MG Strategy+ - KasperskyCybermap Kaspersky

MG Strategy+

Cybersecurity Data Services

Join Now-Sign Up
Log In

Tag : Kaspersky

Cybermap Kaspersky

Kaspersky Cybermap

Editor Paper Extracts
Editor Picks Articles
Editor Picks Maps
Editor Picks Reports
MGS+ EPCM Workgroup
MGS+ ICS Workgroup
MGS+ Operational Efficiencies Workgroup
MGS+ Partners
Uncategorized

001 MGS Alerts Advisories

88.00133
Modified (6)Adware/Autoins!AndroidAdware/Dowgin!AndroidAdware/MobiDash!AndroidAdware/Secapk!AndroidRiskware/Application!AndroidRiskware/SmsReg!Android ]]> ... read more
ESB-2021.2634 – [UNIX/Linux][Ubuntu] openCryptoki: Reduced security – Unknown/unspecified
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2634 USN-5031-1: openCryptoki vulnerability 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: openCryptoki Publisher: Ubuntu Operating ... read more
ESB-2021.2633 – [Ubuntu] libdbi-perl: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2633 USN-5030-1: Perl DBI module vulnerabilities 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: libdbi-perl Publisher: ... read more
ESB-2021.2635 – [Ubuntu] PEAR: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2635 USN-5027-2: PEAR vulnerability 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: PEAR Publisher: Ubuntu Operating ... read more
NA – CVE-2021-36804 – Akaunting version 2.1.12 and earlier suffers…
Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy password reset requests through a running Akaunting instance, if that ... read more
NA – CVE-2021-36801 – Akaunting version 2.1.12 and earlier suffers…
Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies[0]. This issue was fixed in version 2.1.13 of the product. ... read more
NA – CVE-2021-36802 – Akaunting version 2.1.12 and earlier suffers…
Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'locale' variable and sending it in an otherwise normal HTTP POST ... read more
NA – CVE-2021-3539 – EspoCRM 6.1.6 and prior suffers from a…
EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product. ... read more
NA – CVE-2021-36805 – Akaunting version 2.1.12 and earlier suffers…
Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice processing component of the application. This issue was fixed ... read more
NA – CVE-2021-31869 – Pimcore AdminBundle version 6.8.0 and earlier…
Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product. ... read more
NA – CVE-2021-36803 – Akaunting version 2.1.12 and earlier suffers…
Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 ... read more
NA – CVE-2021-36800 – Akaunting version 2.1.12 and earlier suffers…
Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /{company_id}/sales/invoices/{invoice_id} with an ... read more
NA – CVE-2021-31867 – Pimcore Customer Data Framework version 3.0.0…
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the ... read more
88.00132
Newly Added (1)Adware/Cooguo!AndroidModified (17)Adware/AdsWo!AndroidAdware/Agent!AndroidAdware/Domob!AndroidAdware/Feiad!AndroidAdware/Fictus!AndroidAdware/Jumiad!AndroidAdware/Kuguo!AndroidAdware/MobiDash!AndroidAdware/Notifyer!AndroidAdware/SMSreg!AndroidAdware/SpyMob!AndroidAdware/Waps!AndroidAndroid/Agent.HGM!trAndroid/SmsThief.BTJ!trRiskware/Agent!AndroidRiskware/Application!AndroidRiskware/Badpac!Android ]]> ... read more
88.00131
Newly Added (1)Android/FakeFox.A!trModified (14)Adware/Agent!AndroidAdware/Dnotua!AndroidAdware/Dowgin!AndroidAdware/Kuguo!AndroidAdware/LeadBolt!AndroidAdware/MobiDash!AndroidAdware/Notifyer!AndroidAdware/Secapk!AndroidAdware/Styricka!AndroidAdware/Waps!AndroidAndroid/Agent.IMA!trAndroid/Agent.RZ!trRiskware/Agent!AndroidRiskware/MimobSMS!Android ]]> ... read more
ESB-2021.2631 – [Cisco] Cisco Network Services Orchestrator (NSO): Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2631 Cisco Network Services Orchestrator CLI Secure Shell Server Privilege Escalation Vulnerability 5 August 2021 =========================================================================== AusCERT Security ... read more
ESB-2021.2629 – [Cisco] Cisco Connected Mobile Experiences (CMX): Reduced security – Existing account
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2629 Cisco Connected Mobile Experiences Strong Authentication Requirements Enforcement Bypass 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary ... read more
ESB-2021.2630 – [Cisco] Cisco Evolved Programmable Network Manager (EPNM): Access confidential data – Existing account
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2630 Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary ... read more
ESB-2021.2632 – [Cisco] Cisco ConfD: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2632 ConfD CLI Secure Shell Server Privilege Escalation Vulnerability 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
ESB-2021.2628 – [Win][Cisco] Cisco Packet Tracer for Windows: Execute arbitrary code/commands – Existing account
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2628 Cisco Packet Tracer for Windows DLL Injection Vulnerability 5 August 2021 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by denial of service vulnerability in Java SE (CVE-2020-2654)
IBM Security Privileged Identity Manager has addressed a denial of service vulnerability in Java SE. CVE(s): CVE-2020-2654 Affected product(s) and affected version(s): Affected Product(s) Version(s) ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2019-12450)
IBM Security Privileged Identity Manager has addressed an issue for dnsmasq as follows. CVE(s): CVE-2019-14834 Affected product(s) and affected version(s): Affected Product(s) Version(s) ISPIM 2.1.1 ... read more
Security Bulletin: IBM Integration Bus and IBM App Connect Enterprise v11 are affected by vulnerabilities in Node.js (CVE-2021-3450, CVE-2021-3449)
IBM Integration Bus & IBM App Connect Enterprise V11 ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. CVE(s): ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2019-12450)
IBM Security Privileged Identity Manager has addressed an issue for glib2 as follows. CVE(s): CVE-2019-12450 Affected product(s) and affected version(s): Affected Product(s) Version(s) ISPIM 2.1.1 ... read more
Security Bulletin: IBM® Db2® is vulnerable to an information disclosure (CVE-2021-20579)
IBM® Db2® is vulnerable to an information disclosure as it could allow a user who can create a view or inline SQL function to obtain sensitive information when AUTO_REVAL ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by sensitive information exposure vulnerability in IBM Java SE (CVE-2020-14781)
IBM Security Privileged Identity Manager has addressed a sensitive information exposure vulnerability in Java SE. CVE(s): CVE-2020-14781 Affected product(s) and affected version(s): Affected Product(s) Version(s) ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by vulnerability in IBM SDK, Java Technology Edition Quarterly CPU – Oct 2020
IBM Security Privileged Identity Manager has addressed several vulnerabilities in Java SE. CVE(s): CVE-2020-14779 , CVE-2020-14792 , CVE-2020-14796 , CVE-2020-14797 , CVE-2020-14798 ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by vulnerability in CVE-2020-14782 (deferred from Oracle Oct 2020 CPU for Java 8)
IBM Security Privileged Identity Manager has addressed a command execution vulnerability in Java SE related to the Libraries component CVE(s): CVE-2020-14782 Affected product(s) and affected ... read more
IBM Director 3.1.1 up to 5.20.3 CIMListener input validation
A vulnerability classified as problematic was found in IBM Director 3.1.1 up to 5.20.3. Affected by this vulnerability is an unknown code of the file CIMListener. There is no information ... read more
88.00130
Modified (6)Adware/Dowgin!AndroidAdware/Kuguo!AndroidAdware/MobiDash!AndroidAdware/Waps!AndroidRiskware/Application!AndroidRiskware/ScamApp!Android ]]> ... read more
ESB-2021.2626 – [Cisco] Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2626 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities 5 August 2021 ... read more
ESB-2021.1171.3 – UPDATE [Cisco] Cisco Small Business RV Series Routers: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.1171.3 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities 5 August 2021 =========================================================================== AusCERT Security ... read more
ESB-2021.2627 – [Cisco] Cisco Small Business RV160 and RV260 Series VPN Routers: Execute arbitrary code/commands – Remote/unauthenticated
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2021.2627 Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability 5 August 2021 =========================================================================== ... read more
Security Bulletin: IBM® Db2® is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. (CVE-2021-29703)
IBM® Db2® is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. CVE(s): CVE-2021-29703 Affected product(s) and ... read more
Security Bulletin: IBM Security Privileged Identity Manager vulnerable to local command execution vulnerability (CVE-2020-15862)
IBM Security Privileged Identity Manager has addressed the following vulnerability in net-SNMP component used. CVE(s): CVE-2020-15862 Affected product(s) and affected version(s): Affected Product(s) Version(s) ISPIM 2.0.2 ... read more
Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.
Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. CVE(s): CVE-2021-3449 Affected product(s) and affected version(s): Affected Product(s) ... read more
Security Bulletin: IBM Integration Bus & IBM App Connect Enterprise V11 are affected by vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)
IBM Integration Bus & IBM App Connect Enterprise V11 ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. CVE(s): ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by a security vulnerability
IBM Security Privileged Identity Manager has addressed the following security vulnerability. CVE(s): CVE-2016-3616 Affected product(s) and affected version(s): Affected Product(s) Version(s) ISPIM 2.1.1 Refer to ... read more
Security Bulletin: The PowerVM Platform KeyStore functionality can be compromised if an attacker gains service access to the FSP
An attacker that gains service access to the FSP can locate and through a series of service procedures decrypt data contained in the Platform KeyStore CVE(s): ... read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2020-25684, CVE-2020-25685, CVE-2020-25686)
IBM Security Privileged Identity Manager has addressed issues for dnsmasq as follows. CVE(s): CVE-2020-25684, CVE-2020-25685, CVE-2020-25686 Affected product(s) and affected version(s): Affected Product(s) Version(s) ... read more
Security Bulletin: IBM Integration Bus & IBM App Connect Enterprise V11 are affected by vulnerabilities in Node.js (CVE-2021-27290)
IBM Integration Bus & IBM App Connect Enterprise V11 ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. CVE(s): ... read more
Security Bulletin: IBM Integration Bus and IBM App Connect Enterprise v11 are affected by vulnerabilities in Node.js (CVE-2021-23362)
IBM Integration Bus & IBM App Connect Enterprise V11 ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. CVE(s): ... read more
Security Bulletin: A WAS Liberty Java vunerability affects IBM Watson™ Speech Services
A vulnerability exists in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security), that affects IBM Watson Speech Services . CVE(s): CVE-2020-2773 ... read more
CVE-2021-31867
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was ... read more
CVE-2021-31869
Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product. ... read more
CVE-2021-36801
Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies[0]. This issue was fixed in version 2.1.13 of the product. ... read more
CVE-2021-36805
Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice processing component of the application. This issue was fixed in version ... read more
CVE-2021-36804
Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy password reset requests through a running Akaunting instance, if that attacker knows the ... read more
CVE-2021-36802
Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'locale' variable and sending it in an otherwise normal HTTP POST request. This ... read more
CVE-2021-3539
EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product. ... read more

MG Strategy+ Industrial Control Systems Group @2019

KAVI MGS iSTRACIN Platform v 02.25 Thursday, August 5, 2021

Disclaimer |
Terms |
Privacy
About-Services |
Blog-Reports
YouTube
Pinterest
LinkedIn
Twitter
LinkedIn
Twitter
Connect-Contact

Login

Login to integratus systems Exchange Platform Services

Forgot password?

Hello

Your Account Type is
Your Mail Id is
Your Username is

PDF Library Search

Security Briefing Search

Kaspersky Search

Reset Password

Reset Password

You have no permission to access this content