Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
A vulnerability in GNU libc allows a Denial of Service attack.
Multiple vulnerabilities in GNU libc allow an attacker to execute arbitrary code, disclose sensitive information, manipulate data, cause a denial of …
GitLab prior to 19.1.8, 19.2.6, and 19.3.2 is affected by a vulnerability with a CVE identifier CVE-2026-85706.
JFrog Artifactory versions prior to 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, and 7.161.20 are vulnerable to CVE-2026-82329.
n8n versions prior to 1.123.76, 2.37.7, and 2.38.2 contain vulnerabilities.
ConnectWise ScreenConnect versions prior to 26.6.5 are affected by a vulnerability exploited in the wild via CVE-2026-84869.
Chef Automate Prior to 4.13.520 is vulnerable to a security vulnerability that could allow unauthorized access.
National Instruments SystemLink has improper access controls and stores sensitive information in cleartext.
GeoVision GV-LPC2011/LPC2211 Firmware version 1.13 contains vulnerabilities requiring updates.
GitLab CE/EE contains critical and high severity vulnerabilities that allow code execution and information disclosure.
Schneider Electric products have vulnerabilities allowing improper neutralization of special elements in OS commands.
Rclone is affected by multiple vulnerabilities with available PoC exploit code.
MongoDB Java Driver and Laravel MongoDB PHP components have vulnerabilities allowing heap use-after-free and query builder issues.
Consul and consul-template are vulnerable to authorization bypass and information disclosure issues.
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to cause a denial of service or disclose confidential information.
Remote attackers can exploit multiple vulnerabilities in Red Hat Enterprise Linux to cause denial of service or execute code.
A Linux Kernel vulnerability allows Denial of Service via exploitation.
A local attacker can exploit multiple vulnerabilities in Linux Kernel to cause memory corruption, expose kernel memory, or trigger denial of service.
Multiple vulnerabilities in the Linux Kernel allow attackers to cause a Denial of Service or perform other unspecified attacks.
Multiple vulnerabilities in OpenSSL allow an attacker to execute arbitrary code, bypass security controls, disclose confidential information, manipul…
Local attacker can exploit multiple vulnerabilities in Linux Kernel to cause Denial of Service.
Multiple vulnerabilities in the Linux Kernel allow an attacker to bypass security controls, manipulate or disclose data, or cause a denial of service.
Multiple vulnerabilities in the Linux Kernel allow an attacker to bypass security measures, manipulate or disclose data, or cause a denial of service.
An authenticated remote attacker can exploit a vulnerability in OpenSSL to cause a denial of service and disclose information.
Multiple vulnerabilities in JFrog Artifactory allow an attacker to bypass authentication, escalate privileges, impersonate users, disclose confidenti…
Multiple vulnerabilities in Google Android allow an attacker to gain elevated privileges, execute arbitrary code, disclose sensitive information, or …
A remote attacker can bypass security controls and cause a denial-of-service in the Linux Kernel.
Multiple vulnerabilities in the Linux Kernel allow a remote attacker to cause a Denial of Service.
Multiple vulnerabilities in the Linux Kernel allow an attacker to cause a denial of service or achieve unknown impacts.
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform a denial of service attack or cause unspecified effects.
Mikrotik RouterOS vulnerabilities allow information disclosure and potential remote code execution via exploited CVEs.
Multiple vulnerabilities in Linux Kernel allow denial of service or unspecified attack.
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially cause a denial of service, bypass security measures, or cause memory co…
Multiple vulnerabilities in Linux Kernel allow disclosure of confidential information, data manipulation, denial of service, or privilege escalation.
Multiple vulnerabilities in the Linux Kernel may allow an attacker to bypass security measures, cause a denial of service, or disclose sensitive info…
Multiple high-severity vulnerabilities in strongSwan, an open-source VPN software, require patching.
MongoDB products contain multiple vulnerabilities, including five high-severity issues.
MISP Project contains a high-severity vulnerability that allows information disclosure.
Hikvision HikCentral Access Control contains a high-severity vulnerability that allows unauthorized access.
Multiple vulnerabilities in Netty allow a remote attacker to cause denial-of-service, bypass security controls, perform request/response smuggling, a…
A remote attacker can bypass security controls in Red Hat Enterprise Linux.
Multiple vulnerabilities in Palo Alto Networks PAN-OS allow attackers to perform cross-site scripting, execute code with root privileges, or cause de…
Multiple vulnerabilities in IBM WebSphere Application Server allow attackers to bypass security controls, escalate privileges, disclose confidential …
Multiple vulnerabilities in Langflow OSS allow an attacker to execute arbitrary code, bypass security controls, manipulate data, escalate privileges,…
Adobe Photoshop allows local code execution via multiple vulnerabilities.
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader allow a local attacker to execute arbitrary code, escalate privileges, bypass secu…
Multiple vulnerabilities in IBM App Connect Enterprise allow an attacker to execute arbitrary code, gain elevated privileges, bypass security control…
An authenticated remote attacker can exploit multiple vulnerabilities in strongSwan to cause denial of service, bypass security controls, disclose in…
Red Hat Directory Server und Red Hat Enterprise Linux sind anfällig für mehrere Schwachstellen, die zu Codeausführung, Administratorrechten, Datenman…
Remote attackers can execute code, disclose information, and bypass security controls in Google Chrome and Microsoft Edge.
Multiple vulnerabilities in Google Chrome allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, disclose sensit…
Redis vulnerabilities allow unauthorized data access, denial of service, and code execution.
An authenticated remote attacker can bypass security controls in CyberPanel.
An authenticated remote attacker can bypass security controls in Snipe-IT.
Multiple vulnerabilities in Red Hat Enterprise Linux (Apicurio Registry) allow an attacker to perform denial of service, information disclosure, and …
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to escalate privileges, execute arbitrary code, manipulate or disclose data, a…
Multiple vulnerabilities in IBM License Metric Tool allow remote code execution, denial of service, information disclosure, data manipulation, and se…
Autodesk Fusion is vulnerable to unauthorized data modification and sensitive information disclosure.
Craft CMS is vulnerable to remote code execution via authenticated users with limited privileges.