Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-21275PUBLISHED: 2021-01-25
The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged.
The problem has been fixed in commit f828dc6 by making use of Medi...
CVE-2021-21272PUBLISHED: 2021-01-25
ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module.
In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability.
The directory support feature allows the ...
CVE-2021-23901PUBLISHED: 2021-01-25
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML ...
CVE-2020-17532PUBLISHED: 2021-01-25When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution.
The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5
CVE-2020-12512PUBLISHED: 2021-01-22Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting
User Rank: Author
1/26/2016 | 10:56:30 PM
"The survey sample began with 10 telephone interviews, which were followed by a 30-question survey taken by 59 participants involved in quantifying losses and responding to breaches of sensitive information. Of those, 26 experienced true breaches and finished the survey questions."
So the n value is 26? That is far too small a sample to draw any conclusions from. For example:
"Well over half of the survey respondents (64%) reported that the breach they described did not receive media attention."
The percentage sounds significant but it's really only 16 or 17 people.