ATENTION‼ New - CVE-2013-4410
📖 Read
via "National Vulnerability Database".
ReviewBoard: has an access-control problem in REST API📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-5562
📖 Read
via "National Vulnerability Database".
rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-4576
📖 Read
via "National Vulnerability Database".
FreeBSD: Input Validation Flaw allows local users to gain elevated privileges📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-4526
📖 Read
via "National Vulnerability Database".
piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-4525
📖 Read
via "National Vulnerability Database".
piwigo has XSS in password.php📖 Read
via "National Vulnerability Database".
🕴 Leveraging the Cloud for Cyber Intelligence 🕴
📖 Read
via "Dark Reading: ".
How fusing output datasets and sharing information can create a real-time understanding of suspicious activity across your enterprise.📖 Read
via "Dark Reading: ".
Dark Reading
Cloud Security recent news | Dark Reading
Explore the latest news and expert commentary on Cloud Security, brought to you by the editors of Dark Reading
ATENTION‼ New - CVE-2013-2228
📖 Read
via "National Vulnerability Database".
SaltStack RSA Key Generation allows remote users to decrypt communications📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-2106
📖 Read
via "National Vulnerability Database".
webauth before 4.6.1 has authentication credential disclosure📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-2103
📖 Read
via "National Vulnerability Database".
OpenShift cartridge allows remote URL retrieval📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-2101
📖 Read
via "National Vulnerability Database".
Katello has multiple XSS issues in various entities📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-4525
📖 Read
via "National Vulnerability Database".
piwigo has XSS in password.php📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-4480
📖 Read
via "National Vulnerability Database".
mom creates world-writable pid files in /var/run📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-4428
📖 Read
via "National Vulnerability Database".
openslp: SLPIntersectStringList()' Function has a DoS vulnerability📖 Read
via "National Vulnerability Database".
🕴 Siemens Offers Workarounds for Newly Found PLC Vulnerability 🕴
📖 Read
via "Dark Reading: ".
An undocumented hardware-based special access feature recently found by researchers in Siemens' S7-1200 can be used by attackers to gain control of the industrial devices.📖 Read
via "Dark Reading: ".
Dark Reading
Siemens Offers Workarounds for Newly Found PLC Vulnerability
An undocumented hardware-based special access feature recently found by researchers in Siemens' S7-1200 can be used by attackers to gain control of the industrial devices.
❌ Critical Android Flaw Leads to ‘Permanent DoS’ ❌
📖 Read
via "Threatpost".
The December security update stomped out critical denial-of-service (DoS) and remote-code-execution (RCE) vulnerabilities in the Android operating system.📖 Read
via "Threatpost".
Threat Post
Critical Android Flaw Leads to ‘Permanent DoS’
The December security update stomped out critical denial-of-service (DoS) and remote-code-execution (RCE) vulnerabilities in the Android operating system.
ATENTION‼ New - CVE-2013-4486
📖 Read
via "National Vulnerability Database".
Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-4411
📖 Read
via "National Vulnerability Database".
Review Board: URL processing gives unauthorized users access to review lists📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-4235
📖 Read
via "National Vulnerability Database".
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees📖 Read
via "National Vulnerability Database".
🕴 Smith & Wesson Is Magecart's Latest Target 🕴
📖 Read
via "Dark Reading: ".
Researchers estimate the gun manufacturer's website was compromised sometime before Black Friday.📖 Read
via "Dark Reading: ".
Darkreading
Smith & Wesson Is Magecart's Latest Target
Researchers estimate the gun manufacturer's website was compromised sometime before Black Friday.
❌ Android Ups the Mobile Security Ante with Default TLS Encryption ❌
📖 Read
via "Threatpost".
More than 90 percent of Android apps running on the latest OS encrypt their traffic by default.📖 Read
via "Threatpost".
Threat Post
Android Ups the Mobile Security Ante with Default TLS Encryption
More than 90 percent of Android apps running on the latest OS encrypt their traffic by default.
🔐 Report highlights nation-state cyberthreats facing SMBs in 2020 🔐
📖 Read
via "Security on TechRepublic".
An increasing number of US executives expressed concern about the prevalence of threats coming from foreign powers.📖 Read
via "Security on TechRepublic".
TechRepublic
Report highlights nation-state cyberthreats facing SMBs in 2020
An increasing number of US executives expressed concern about the prevalence of threats coming from foreign powers.