Month: diciembre 2020

Java SE vulnerability CVE-2018-3139 Security Advisory Security Advisory Description Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported ... More info: https://support.f5.com/csp/article/K65481741?utm_source=f5support&utm_medium=RSS

cURL vulnerability CVE-2019-5482 Security Advisory Security Advisory Description Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482) Impact An attacker ... More info: https://support.f5.com/csp/article/K41523201?utm_source=f5support&utm_medium=RSS

PostgreSQL vulnerability CVE-2020-25696 Security Advisory Security Advisory Description A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before ... More info: https://support.f5.com/csp/article/K72430453?utm_source=f5support&utm_medium=RSS

PostgreSQL vulnerability CVE-2020-25696 Security Advisory Security Advisory Description A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before ... More info: https://support.f5.com/csp/article/K72430453?utm_source=f5support&utm_medium=RSS

WordPress plugins are awesome and if you want your site to have a specific function, or add additional functionality, the chances are there is a plugin out there for it. If you’d like to learn more about what WordPress plugins are, refer to our WordPress plugins introduction. On the WordPress’s repository there are over 57,000 […] More info: https://www.wpwhitesecurity.com/choose-best-plugin/

WordPress plugins are awesome and if you want your site to have a specific function, or add additional functionality, the chances are there is a plugin out there for it. If you’d like to learn more about what WordPress plugins are, refer to our WordPress plugins introduction. On the WordPress’s repository there are over 57,000 […] More info: https://www.wpwhitesecurity.com/choose-best-plugin/

Apache Struts vulnerability CVE-2020-17530 Security Advisory Security Advisory Description Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code ... More info: https://support.f5.com/csp/article/K24608264?utm_source=f5support&utm_medium=RSS

Apache Struts vulnerability CVE-2020-17530 Security Advisory Security Advisory Description Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code ... More info: https://support.f5.com/csp/article/K24608264?utm_source=f5support&utm_medium=RSS

Earlier this week, we learned that SolarWinds, the largest provider of network management tools for government and enterprise organizations fell victim to a supply chain attack. This attack affected their Orion network management system. Reportedly, 18,000 enterprise and government customers installed malware that was digitally signed by a valid certificate as part of an update […] More info: https://www.wordfence.com/blog/2020/12/episode-99-solarwinds-supply-chain-attack-affects-government-and-fortune-500-businesses/

I’m pretty confused as to why there is so little written in the mainstream news on the scale and implications of this latest, one of many attacks on our network infrastructure by a state actor. Maybe it’s just not being … More info: https://300m.com/security/mostly-unrecognized-immense-scale-of-solarwinds-hack/