Skip to main content
Abstract art
Abstract art
Abstract art
Abstract art

For providers

3 Apr 2024
Riasztás

Cisco Nexus Dashboard Orchestrator Unauthorized Policy Actions Vulnerability

A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. 
 
This vulnerability is due to...

cisco.com
Read more
3 Apr 2024
Riasztás

Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability

A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files.

This vulnerability is due to an unauthenticated...

cisco.com
Read more
3 Apr 2024
Riasztás

Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device...

cisco.com
Read more
3 Apr 2024
Riasztás

Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an authenticated user of...
cisco.com
Read more
3 Apr 2024
Biztonsági szemle

Europe subjected to Mispadu trojan attacks

Organizations in Italy, Sweden, and Poland have been targeted by expanded attacks with the Mispadu banking trojan, also known as URSA, as part of an ongoing campaign that originally targeted financial, commercial, automotive manufacturing, and service entities, as well as law firms across Latin America, The Hacker News reports.
scmagazine.com
Read more
3 Apr 2024
Biztonsági szemle

Updated Microsoft Priva bolsters privacy management

Five new automated privacy management solutions have been added by Microsoft to its Priva service in a bid to bolster organizations' adherence to personal data privacy requirements, SiliconAngle reports.
scmagazine.com
Read more
3 Apr 2024
Biztonsági szemle

Novel anti-cookie theft feature in Chrome detailed

BleepingComputer reports that Google has been working on curbing browser cookie theft with the new Device Bound Session Credentials functionality in Chrome as it prepares to remove third-party cookies from the browser.
scmagazine.com
Read more
3 Apr 2024
Biztonsági szemle

Online xz utility backdoor scanning tool issued

Binarly has issued a free online tool that would facilitate scanning a newly discovered backdoor and maximum severity vulnerability in xz tools and libraries used by major Linux distributions, tracked as CVE-2024-3094, across Linux binaries amid significant security risks, according to Security Affairs.
scmagazine.com
Read more
3 Apr 2024
Biztonsági szemle

Arbitrary script injections possible with WP-Members plugin flaw

More than 60,000 WordPress sites with the WP-Members Membership Plugin could be compromised with arbitrary script injections due to a high-severity cross-site scripting vulnerability, tracked as CVE-2024-1852, reports SecurityWeek.
scmagazine.com
Read more
3 Apr 2024
Biztonsági szemle

Unified open source standards for EU Cyber Resilience Act compliance mulled

More stringent security controls under the European Union's Cyber Resilience Act have resulted in a new partnership between the Apache Software Foundation, OpenSSL Software Foundation, Eclipse Foundation, and four other open source foundations to consolidate their resources and best practices to establish unified open source standards and specifications that would strengthen the software supply chain when the law takes effect in 2027, according to TechCrunch.
scmagazine.com
Read more
Nyelv
Típus