Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-46873PUBLISHED: 2023-01-29
WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useles...
CVE-2023-0572PUBLISHED: 2023-01-29Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-24065PUBLISHED: 2023-01-29
NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload that is executed upon visiting the /users/2/1 page. This may allow attackers to steal Protected Health Information because the product is for ...
CVE-2023-0565PUBLISHED: 2023-01-29Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0566PUBLISHED: 2023-01-29Static Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.
User Rank: Strategist
6/7/2021 | 1:21:54 AM
Number 1 is age discrimination. This is a major issue that has been widely studied. It's real, it exists and it cripples companies who cry about security shortage when they reject older and highly qualified candidates. There are plenty of subject matter experts in this area who can testify to the veracity of what I just said.
Number 2 is the hiring skills of recruiters, H.R. and the hiring managers is at best, (sorry to say) mediocre. To do their job properly, they must spend 10x more time combing through resumes and picking up the phone to make a call than they presently do.
The talent is out there, you just have to invest the time to find it and you must open your mind to older, smart and experienced workers. If you do this, the shortage is greatly diminished.
Blessings,
Harry