🕴 With Cloud the Norm, Insiders Are Everywhere — and Pose Greater Risk 🕴
📖 Read
via "Dark Reading".
After companies accelerated their adoption of cloud infrastructure, remote workers are now insiders and pose significant risks, and costs, to companies.📖 Read
via "Dark Reading".
Dark Reading
With Cloud the Norm, Insiders Are Everywhere — and Pose Greater Risk
After companies accelerated their adoption of cloud infrastructure, remote workers are now insiders and pose significant risks, and costs, to companies.
‼ CVE-2021-46065 ‼
📖 Read
via "National Vulnerability Database".
A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46088 ‼
📖 Read
via "National Vulnerability Database".
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46097 ‼
📖 Read
via "National Vulnerability Database".
Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46102 ‼
📖 Read
via "National Vulnerability Database".
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via "addr = (sym.st_value + refd_pa) as u64";📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46377 ‼
📖 Read
via "National Vulnerability Database".
There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser📖 Read
via "National Vulnerability Database".
🕴 Security Service Edge: 4 Core Tenets for Your SASE Journey 🕴
📖 Read
via "Dark Reading".
Historically we've held network conversations to address security problems, but that doesn't work in a cloud-based world.📖 Read
via "Dark Reading".
Dark Reading
Security Service Edge: 4 Core Tenets for Your SASE Journey
Historically we've held network conversations to address security problems, but that doesn't work in a cloud-based world.
‼ CVE-2021-46519 ‼
📖 Read
via "National Vulnerability Database".
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46507 ‼
📖 Read
via "National Vulnerability Database".
Jsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46505 ‼
📖 Read
via "National Vulnerability Database".
Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46515 ‼
📖 Read
via "National Vulnerability Database".
There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46517 ‼
📖 Read
via "National Vulnerability Database".
There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46495 ‼
📖 Read
via "National Vulnerability Database".
Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46511 ‼
📖 Read
via "National Vulnerability Database".
There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46549 ‼
📖 Read
via "National Vulnerability Database".
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46514 ‼
📖 Read
via "National Vulnerability Database".
There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46498 ‼
📖 Read
via "National Vulnerability Database".
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46497 ‼
📖 Read
via "National Vulnerability Database".
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src/jsiUserObj.c. This vulnerability can lead to a Denial of Service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46509 ‼
📖 Read
via "National Vulnerability Database".
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46523 ‼
📖 Read
via "National Vulnerability Database".
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46518 ‼
📖 Read
via "National Vulnerability Database".
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.📖 Read
via "National Vulnerability Database".