Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-20099PUBLISHED: 2022-06-27A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.
CVE-2022-2221PUBLISHED: 2022-06-27Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8.
CVE-2022-28622PUBLISHED: 2022-06-27A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.
CVE-2022-31034PUBLISHED: 2022-06-27
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in paramete...
CVE-2022-31035PUBLISHED: 2022-06-27
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site scripting (XSS) bug allowing a malicious user to inject a `javascript:` link in the UI. When clicked by a victim user, the script will execute with th...
User Rank: Ninja
7/6/2019 | 8:37:04 AM
This rulling is setting precedence in the IT market, this is the first I have seen where a government entity sues a private sector organization for not having a heightened or more secure level of securing data and access to various devices. The question I have would be what is the criteria for meeting security compliance. Based on the rulings and findings, will the EC (Electrotechnical Commission) have standards that meet the following:
This is good for the industry.
Todd