Aruba ClearPass Policy Manager <= 6.x.x < 6.8.9-HF2 / 6.9.x < 6.9.9 / 6.10.x < 6.10.4 Multiple Vulnerabilities

The version of Aruba ClearPass Policy Manager installed on the remote host is prior or equal to 6.7, 6.8.9-HF2, 6.9.9, 6.10.4. It is, therefore, affected by multiple vulnerabilities as referenced in t ...

Continue Reading
Security Bulletin: Multiple vulnerabilities in Spring Framework affect SPSS Collaboration and Deployment Services

## Summary There are multiple vulnerabilities in Spring Framework used by SPSS Collaboration and Deployment Services. SPSS Collaboration and Deployment Services is affected but not classified as vulne ...

Continue Reading
RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.0] (RHSA-2022:4711)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4711 advisory. - nodejs-trim-off-newlines: ReDoS via str ...

Continue Reading
Stunner – Tool To Test And Exploit STUN, TURN And TURN Over TCP Servers

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTsQ7CgKUk7_l2k_Rh1p5HEnuaeZgrN4giz6Lgzsr0og-XOMrlydELJVFPGUtwR6Q_zsJ7C3JnPIZ7FoSBdeF-toiyesQAIIXBY4k03mrbdOKhDwrJUiW4rMLzlfmgPcipZWvIeU ...

Continue Reading
Improper socket reuse in Apache Tomcat

If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that ...

Continue Reading
GO-2021-0321

An attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because th ...

Continue Reading
(RHSA-2022:4711) Moderate: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update

The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a co ...

Continue Reading
CVE-2021-3690

buffer leak on incoming websocket PONG message may lead to DoSRead More ...

Continue Reading

Back to Main

Subscribe for the latest news: