Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-27409PUBLISHED: 2020-12-04OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.
CVE-2020-27408PUBLISHED: 2020-12-04OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.
CVE-2020-27765PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause ot...
CVE-2020-27766PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, b...
CVE-2020-27767PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application avai...
Latest Comment: Honestly, I find it much less distracting than Windows 10 pop-up messages.
2021 Top Enterprise IT TrendsWe've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
The Malware Threat Landscape
Download this report to learn about the real makeup of online threats, as reported by the defenders who see them every day.
Tweet This
0 Comments
User Rank: Strategist
5/24/2017 | 10:46:02 AM
People. Don't. Care. Sure, we are supposed to *make* them care, but they don't. We help those on the fence to teeter over in favor of caution, but there will always be that population who is clearly on the other side of the fence, and not interested in taking those steps. They want to open every email, repost every Facebook "news" article, download whatever tools they feel they need to use, whenever they feel like it, and make their passwords easy to remember and quick to type.
Now, more than ever, I believe that technical controls are king, and security awareness is a borderline waste of time.
Borderlilne.