Log in to see all content. Some content is hidden to the public.
Can't find what you're looking for? Help us improve the search functionality by reporting the expected results.
1509 Results
Vulnerabilities in Various Suse Products in December 2022
Suse released multiple security updates in December for various Suse products.
High Vulnerability In Apache CXF before 3.5.5 and 3.4.10
Apache released an advisory to address a vulnerability in CXF before 3.5.5 and 3.4.10. An attacker could exploit this vulnerability to perform SSRF style attacks on webservices that take at least one parameter of any type. For a complete description of the vulnerabilities and affected systems go to CVE-2022-46364: Apache CXF SSRF Vulnerability. IT Security
Vulnerability in Netgear Products
Netgear has released a security advisory to address a vulnerability in Netgear products. An attacker could exploit this vulnerability to create a pre-authentication buffer overflow. For a complete description of the vulnerabilities and affected systems go to Security Advisory for Pre-Authentication Buffer Overflow on Some Routers, PSV-2019-0208. IT Security
Vulnerabilities in Rockwell Automation Controllers
CISA has released advisories to address vulnerabilities in Rockwell Automation Controllers. An attacker could exploit these vulnerabilities to perform remote code execution or launch a denial-of-service (Dos) attack. For a complete description of the vulnerabilities and affected systems go to ICS-Cert Advisories. IT Security
Dec 2022: Phishing Campaign Distributing Christmas Bonus-Themed Lure
Threat Alert: What to Watch For Cybercriminals have launched a series of phishing attacks using the promise of a paid Christmas bonus as a lure.
Dec 2022: Scammers Tampering Physical Gift Cards at Retailers
Threat Alert: What You Need to Know Scammers are tampering with physical gift cards in retail store locations.
Dec 2022: Microsoft OneDrive and QR Codes Used in Phishing Campaign
Threat Alert: What to Watch For Recent email-based attacks have used compromised Microsoft OneDrive accounts to send phishing emails. These emails encourage recipients to click a link to view a shared document. The OneDrive links lead targets to shared PDF documents containing quick response (QR) codes.
High Vulnerability In Apache Camel
Mandiant reported a vulnerability in Apache Camel. The camel-ldap component allows LDAP Injection when using the filter option.
Critical and Moderately Critical Vulnerabilities in Drupal
Drupal has released security updates to address Moderately Critical and Critical vulnerabilities in impacting Drupal. An attacker could exploit these vulnerabilities to access sensitive information and remotely execute code. For a complete description of the vulnerabilities and affected systems go to Drupal Security Advisories. IT Security
Vulnerabilities in Multiple Versions of Samba
The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit this vulnerability to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Samba Security Releases. IT Security Read more about IT Security service offerings.