Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
ISC BIND 9 prior to 9.18.50, 9.18.50-S1, 9.20.27, 9 .20.27-S1, and 9.21.25 contains vulnerabilities.
Apple products prior to specified versions contain vulnerabilities that could allow information disclosure.
Oracle products have vulnerabilities that could allow unauthorized access and data manipulation.
Multiple vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways and Orchestrator could allow information disclosure.
Phoenix Contact's IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices have multiple firmware vulnerabilities.
Chrome prior to 153.0.8010.48 contains vulnerabilities that could allow information disclosure.
Android devices are vulnerable due to CVE-2026-58704, which is being exploited in the wild.
ScadaLTS 2.8.1-release-candidate allows authenticated remote code execution via scripting sandbox bypass.
HPE Networking EdgeConnect SD-WAN Gateways e Orchestrator hanno 39 vulnerabilità, tra cui 6 critiche e 18 alte.
Acronis backup plugins for Plesk, cPanel, and WHM are vulnerable to privilege escalation via CVE-2026-87886.
Multiple high-severity vulnerabilities in Firefox, Firefox ESR, and Thunderbird could allow code execution.
WSO2 API Manager is vulnerable to multiple vulnerabilities allowing security bypass, denial of service, privilege escalation, code execution, SQL inj…
Unbound allows remote attackers to bypass security controls, corrupt memory, cause denial of service, or execute code.
Multiple vulnerabilities in Apache Airflow Providers allow attackers to escalate privileges, execute arbitrary code, bypass security controls, or man…
Multiple vulnerabilities in GitLab allow an attacker to execute arbitrary code, bypass security controls, disclose sensitive information, manipulate …
Arista EOS vulnerabilities allow code execution, privilege escalation, and data manipulation.
A vulnerability in bluez allows remote code execution with administrative privileges via Bluetooth.
Remote attackers can bypass security controls, manipulate data, disclose information, or cause denial of service via multiple vulnerabilities in BIND.
Multiple vulnerabilities in the Linux Kernel allow an attacker to corrupt or expose memory, manipulate the kernel or system state, or cause denial-of…
Multiple vulnerabilities in MISP allow an attacker to manipulate files, bypass security measures, or cause a denial of service.
Arista EOS vulnerabilities allow code execution with root privileges on affected switches.
Multiple vulnerabilities in IBM MQ allow an attacker to execute arbitrary code, gain elevated privileges, bypass security controls, manipulate or dis…
Ghostscript allows remote code execution and data manipulation via an unauthenticated attacker.
Multiple vulnerabilities in Google Android Pixel allow an attacker to escalate privileges, execute arbitrary code, cause denial of service, and discl…
GIMP allows remote code execution and denial of service via an unauthenticated attack.
Multiple vulnerabilities in Microsoft Edge allow an attacker to execute arbitrary code and gain elevated privileges.
Aruba EdgeConnect is vulnerable to privilege escalation, denial of service, information disclosure, file manipulation, cross-site scripting, security…
Remote attackers can exploit multiple vulnerabilities in Oracle Communications to compromise confidentiality, integrity, and availability.
Multiple authenticated or unauthenticated remote attackers can exploit vulnerabilities in Oracle Supply Chain to compromise confidentiality, integrit…
Remote attackers can exploit multiple vulnerabilities in Oracle Siebel CRM to compromise confidentiality, integrity, and availability.
Remote attackers can exploit multiple vulnerabilities in Oracle E-Business Suite to compromise confidentiality, integrity, and availability.
Un utente non autenticato potrebbe eludere l'autenticazione e accedere a risorse riservate nel prodotto Crowd Data Center.
Oracle's September Critical Patch Update addresses 97 critical and 485 high-severity vulnerabilities across multiple products.
Local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary code, including code with root privileges, bypas…
MikroTik RouterOS contains a vulnerability that allows a remote attacker to cause a denial of service and disclose information.
MISP contains vulnerabilities that could allow an attacker to bypass authentication and access sensitive target system information.
A local attacker can bypass security controls via a vulnerability in the Linux Kernel.
Multiple vulnerabilities in the Linux Kernel could allow an attacker to cause a Denial-of-Service, escalate privileges, execute code, or corrupt memo…
Multiple vulnerabilities in the Linux Kernel allow an attacker to cause a denial of service, bypass security measures, disclose information, and pote…
Remote attackers can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, including potential denial of service, data manipulati…
A local attacker can exploit a vulnerability in libpng to disclose information.
Multiple vulnerabilities in Linux Kernel allow an attacker to perform denial of service or bypass security mechanisms.
Remote attackers can execute arbitrary code or cause denial of service via multiple vulnerabilities in libpng.
Multiple vulnerabilities in NGINX and NGINX Plus allow an attacker to perform denial of service, manipulate data, bypass security controls, and poten…
Dell Remote Access Controller is vulnerable to code execution and information disclosure via multiple vulnerabilities.
Linux Kernel vulnerabilities allow attackers to potentially cause denial of service or memory corruption.
Multiple vulnerabilities in the Linux Kernel could allow an attacker to cause a denial of service or memory corruption.
Multiple vulnerabilities in Intel processors and chipsets allow an attacker to escalate privileges, cause denial-of-service, or disclose confidential…
A remote attacker can exploit a vulnerability in libpng to execute arbitrary code, disclose information, or cause a denial of service.
A remote unauthenticated attacker can manipulate files via a vulnerability in NGINX OSS and NGINX Plus.
Multiple vulnerabilities in libpng allow denial of service attacks.
Multiple vulnerabilities in OpenSSL allow an attacker to execute arbitrary code, cause a denial of service, or disclose confidential information.
Multiple vulnerabilities in the Linux Kernel could allow an attacker to cause a denial of service or memory corruption.
Google Pixel devices have multiple vulnerabilities, including 46 critical and 63 high-severity issues, that could lead to code execution or privilege…
Google Chrome contains 42 vulnerabilities, 3 critical and 28 high severity, requiring an update.
Squid is vulnerable to cache content manipulation via crafted HTTP requests, allowing bypass of security features.
Flowise allows remote code execution and SQL injection via multiple vulnerabilities, enabling unauthorized access and data manipulation.
Mattermost allows authenticated attackers to bypass security restrictions.
Microsoft Windows allows local privilege escalation via HTTP proxy due to insufficient privilege checks.
MindsDB is vulnerable to remote code execution via code injection requiring authentication.
CrewAI allows remote code execution via unsafe reflection when loading malicious agent configurations.
Remote attackers can create arbitrary files on BusyBox via symlink directory traversal.
Airbyte's OneDrive connector allows remote code execution via server-side request forgery requiring authentication.
Airbyte's SharePoint Connector allows remote attackers to initiate arbitrary server-side requests with authentication required.
GIMP's APNG file parsing has a stack-based buffer overflow allowing remote code execution via malicious file.
NoMachine nxhtd is vulnerable to server-side request forgery, allowing remote information disclosure without authentication.
NoMachine Redis allows local privilege escalation via improper authentication.
NoMachine is vulnerable to remote code execution via mDNS heap-based buffer overflow without authentication.
Cisco Secure Firewall Management Center is vulnerable to remote code execution via deserialization of untrusted data.