Cloud Security Alliance News Clipping Site

Tag: path traversal

  • Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability CVE-2021-41277 Metabase GeoJSON API Local…

  • Bulletins: Vulnerability Summary for the Week of October 28, 2024

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/bulletins/sb24-309 Source: Bulletins Title: Vulnerability Summary for the Week of October 28, 2024 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info acnoo — flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API:…

  • Hacker News: Graph Databases for Crime-Fighting: How Memgraph Maps and Analyzes Criminal

    —

    by

    system automation
    in

    Source URL: https://memgraph.com/blog/graph-databases-crime-fighting-memgraph-criminal-networks Source: Hacker News Title: Graph Databases for Crime-Fighting: How Memgraph Maps and Analyzes Criminal Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the use of graph databases, specifically Memgraph, in crime-fighting and intelligence operations. It emphasizes how these databases excel at uncovering complex relationships between various entities, ultimately…

  • The Register: Ivanti patches exploited admin command execution flaw

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/09/20/patch_up_ivanti_fixes_exploited/ Source: The Register Title: Ivanti patches exploited admin command execution flaw Feedly Summary: Fears over chained attacks affecting EOL product The US Cybersecurity and Infrastructure Security Agency (CISA) just added the latest Ivanti weakness to its Known Exploited Vulnerability (KEV) catalog, a situation sure to annoy some – given that it’s yet…