Integrating API Security and WAF into K8s Kong API Gateway

> _Article by Jiju Jacob, Director of Engineering at Revenera_ [_This is an update of Mr. JacobsÂ’ 05/23 post in his _[_Medium blog_]()_. He is a Director of Engineering at Revenera. _[_Revenera_]( ...

Continue Reading
(RHSA-2022:6392) Important: RHV RHEL Host (ovirt-host) [ovirt-4.5.2] security update

The ovirt-host package consolidates host package requirements into a single meta package. Security Fix(es): * moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129) For more details a ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

CVE-2022-33941

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script exec ...

Continue Reading
CVE-2022-23451

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless ...

Continue Reading
CVE-2022-37144

The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and password can brutef ...

Continue Reading
Cisco Releases Security Patches for New Vulnerabilities Impacting Multiple Products

[![Cisco](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEjpfhi4ZL0bjNwBJYnlosw9F3zfuRAAy7dcTXxOFsqm-Ht9NDYSmfEbqTEjBOP8f_nWwk77hV0q-RaLEGfn8wr5_gajbTsw08fUfJqSkANIaAMyaKfJzrt_tFNuiofayq0ZSN ...

Continue Reading

CVSS3 - MEDIUM

Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.5

## Summary Cross reference list for security vulnerabilites fixed in IBM WebSphere Application Server 8.5.5.5, IBM WebSphere Application Server Hypervisor 8.5.5.5 and IBM HTTP Server 8.5.5.5 ## Vulne ...

Continue Reading

CVSS3 - LOW

CVSS2 - HIGH

Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.10

## Summary Cross reference list for security vulnerabilites fixed in IBM WebSphere Application Server 8.0.0.10, IBM WebSphere Application Server Hypervisor 8.0.0.10 and IBM HTTP Server 8.0.0.10 ## Vu ...

Continue Reading

CVSS3 - LOW

CVSS2 - HIGH

Back to Main

Subscribe for the latest news: