Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-25878PUBLISHED: 2022-05-27
The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype.
This vulnerability can occur in multiple ways:
1. by providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption ...
CVE-2021-27780PUBLISHED: 2022-05-27The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2021-27781PUBLISHED: 2022-05-27The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
CVE-2022-1897PUBLISHED: 2022-05-27Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-20666PUBLISHED: 2022-05-27
Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
These vulnerabilities are due to insufficient va...
User Rank: Apprentice
11/6/2019 | 5:41:34 PM
First, let's start with Kaspersky. Fact: this company was founded by a former KGB agent. Fact: this company has gone well beyond the scope of a cyber defense company. Ties to Russian intelligence are undisputed. There are dozens of articles on this subject. Lack of trust is the concern.
Second, China. This is a communist nation that is actively involved in well documented horrors against its people. There are hundreds of articles documenting contemporary atrocities, human rights violations, and crimes against humanity. In addition, there are numerous articles documenting evidence of intentionally designed and placed backdoors in various Chinese products as dictated by Chinese government mandates. Huawei is tip of the iceberg. Egregious violations of human rights and lack of trust are the concerns.