|
Il servizio analizza un log di richieste DNS e identifica se all’interno sono stati risolti dei nomi a dominio che... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Un’ontologia rappresenta una risorsa per organizzare la conoscenza di un dominio in maniera più dettagliata attraverso... |
Servizio Rilevazione Malware. Il servizio permette di rilevare comportamenti malevoli in file (ad esempio, eseguibili o... |
| Published | Description | |
|---|---|---|
| CVE-2021-21341 |
23-03-2021 00:15:00 |
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. |
| CVE-2021-21347 |
23-03-2021 00:15:00 |
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. |
| CVE-2021-21348 |
23-03-2021 00:15:00 |
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. |
| CVE-2021-21344 |
23-03-2021 00:15:00 |
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. |
| CVE-2021-25918 |
22-03-2021 20:15:00 |
In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly. A highly privileged attacker could inject arbitrary code into input fields when creating a new user. |
| Date | Title | Platform | Author |
|---|---|---|---|
|
19-03-2021 |
SOYAL 701 Client 9.0.1 - Insecure Permissions | windows | LiquidWorm |
|
19-03-2021 |
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated) | hardware | LiquidWorm |
|
19-03-2021 |
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution | hardware | LiquidWorm |
|
19-03-2021 |
Plone CMS 5.2.3 - 'Title' Stored XSS | multiple | Piyush Patil |
|
19-03-2021 |
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated) | hardware | LiquidWorm |
| Published | Title | URL |
|---|---|---|
| 14-04-2021 | Sanate vulnerabilità su Chrome (AL02/210414/CSIRT-ITA) | CERT LINK |
| 12-04-2021 | La Settimana Cibernetica del 11 aprile 2021 | CERT LINK |
| 12-04-2021 | Phishing Aruba con riferimenti a Banca Sella (AL01/210412/CSIRT-ITA) | CERT LINK |
| 08-04-2021 | Vulnerabilità in prodotti Cisco non più supportati (EOL) (AL01/210408/CSIRT-ITA) | CERT LINK |
| 07-04-2021 | Phishing a tema Aruba (AL01/210407/CSIRT-ITA) | CERT LINK |
Italiano
English