All Posts by: Prophaze WAF

SAP Latest Security Patch released

Overview : Latest vulnerabilities discovered in SAP products Affected Product(s) : SAP Vulnerability Details : CVE ID : CVE-2019-0367 [CVE-2019-0367] Missing

Common Vulnerabilities and Exposures

Moxa EDR 810 Series vulnerabilities

Overview : Moxa EDR 810 Series Improper Input Validation and Improper Access Control vulnerabilities Affected Product(s) : EDR-810: All versions

Common Vulnerabilities and Exposures

FiberHome HG2201T Pre-Auth RCE

Overview : FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbitrary files. Affected Product(s) : FiberHome HG2201T Vulnerability

Web Application Firewall

vBulletin 5.5.4 allows Two SQL Injection Vulnerabilities

Overview : vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter. Affected Product(s) : vBulletin 5.5.4 Vulnerability

Web Application Firewall

SugarCRM security issues released

Overview : CVE-2019-17292 SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by an Admin

Common Vulnerabilities and Exposures

ArcSight Logger Security Vulnerability

Overview : ‘External Task is undefined’ & ‘Syntax error’ errors appear on browser console after a Logger report query object

Common Vulnerabilities and Exposures

WebSphere Application Server vulnerability

Overview : There is a potential information disclosure vulnerability in IBM WebSphere Application Server. Affected Product(s) : Liberty Version 9.0

Common Vulnerabilities and Exposures

IBM Security Guardium vulnerable to a privilege escalation

Overview : IBM Security Guardium has addressed the following vulnerability. Affected Product(s) : IBM Security Guardium 9.0 – 9.5 IBM

Common Vulnerabilities and Exposures

JetBrains announces vulnerabilities

Overview : The security vulnerabilities detected in JetBrains products as follows Affected Product(s) : JetBrains 2019.2.56594 JetBrains ReSharper installers for

Common Vulnerabilities and Exposures

Cisco announces vulnerabilities

Overview : Cisco Firepower Management Center Remote Code Execution Vulnerability CWE-20 / CVE-2019-12689 A vulnerability in the web-based management interface

Common Vulnerabilities and Exposures

IBM Security Directory Server vulnerabilities

Overview : Multiple security vulnerabilities have been fixed and delivered in IBM Security Directory Server. Affected Product(s) : IBM Security

Common Vulnerabilities and Exposures

XSS / SSRF hacks in SuiteCRM

Overview : SuiteCRM Lists Latest Updates of XSS / SSRF Vulnerabilities Affected Product(s) : SuiteCRM 7.11.x and 7.10.x before 7.11.8

Common Vulnerabilities and Exposures

JetBrains Security News

Overview : The security vulnerabilities detected in JetBrains products as follows Affected Product(s) : JetBrains YouTrack versions before 2019.1.52584. JetBrains

Common Vulnerabilities and Exposures

NETGEAR SRX5308 SQL Injection Vulnerability

Overview : NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a

Common Vulnerabilities and Exposures

IBM WebSphere could expose sensitive information

Overview : Multiple vulnerabilities in IBM WebSphere eXtreme Scale Client could expose sensitive information. Affected Product(s) : WebSphere eXtreme Scale

Common Vulnerabilities and Exposures

Dell EMC Integrated Data Protection Appliance Vulnerabilities

Overview : Integrated Data Protection Appliance 2.3 contains fixes for multiple security vulnerabilities that may potentially be exploited by malicious

Common Vulnerabilities and Exposures

Remote Code Execution in Exim from (4.92 through 4.92.2)

Overview : Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer

Common Vulnerabilities and Exposures

Hack through XML Files while using NSA Ghidra

Overview : NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files

Common Vulnerabilities and Exposures

Dell EMC ECS Authentication Vulnerability

Overview : Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated

Common Vulnerabilities and Exposures

phpBB CSRF Token Hijacking attack exposed

Overview : phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the

Common Vulnerabilities and Exposures

IBM MQ is vulnerable to a denial of service attack

Overview : A vulnerability was found in the clustering code that caused a memory leak. This could be exploited by

Common Vulnerabilities and Exposures

Latest Security vulnerabilities in Cisco products

Overview : Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability CWE-399/ CVE-2019-12646 A

Common Vulnerabilities and Exposures

Jenkins announces vulnerabilities

Overview : Stored XSS vulnerability in expandable textbox form control SECURITY-1498 / CVE-2019-10401 Jenkins form controls include an expandable textbox

Common Vulnerabilities and Exposures

User Credentials hacked in IBM Security Key Lifecycle Manager

Overview : IBM Security Key Lifecycle Manager 3.0 and 3.0.1 stores user credentials in plain in clear text which can