Aggregator

2024年11月19日，深瞳漏洞实验室监测到一则Palo Alto Networks PAN-OS组件存在身份验证绕过漏洞的信息，漏洞编号：CVE-2024-0012，漏洞威胁等级：高危。

Oekraïne heeft nieuwe luchtverdedigingssystemen ontvangen van Nederland. Die moeten het land helpen zich te verdedigen tegen Russische luchtaanvallen. De levering heeft een waarde van €88 miljoen, bekostigd door Nederland. Daarnaast zet Nederland verdere stappen in de ontwikkeling van drones voor Oekraïne. Dit betreft aanvalsdrones, mede als reactie op de Noord-Koreaanse betrokkenheid.

A vulnerability was found in GDPR Plugin up to 2.0.2 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2024-11069. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in GDPR Plugin up to 2.0.2 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-10388. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Sonaar MP3 Audio Player Plugin up to 5.8 on WordPress. This vulnerability affects the function sonaar_audioplayer of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-10268. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in SVG Block Plugin up to 1.1.24 on WordPress. This issue affects some unknown processing of the component SVG File Upload Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-11098. The attack may be initiated remotely. There is no exploit available.

И снова во всем виноват ИИ…

Хакеры деанонимизировали элиту спутникового наблюдения США.

近期，2024年国家网络安全宣传周“网络安全技术高峰论坛主论坛暨粤港澳大湾区网络安全大会”在广州成功举办。会上 […]

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Progress Kemp LoadMaster, Palo Alto Networks PAN-OS and Expedition bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the descriptions of the above vulnerabilities: CVE-2024-1212 is a Progress Kemp LoadMaster […]

A vulnerability, which was classified as very critical, has been found in ScriptLogic up to 4.13. This issue affects some unknown processing of the component Services. The manipulation leads to improper privilege management. The identification of this vulnerability is CVE-2003-1121. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in SSH Tectia Server 4.0.3/4.0.4 on Unix. This vulnerability affects unknown code of the component Password Change Plugin. The manipulation leads to information disclosure (Private Key). This vulnerability was named CVE-2003-1120. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in SETI@home Client 3.3/3.4/3.5/3.6/3.7. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2003-1118. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Nortel Succession Communication Server 2000. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Session Initiation Protocol. The manipulation as part of INVITE Message leads to memory corruption. This vulnerability is known as CVE-2003-1115. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Oracle E-Business Suite up to 10.7/11.0/11.5.8. It has been rated as critical. Affected by this issue is some unknown functionality of the component Report Review Agent. The manipulation leads to improper authentication. This vulnerability is handled as CVE-2003-1116. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in RealNetworks RealSystem Server and RealSystem Proxy 6.x/7.x/8.x. This affects an unknown part of the component URL Error Handler. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2003-1117. It is possible to initiate the attack remotely. There is no exploit available.

Belden announces new network and data infrastructure products designed for secure, high-quality performance in critical applications. Data orchestration & management Hirschmann EAGLE40-6M Train Firewalls meet the demands of railway rolling stock with industrial firewall capabilities and multiple industry-relevant certifications. Their robust design allows them to withstand moving trains while providing maximum data security by performing deep packet inspection of onboard rolling stock communication protocols. Hirschmann OpEdge-4D Industrial Edge Gateways feature hazardous location approvals and run … More →

The post Belden announces products designed to enhance data security appeared first on Help Net Security.

你可能错过的新鲜事The Game Awards 公布提名名单11 月 19 日凌晨，The Game Awards（TGA）公布提名名单。此前，TGA 发布公告，评选规则更新，包括 扩展包、新赛

A vulnerability has been found in Ingate Siparator up to 3.1.2 and classified as critical. This vulnerability affects unknown code of the component Session Initiation Protocol. The manipulation as part of INVITE Message leads to memory corruption. This vulnerability was named CVE-2003-1112. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IPTel SIP Express Router up to 0.8.9 and classified as critical. This issue affects some unknown processing of the component Session Initiation Protocol. The manipulation as part of INVITE Message leads to memory corruption. The identification of this vulnerability is CVE-2003-1113. The attack may be initiated remotely. There is no exploit available.