Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
An remote attacker can exploit multiple vulnerabilities in Linux Kernel to cause memory errors, kernel crashes, denial of service, and memory disclos…
Angriffe auf den Linux Kernel können zu Datenmanipulation, Denial-of-Service und Speicherbeschädigungen führen.
Multiple vulnerabilities in the Linux Kernel may allow an attacker to escalate privileges, bypass security controls, disclose or manipulate data, cor…
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service or perform unspecified attacks.
Multiple vulnerabilities in the Linux Kernel may allow an attacker to escalate privileges, bypass security controls, disclose or manipulate data, cor…
A local attacker can cause a denial of service or unspecified impact via multiple vulnerabilities in the Linux Kernel.
Multiple vulnerabilities in the Linux Kernel allow an attacker to bypass security measures, manipulate data or system state, cause denial-of-service …
Multiple vulnerabilities in the Linux Kernel allow an attacker to bypass security controls, disclose sensitive information, manipulate data, cause de…
A remote attacker can exploit multiple vulnerabilities in Linux Kernel to cause memory errors, kernel crashes, denial-of-service conditions, and memo…
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, including data disclosure, manipulation, and denial of…
Multiple vulnerabilities in the Linux Kernel allow an attacker to execute arbitrary code, escalate privileges, disclose information, manipulate data,…
Multiple vulnerabilities in the Linux Kernel may allow an attacker to bypass security measures, cause a denial of service, or disclose confidential i…
Multiple vulnerabilities in Linux Kernel allow an attacker to gain root privileges, cause a denial of service, or perform an unspecified attack.
SmarterMail prior to Build 9777 contains a vulnerability that may allow unauthorized access.
SonicWall SMA1000 Series Appliances are affected by vulnerabilities, including CVE-2026-102255, which is being exploited in the wild.
Citrix NetScaler ADC and NetScaler Gateway are vulnerable to improper input validation, allowing potential code execution.
MongoDB Go Driver and libmongocrypt have vulnerabilities allowing duplicate masterKey fields and BSON length overflow.
HPE Intelligent Management Center (iMC) prior to 7.3 E0713 has a remote authentication bypass vulnerability.
Hermes Agent's redirect-uri parser allows session takeover via PKCE due to parser confusion.
Hermes Agent allows unauthenticated clients to write arbitrary data to disk via the /auth/password-login route.
Hermes Agent's public authentication routes allow unauthenticated memory exhaustion via unbounded JSON request parsing.
WordPress's Post Author module allows SQL injection via untrusted input stored in post meta, leading to potential data manipulation.
WordPress REST handlers allow authenticated post authors to inject SQL via unescaped request parameters, enabling unauthorized database access.
Citrix NetScaler ADC and Gateway could allow remote code execution if configured as SAML IdP or SP.
IBM's Security Verify Access and Verify Identity Access products have 22 vulnerabilities, including 5 critical and 5 high-severity issues.
Dell Secure Connect Gateway Policy Manager contains 18 high-severity vulnerabilities that could allow unauthorized access and execution of scripts.
Citrix NetScaler ADC and Gateway versions prior to 13.1-64.29 and 14.1-73.46 have a vulnerability that could allow information disclosure.
Remote attackers can bypass security controls in Obsidian to execute arbitrary code with user privileges.
Keycloak allows information disclosure, security-control bypass, and cross-site scripting via multiple vulnerabilities.
Multiple vulnerabilities in Red Hat Enterprise Linux (sssd, tftp, ansible-collection-ansible-posix) allow an attacker to escalate privileges, bypass …
A remote attacker can execute arbitrary code and cause a denial of service via a vulnerability in Citrix NetScaler ADC and Gateway.
Hazelcast is vulnerable to code execution, security-control bypass, denial of service, and data manipulation via multiple vulnerabilities.
A remote attacker can cause a denial of service and manipulate data via a vulnerability in poppler.
A remote attacker can exploit a vulnerability in Pexip Infinity to cause a denial of service.
Remote attackers can bypass security controls in GnuTLS to disclose, manipulate data, or cause denial of service.
Authenticated remote attackers can exploit multiple vulnerabilities in JHipster to perform cross-site scripting or SQL injection attacks.
Multiple vulnerabilities in Golang Go allow an attacker to cause a denial of service, disclose information, manipulate data, and bypass security cont…
Remote authenticated attackers can exploit multiple vulnerabilities in Nextcloud Server and apps to disclose information, bypass security controls, a…
Local attacker can exploit Zammad vulnerability to escalate privileges
Multiple vulnerabilities in MariaDB Connector/Node.js allow a remote attacker to cause denial of service, perform SQL injection, or disclose/manipula…
Multiple vulnerabilities in IBM DB2 allow an attacker to escalate privileges, cause denial of service, and disclose information.
Multiple authenticated remote attackers can exploit vulnerabilities in MIT Kerberos to cause a denial of service.
A remote attacker can bypass security controls in HPE Intelligent Management Center.
Multiple vulnerabilities in Microsoft Azure allow an attacker to escalate privileges, execute arbitrary code, perform spoofing, or disclose informati…
An authenticated remote attacker can exploit a vulnerability in IBM i to perform cross-site scripting.
A remote attacker can execute arbitrary code via a vulnerability in Microsoft Dataverse.
Multiple vulnerabilities in IBM App Connect Enterprise allow an attacker to bypass security controls, cause a denial of service, and disclose informa…
HPE Intelligent Management Center is vulnerable to remote authentication bypass allowing unauthorized access.
MongoDB's security updates address vulnerabilities that could allow an attacker to disrupt service availability under certain conditions.
Django is vulnerable to denial of service, data manipulation, and information disclosure via multiple vulnerabilities.
Three high-severity vulnerabilities in TP-Link Tapo C325WB v2 allow remote attackers to bypass authentication and disrupt service availability.
Remote attackers can exploit multiple vulnerabilities in ILIAS to execute arbitrary code, bypass security mechanisms, and manipulate or disclose data.
A remote, anonymous attacker can bypass security controls in Red Hat Enterprise Linux (Ceph Storage).
A remote attacker can bypass security controls via a vulnerability in the SSH protocol.
A local attacker can exploit multiple vulnerabilities in BusyBox to cause a denial of service.
Multiple vulnerabilities in CoreDNS allow a remote attacker to cause a denial of service.
A remote attacker can exploit multiple vulnerabilities in Red Hat Advanced Cluster Management to escalate privileges.
Citrix NetScaler ADC e Gateway sono vulnerabili a una vulnerabilità critica che consente l'esecuzione di codice arbitrario o la compromissione della …
Tenable Identity Exposure (SaaS) has a critical vulnerability allowing authenticated attackers with limited privileges to execute arbitrary code with…