Security

Most Common Cyber Attacks You Must Be Aware of

Cyber attacks are one of the fastest-growing crimes in the cyber world. Cyberspace has become a major force in today’s

Common Vulnerabilities and Exposures Container Security cyber security news Security

NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

Overview : NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user. Security Advisory

Common Vulnerabilities and Exposures Container Security Security

Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small.

Overview : Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated

Common Vulnerabilities and Exposures Container Security Security

MongoDB Enterprise Kubernetes Operator 1.2.5

Overview : X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes

Common Vulnerabilities and Exposures Container Security Security

Multiple vulnerabilities in EasyBlocks IPv6

Overview : Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier

Common Vulnerabilities and Exposures Container Security Security solutions

Vulnerabilities Discovered in CIPAce Enterprise Platform

Overview : A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP

Common Vulnerabilities and Exposures Security solutions

Data Center Security Privilege Escalation

Overview : Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege

Container Security Security solutions

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers

Overview : PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server

Common Vulnerabilities and Exposures Container Security Security

security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144.

Overview : A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144.

Common Vulnerabilities and Exposures Security solutions

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula.

Overview : The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be

cyber security news Security solutions

PRTG-Network-Monitor-Information-Disclosure

Overview : PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server

Common Vulnerabilities and Exposures Security solutions

unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Overview : An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by

Common Vulnerabilities and Exposures Security

Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection

Overview : In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually

Common Vulnerabilities and Exposures cyber security news Professional Services Security solutions

Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys.

Overview : Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker

Common Vulnerabilities and Exposures Security solutions

CRLF/HTML entity injection with most recent version of PHPMyAdmin #16056

Overview : ** DISPUTED ** phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences

Common Vulnerabilities and Exposures Container Security Security

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.

Overview : In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.codeBeamer versions 9.5

Common Vulnerabilities and Exposures Security solutions

Kubelet component in versions 1.15.0-1.15.9

Overview : The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial

Common Vulnerabilities and Exposures Container Security Security solutions

NGINX Controller versions prior to 3.2.0,

Overview : In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can

Common Vulnerabilities and Exposures Security solutions

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

Overview : Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

cyber security news Security

ERPNext 11.1.47 allows blog?blog_category= Frame Injection.

Overview : ERPNext 11.1.47 allows blog?blog_category= Frame Injection. Affected Product(s) : Affected Software: ERPNext Affected Versions: 11.1.47 Vulnerability Details : CVE ID

Security Web Application Firewall

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71

Overview : Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions

Security

Security

Most Common Cyber Attacks You Must Be Aware of

NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small.

MongoDB Enterprise Kubernetes Operator 1.2.5

Multiple vulnerabilities in EasyBlocks IPv6

Vulnerabilities Discovered in CIPAce Enterprise Platform

Data Center Security Privilege Escalation

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers

security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144.

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula.

PRTG-Network-Monitor-Information-Disclosure

unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection

Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys.

CRLF/HTML entity injection with most recent version of PHPMyAdmin #16056

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.

Kubelet component in versions 1.15.0-1.15.9

NGINX Controller versions prior to 3.2.0,

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

ERPNext 11.1.47 allows blog?blog_category= Frame Injection.

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71

Windows security update and Sophos Antivirus – Boot Issue

Real-time locations of around 238,000 users exposed through an app

A 14 year old undetected bug found in WinRAR