Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Multiple vulnerabilities in the Linux Kernel allow a non-specific attack.
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, including denial of service, information disclosure, m…
Multiple vulnerabilities in the Linux Kernel allow an attacker to disclose information, cause resource or memory management errors, trigger denial-of…
A local attacker can cause a denial of service or perform unspecified attacks via multiple vulnerabilities in the Linux Kernel.
IBM DataPower Gateway and Langflow OSS are affected by multiple vulnerabilities, including cross-site scripting.
Elasticsearch and Kibana contain vulnerabilities that could allow information disclosure.
Cisco Nexus and Meraki products have vulnerabilities that could allow information disclosure.
Vault versions prior to 2.1.2 and 1.21.12 are vulnerable to arbitrary code execution via plugin catalog entries restored from Raft snapshots.
Docker Engine's DNS response handling flaw allows image registry connection compromise with credential exposure or malicious image substitution.
Splunk Enterprise and MCP Server are affected by vulnerabilities leading to potential information disclosure.
Multiple vulnerabilities in Cisco Application Policy Infrastructure Controller allow an attacker to gain elevated privileges, execute arbitrary code,…
Multiple vulnerabilities in Broadcom Fabric OS allow an attacker to escalate privileges, cause denial of service, disclose information, manipulate fi…
Remote attackers can bypass security controls and manipulate files in Apache Jackrabbit.
A remote attacker can bypass security measures in MikroTik RouterOS.
A remote unauthenticated attacker can disclose information via a vulnerability in Red Hat Enterprise Linux's resteasy component.
Remote attackers can execute arbitrary code and bypass security controls in IBM Security Verify Access.
Cisco Jabber is vulnerable to local file manipulation.
A local attacker can execute arbitrary code via a vulnerability in Dell BIOS.
Multiple vulnerabilities in Cisco Nexus and Cisco NX-OS allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, d…
Multiple vulnerabilities in Absolute Secure Access allow Denial of Service.
A remote attacker can exploit a vulnerability in Docker to manipulate data and bypass security controls.
PostgreSQL JDBC Driver is vulnerable to data manipulation and information disclosure via multiple vulnerabilities.
Multiple vulnerabilities in MISP allow an attacker to disclose information, bypass security measures, and manipulate data.
Multiple vulnerabilities in Gradle allow an attacker to execute arbitrary code, read sensitive information, or cause a denial of service.
Hashicorp Vault is vulnerable to multiple vulnerabilities allowing code execution, bypassing security controls, and privilege escalation.
Argo CD is vulnerable to code execution, information disclosure, and denial of service via multiple vulnerabilities.
Brocade Fabric OS, SANnav e ASCG hanno 61 vulnerabilità, 37 con gravità "alta".
Multiple vulnerabilities in vim allow an attacker to execute arbitrary code, cause a denial of service, and cause unspecified impacts.
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow attackers to execute arbitrary code, bypass security controls, disclose sensitive i…
HashiCorp Vault Enterprise e Community Edition sono vulnerabili a elevate vulnerabilità che permettono l'elevazione di privilegi e esecuzione di codi…
X.Org X11 und Xwayland sind anfällig für mehrere Schwachstellen, die zu Codeausführung und Denial of Service führen können.
Remote attackers can bypass security controls, manipulate data, and cause denial of service in Red Hat Enterprise Linux.
SonicWall SMA1000 is vulnerable to multiple vulnerabilities allowing bypass of security controls, data manipulation, disclosure, code execution, and …
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow an attacker to execute arbitrary code, bypass security controls, disclose informatio…
Multiple vulnerabilities in CPython allow an attacker to perform a denial of service and bypass security controls.
Authenticated remote attackers can exploit multiple vulnerabilities in Octopus Deploy to escalate privileges.
Multiple vulnerabilities in Red Hat Enterprise Linux allow a remote, anonymous attacker to manipulate data, disclose information, bypass security con…
Multiple vulnerabilities in Google Chrome allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, disclose or man…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow remote code execution and other unspecified attacks.
Multiple vulnerabilities in OpenSSL allow an attacker to bypass security controls, disclose confidential information, manipulate data, and cause deni…
A remote attacker can cause a denial of service and data manipulation in Red Hat Enterprise Linux (cjose).
A remote anonymous attacker can cause a denial of service in Red Hat Enterprise Linux (rhc).
ImageMagick allows attackers to bypass security controls, manipulate or disclose data, or cause denial of service via multiple vulnerabilities.
Multiple vulnerabilities in PHP allow an attacker to cause a denial of service, disclose information, or compromise integrity.
Multiple vulnerabilities in BusyBox allow an attacker to potentially execute arbitrary code, disclose sensitive information, or cause denial of servi…
Multiple vulnerabilities in Red Hat Ansible Automation Platform allow an attacker to escalate privileges, execute arbitrary code, bypass security con…
A local attacker can exploit a vulnerability in sudo to execute arbitrary code.
A remote attacker can exploit multiple vulnerabilities in Red Hat OpenShift Container Platform to cause a denial of service.
X server e Xwayland contengono vulnerabilità che potrebbero consentire l'esecuzione di codice arbitrario e la compromissione della disponibilità.
Splunk Enterprise contains vulnerabilities that could allow an attacker to execute arbitrary code, bypass security mechanisms, and escalate privilege…
Multiple vulnerabilities in VMware Workstation and VMware Fusion allow local code execution.
Progress Telerik Document Processing Libraries contain a vulnerability that could allow an attacker to disrupt service availability.
An authenticated remote attacker can exploit a vulnerability in Keycloak to gain administrator privileges.