Aggregator

CVE-2022-23689 | Aruba Networks ArubaOS-CX Switches LLDP Service/Management Plane resource consumption (ARUBA-PSA-2022-012)(link is external)

Vuldb Updates
3 months ago
A vulnerability, which was classified as critical, has been found in Aruba Networks ArubaOS-CX Switches. Affected by this issue is some unknown functionality of the component LLDP Service/Management Plane. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2022-23689. Access to the local network is required for this attack. There is no exploit available.
vuldb.com

CVE-2022-31414 | D-Link DIR-1960 1.11 HTTP prog.cgi denial of service(link is external)

Vuldb Updates
3 months ago
A vulnerability, which was classified as problematic, has been found in D-Link DIR-1960 1.11. Affected by this issue is some unknown functionality of the file prog.cgi of the component HTTP Handler. The manipulation leads to denial of service. This vulnerability is handled as CVE-2022-31414. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

Make Your Team Capable with Advanced NHIDR(link is external)

Security Boulevard
3 months ago

Are You Leveraging NHIDR Capabilities for Advanced Cybersecurity? Managing Non-Human Identities (NHIs) and Secrets Security is not only a critical factor but also a cornerstone. With cyber threats become increasingly sophisticated, isn’t it time your team upgraded its capabilities with advanced NHIDR? NHIs, the machine identities used in cybersecurity, have a pivotal role in securing […]

The post Make Your Team Capable with Advanced NHIDR appeared first on Entro.

The post Make Your Team Capable with Advanced NHIDR appeared first on Security Boulevard.

Alison Mack

How Safe Are Your Secrets in the Cloud?(link is external)

Security Boulevard
3 months ago

Are Your Cloud Secrets as Secure as They Could Be? You’d likely agree that secrets management, particularly for Non-Human Identities (NHIs), is a critical aspect of cybersecurity. But how safe are your secrets stored in the cloud? NHIs, a term synonymous with machine identities, play a pivotal role in securing virtual assets. These are created […]

The post How Safe Are Your Secrets in the Cloud? appeared first on Entro.

The post How Safe Are Your Secrets in the Cloud? appeared first on Security Boulevard.

Alison Mack

Ensure Certainty in Your Cloud-Native Security(link is external)

Security Boulevard
3 months ago

How Secure is Your Cloud-Native Security? We can’t ignore the rising importance of non-human identities (NHIs) and Secrets Security Management in the field of cloud-native security. Defined by the unique interplay between “Secrets” and permissions, NHIs illustrate an innovative approach to cybersecurity where both machine identities and their respective access credentials are effectively managed. Boosting […]

The post Ensure Certainty in Your Cloud-Native Security appeared first on Entro.

The post Ensure Certainty in Your Cloud-Native Security appeared first on Security Boulevard.

Alison Mack

CVE-2023-0386 | Linux Kernel OverlayFS Subsystem fs/overlayfs/copy_up.c ovl_copy_up_one improper ownership management(link is external)

Vuldb Updates
3 months ago
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function ovl_copy_up_one of the file fs/overlayfs/copy_up.c of the component OverlayFS Subsystem. The manipulation leads to improper ownership management. This vulnerability is traded as CVE-2023-0386. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2020-26571 | OpenSC up to 0.21.x gemsafe GPK Smart Card Software Driver sc_pkcs15emu_gemsafeGPK_init stack-based overflow (Nessus ID 239948)(link is external)

Vuldb Updates
3 months ago
A vulnerability was found in OpenSC up to 0.21.x and classified as critical. This issue affects the function sc_pkcs15emu_gemsafeGPK_init of the component gemsafe GPK Smart Card Software Driver. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2020-26571. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-26572 | OpenSC up to 0.20.x TCOS Smart Card Software Driver tcos_decipher buffer overflow (Nessus ID 239948)(link is external)

Vuldb Updates
3 months ago
A vulnerability was found in OpenSC up to 0.20.x. It has been classified as critical. Affected is the function tcos_decipher of the component TCOS Smart Card Software Driver. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2020-26572. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-26570 | OpenSC up to 0.20.0 Oberthur Smart Card Software Driver sc_oberthur_read_file buffer overflow (Nessus ID 239948)(link is external)

Vuldb Updates
3 months ago
A vulnerability has been found in OpenSC up to 0.20.0 and classified as critical. This vulnerability affects the function sc_oberthur_read_file of the component Oberthur Smart Card Software Driver. The manipulation leads to buffer overflow. This vulnerability was named CVE-2020-26570. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-22218 | libssh2 1.10.0 _libssh2_packet_add out-of-bounds (DLA 3559-1 / Nessus ID 239951)(link is external)

Vuldb Updates
3 months ago
A vulnerability classified as problematic was found in libssh2 1.10.0. This vulnerability affects the function _libssh2_packet_add. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2020-22218. The attack needs to be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-32801 | ISC Kea up to 2.4.1/2.6.2/2.7.8 Hook Library code injection (Nessus ID 240099)(link is external)

Vuldb Updates
3 months ago
A vulnerability, which was classified as critical, has been found in ISC Kea up to 2.4.1/2.6.2/2.7.8. This issue affects some unknown processing of the component Hook Library Handler. The manipulation leads to code injection. The identification of this vulnerability is CVE-2025-32801. The attack may be initiated remotely. There is no exploit available.
vuldb.com

Managed ad