4.7.1 for Jira allows XSS...

DEBIAN-CVE-2019-19377

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfsqueuework in fs/btrfs/async-thread.c...

UBUNTU-CVE-2019-19377

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfsqueuework in fs/btrfs/async-thread.c...

Rethinking cyber learning—consider gamification

As promised, I’m back with a follow-up to my recent post, Rethinking how we learn security, on how we need modernize the learning experience for cybersecurity professionals by gamifying training to make learning fun. Some of you may have attended the recent Microsoft Ignite events in Orlando and...