Blog

BIG-IQ XSS vulnerability CVE-2021-23006 Security Advisory Security Advisory Description Undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerability. (CVE-2021-23006) Impact An ... More info: https://support.f5.com/csp/article/K30585021?utm_source=f5support&utm_medium=RSS

BIG-IP MPTCP vulnerability CVE-2021-23004 Security Advisory Security Advisory Description Multipath TCP (MPTCP) forwarding flows may be created on standard virtual servers without MPTCP enabled in ... More info: https://support.f5.com/csp/article/K31025212?utm_source=f5support&utm_medium=RSS

BIG-IP SNAT vulnerability CVE-2021-22998 Security Advisory Security Advisory Description SYN flood protection thresholds are not enforced in secure network address translation (SNAT) listeners. ( ... More info: https://support.f5.com/csp/article/K31934524?utm_source=f5support&utm_medium=RSS

BIG-IP TMM vulnerability CVE-2021-23000 Security Advisory Security Advisory Description If the tmm.http.rfc.enforcement with invalid host detection is enabled, a specific sequence of malicious ... More info: https://support.f5.com/csp/article/K34441555?utm_source=f5support&utm_medium=RSS

F5 TMUI XSS vulnerability CVE-2021-22994 Security Advisory Security Advisory Description Undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete ... More info: https://support.f5.com/csp/article/K66851119?utm_source=f5support&utm_medium=RSS

Side-channel processor vulnerability CVE-2018-3693 Security Advisory Security Advisory Description Systems with microprocessors utilizing speculative execution and branch prediction may allow ... More info: https://support.f5.com/csp/article/K54252492?utm_source=f5support&utm_medium=RSS

Today, March 8, 2021, the Wordfence Threat Intelligence team became aware of a critical 0-day in The Plus Addons for Elementor, a premium plugin that we estimate has over 30,000 installations. This vulnerability was reported this morning to WPScan by Seravo, a hosting company. The flaw makes it possible for attackers to create new administrative […] More info: https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/

This article covers our public notifications related to major security issues our clients and the WordPress community should know about. We are always focused on prevention and the mitigation of […] More info: https://pagely.com/blog/wordpress-security-updates-february-2021/

This article covers our public notifications related to major security issues our clients and the WordPress community should know about. We are always focused on prevention and the mitigation of […] More info: https://pagely.com/blog/wordpress-security-updates-february-2021/

Linux kernel vulnerability CVE-2019-18282 Security Advisory Security Advisory Description The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking ... More info: https://support.f5.com/csp/article/K32380005?utm_source=f5support&utm_medium=RSS