Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
The Edge Cartoon Contest: You Better Watch Out ...
Newest First  |  Oldest First  |  Threaded View
kiloflash104
50%
50%
kiloflash104,
User Rank: Apprentice
12/30/2019 | 6:23:15 PM
Twinkling Tailgater
"This way I'll catch Rudolph if he tries to tailgate Santa."
PLRAMOS
50%
50%
PLRAMOS,
User Rank: Apprentice
12/23/2019 | 9:56:09 AM
Acceptable Use
Did you remember to send Santa our Privacy Policy and Liability Release Form?
GreyW01f
0%
100%
GreyW01f,
User Rank: Apprentice
12/11/2019 | 11:16:15 AM
Re: The Cameras Were Hung
The security cameras indicate a Santa crack...in the firewall.
matthewkmiller
100%
0%
matthewkmiller,
User Rank: Strategist
12/6/2019 | 12:47:50 PM
The Cameras Were Hung
The cameras were hung by the chimney with care, in the hopes that St. Nicholas soon would be there.
PaulGG4
0%
100%
PaulGG4,
User Rank: Strategist
12/5/2019 | 6:35:36 AM
Caption
THIS is how you plan to shine a light on Santa's cookie gobbling?


Why Vulnerable Code Is Shipped Knowingly
Chris Eng, Chief Research Officer, Veracode,  11/30/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: I think the boss is bing watching '70s TV shows again!
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-12524
PUBLISHED: 2020-12-02
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
CVE-2020-14369
PUBLISHED: 2020-12-02
This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash file ...
CVE-2020-25638
PUBLISHED: 2020-12-02
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized informat...
CVE-2020-28272
PUBLISHED: 2020-12-02
Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service and may lead to remote code execution.
CVE-2020-28273
PUBLISHED: 2020-12-02
Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.