Aggregator

CVE-2024-31449 | Redis up to 7.2.5 deps/lua/src/lua_bit.c bit_tohex integer overflow (Nessus ID 208105)

Vuldb Updates
9 months 2 weeks ago
A vulnerability classified as problematic was found in Redis up to 7.2.5. This vulnerability affects the function bit_tohex of the file deps/lua/src/lua_bit.c. The manipulation leads to integer overflow. This vulnerability was named CVE-2024-31449. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-31228 | Redis up to 7.2.5 Pattern Matching src/util.c denial of service (Nessus ID 208105)

Vuldb Updates
9 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in Redis up to 7.2.5. Affected is an unknown function of the file src/util.c of the component Pattern Matching. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-31228. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Check Point 软件技术公司在 2024 年 Gartner® 端点防护平台魔力象限™ 报告中获评端点安全防护远见者

嘶吼
9 months 2 weeks ago

全球领先的云端 AI 网络安全平台解决方案提供商 CheckPoint® 软件科技有限公司（纳斯达克股票代码：CHKP）近日宣布，该公司在 2024 年 Gartner® 端点防护平台魔力象限™ 报告中被评为远见者。凭借灵活的部署选项和统一安全防护方法，Check Point Harmony Endpoint 正在塑造工作空间安全防护的未来，为各种规模的组织提供强大的个性化端点保护。

如今，企业面临着更复杂的以端点为目标的网络威胁。根据 Check Point Research 的报告，2024 年第二季度全球网络攻击次数增加了 30%。与此同时，企业还必须应对管理众多安全防护解决方案的复杂性。Check Point Harmony Endpoint 可通过提供强大的安全保护，帮助企业轻松化解这些挑战，其对新型恶意软件、勒索软件和零日攻击的拦截率高达 99.8%。它可跨各种设备和网络提供无缝的安全防护，帮助简化管理并降低运维成本。

对于我们的功能，国轩高科研究院副院长 Gary Li 评价道:“Check Point Harmony Endpoint 符合我们所有的标准，可帮助我们有效应对当前的网络安全风险。借助其自动检测和响应功能，我们的团队可轻松拦截攻击，保护用户和端点免受侵害。” 

Check Point 软件技术公司威胁防御副总裁 Ofir Israel 表示：“很高兴能够连续第二年获得 Gartner 的认可。我们致力于不断提升客户满意度并为客户提供全面的安全防护解决方案，以有效防御最新网络攻击。我们认为端点最容易受到攻击，因此不断推陈出新，以确保为各种规模的企业提供强大的安全保护。”
Harmony Endpoint 是一款强大而全面的端点安全防护解决方案，配备先进的 EPP、EDR 和 XDR 功能，能够保护远程工作者免受当今数字环境中复杂威胁的影响。Harmony Endpoint 是 Check Point Infinity 平台的一部分，后者是一个全面的平台，可跨数据中心、网络、云服务、分支机构和远程用户提供卓越的安全防护，并通过单个统一界面管理一切。

如欲免费下载 Gartner® 端点防护平台魔力象限™ 报告，请访问我们的网站或查看博文。


Check Point

CVE-2022-48790 | Linux Kernel up to 4.19.230/5.4.180/5.10.101/5.15.24/5.16.10 nvme use after free (Nessus ID 208672)

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 4.19.230/5.4.180/5.10.101/5.15.24/5.16.10. It has been rated as critical. Affected by this issue is some unknown functionality of the component nvme. The manipulation leads to use after free. This vulnerability is handled as CVE-2022-48790. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-48789 | Linux Kernel up to 5.4.180/5.10.101/5.15.24/5.16.10 nvme-tcp error_recovery use after free (Nessus ID 208672)

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 5.4.180/5.10.101/5.15.24/5.16.10. It has been declared as critical. Affected by this vulnerability is the function error_recovery of the component nvme-tcp. The manipulation leads to use after free. This vulnerability is known as CVE-2022-48789. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-48799 | Linux Kernel up to 5.16.9 perf perf_cgroup_switch iteration (Nessus ID 208672)

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 5.16.9. It has been rated as critical. Affected by this issue is the function perf_cgroup_switch of the component perf. The manipulation leads to excessive iteration. This vulnerability is handled as CVE-2022-48799. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-48911 | Linux Kernel up to 5.16.12 nf_queue sock_hold use after free (Nessus ID 208672)

Vuldb Updates
9 months 2 weeks ago
A vulnerability has been found in Linux Kernel up to 5.16.12 and classified as critical. Affected by this vulnerability is the function sock_hold of the component nf_queue. The manipulation leads to use after free. This vulnerability is known as CVE-2022-48911. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-48945 | Linux Kernel up to 6.1.1 vivid v4l2_rect_map_inside memory corruption (Nessus ID 208672)

Vuldb Updates
9 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.1. Affected by this issue is the function v4l2_rect_map_inside of the component vivid. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2022-48945. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-42010 | RoundCube up to 1.5.7/1.6.7 Cascading Style Sheet mod_css_styles information disclosure (Nessus ID 208677)

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in RoundCube up to 1.5.7/1.6.7. It has been declared as problematic. Affected by this vulnerability is the function mod_css_styles of the component Cascading Style Sheet Handler. The manipulation leads to information disclosure. This vulnerability is known as CVE-2024-42010. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-1292 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.6.3 Enterprise Infrastructure SEC os command injection (Nessus ID 208691)

Vuldb Updates
9 months 2 weeks ago
A vulnerability has been found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.6.3 and classified as very critical. Affected by this vulnerability is an unknown functionality of the component Enterprise Infrastructure SEC. The manipulation leads to os command injection. This vulnerability is known as CVE-2022-1292. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2022-1292 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Installer os command injection (Nessus ID 208691)

Vuldb Updates
9 months 2 weeks ago
A vulnerability classified as very critical has been found in Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.2.1. Affected is an unknown function of the component Installer. The manipulation leads to os command injection. This vulnerability is traded as CVE-2022-1292. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2024-47651 | Shilpi Computers Client Dashboard prior 9.7.0 API Endpoint parameter pollution (CIVN-2024-0313)

Vuldb Updates
9 months 2 weeks ago
A vulnerability classified as problematic has been found in Shilpi Computers Client Dashboard prior 9.7.0. Affected is an unknown function of the component API Endpoint. The manipulation leads to improper handling of extra parameters. This vulnerability is traded as CVE-2024-47651. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2024-20102 | MediaTek MT8893 WLAN Driver out-of-bounds (MSV-1601 / ALPS08998892)

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in MediaTek MT3605, MT6985, MT6989, MT6990, MT7927, MT8678, MT8796 and MT8893 and classified as problematic. Affected by this issue is some unknown functionality of the component WLAN Driver. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2024-20102. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Loki: horizontally-scalable, highly-available, multi-tenant log aggregation system

Penetration Testing Tools - Metepreter.org
9 months 2 weeks ago

Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost-effective and easy to operate. It does not index the contents...

The post Loki: horizontally-scalable, highly-available, multi-tenant log aggregation system appeared first on Penetration Testing Tools.

ddos

Managed ad