Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
A remote attacker can exploit multiple vulnerabilities in ffmpeg to cause memory corruption, execute arbitrary code, trigger denial of service, or di…
A remote attacker can exploit multiple vulnerabilities in ffmpeg to execute arbitrary code, manipulate data, disclose sensitive information, or cause…
A vulnerability in Ivanti Connect Secure allows remote unauthenticated code execution.
Multiple Microsoft products have vulnerabilities that could allow remote code execution with user privileges.
Fortinet products prior to specified versions have vulnerabilities that could allow code execution.
Esri Portal for ArcGIS prior to 12.2 contains vulnerabilities requiring updates.
Microsoft's .NET and ASP.NET Core products contain vulnerabilities that could allow unauthorized access and code execution.
Ivanti Connect Secure and Neurons Patch for Intune have a vulnerability allowing remote code execution.
Citrix UniconOS and XenServer contain vulnerabilities that could allow code execution.
Commvault Cloud and related products prior to specified versions have vulnerabilities that could allow unauthorized access.
ImageMagick allows remote code execution and data manipulation via multiple vulnerabilities.
Authenticated remote attacker can exploit multiple vulnerabilities in Froxlor to perform cross-site scripting, disclose sensitive information, manipu…
Multiple critical and high-severity vulnerabilities resolved in various IBM products.
Multiple high-severity vulnerabilities in Firefox and Firefox ESR could allow code execution.
JetBrains products have a vulnerability that allows information disclosure prior to version 1.5.1.
MarkLogic Server prior to 11.3.7 and 12.1.0 contains vulnerabilities.
SAP SE products have vulnerabilities that could allow information disclosure.
MikroTik RouterOS prior to 7.24.5 contains a vulnerability that may allow information disclosure.
Progress MarkLogic Server is vulnerable to 31 security issues, including 5 critical and 24 high-severity vulnerabilities.
Craft CMS contains vulnerabilities that could allow unauthorized code execution if exploited.
Neo4j GraphQL library contains vulnerabilities that could allow unauthorized access to sensitive information and data manipulation.
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contain vulnerabilities requiring updates.
Dell products prior to specified versions have multiple vulnerabilities that could allow unauthorized access and code execution.
Siemens SIMATIC S7 is vulnerable to multiple vulnerabilities allowing code execution, privilege escalation, data manipulation, security-control bypas…
A remote attacker can exploit a vulnerability in QT to cause a denial of service.
A vulnerability in libpng allows a Denial of Service attack.
A vulnerability in gcc allows file manipulation and denial of service.
Multiple vulnerabilities in the Linux Kernel may allow an attacker to escalate privileges, bypass security controls, disclose or manipulate data, cor…
A local attacker can exploit multiple vulnerabilities in Intel processor to gain elevated privileges, manipulate data, disclose confidential informat…
Local attacker can exploit multiple vulnerabilities in Linux Kernel to cause Denial of Service.
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a Denial of Service.
A remote attacker can bypass security controls in Ollama.
A SQL injection vulnerability in Kong Gateway allows attackers from adjacent networks to exploit it.
Multiple vulnerabilities in SAP Software allow attackers to escalate privileges, execute arbitrary code, bypass security controls, disclose or manipu…
SuiteCRM is vulnerable to multiple vulnerabilities allowing remote code execution with admin privileges, information disclosure, file manipulation, S…
An authenticated remote attacker can bypass security controls in Red Hat Quay to disclose information and manipulate data.
A remote attacker can cause a Denial of Service via a vulnerability in FreeType.
A local attacker can exploit a vulnerability in Dell BIOS to execute arbitrary code.
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to bypass security controls, disclose confidential information, execute arbitr…
Vercel Next.js has vulnerabilities that allow bypassing security controls, XSS, data manipulation, information disclosure, and denial of service.
AnyDesk allows remote, anonymous execution of arbitrary code with administrator privileges.
An authenticated remote attacker can execute arbitrary code and disclose sensitive information via a vulnerability in IBM i.
A local attacker can exploit multiple vulnerabilities in LibreOffice to disclose information, manipulate data, and execute arbitrary code.
Siemens has released security updates to address multiple vulnerabilities in its products, including four critical and fourteen high-severity issues.
Agenzia per la Cybersicurezza Nazionale ha richiamato l'attenzione su vulnerabilità in sistemi di distribuzione alimentare e logistica.
Schneider Electric products have two new high-severity vulnerabilities.
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service or perform unspecified attacks.
Multiple vulnerabilities in python-tornado in Red Hat Enterprise Linux allow information disclosure or denial of service.
A remote attacker can cause a denial-of-service condition or potentially execute arbitrary code via a vulnerability in Red Hat Enterprise Linux.
X.Org X11 vulnerabilities allow Denial of Service attacks.
Multiple vulnerabilities in Node.js allow an attacker to perform denial of service, bypass security controls, and manipulate files.
An authenticated remote attacker can exploit a vulnerability in Red Hat Quay to disclose information usable for impersonation as specific accounts.
Multiple vulnerabilities in Red Hat OpenShift for Windows Containers allow an attacker to gain administrator rights and disclose confidential informa…
Multiple vulnerabilities in Samba allow an attacker to disclose confidential information, bypass security controls, cause denial of service, or manip…
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause memory corruption, disclose sensitive information, manipulate data…
A local attacker can execute arbitrary code with user privileges, cause a denial-of-service, or disclose confidential information via vulnerabilities…
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, including denial of service, information disclosure, m…
Multiple vulnerabilities in vim allow an attacker to execute arbitrary code, cause a denial of service, and cause unspecified impacts.
A remote attacker can exploit a vulnerability in QT to manipulate files.
Unbound is vulnerable to multiple vulnerabilities that can allow denial of service, information disclosure, data manipulation, and security-control b…
rsyslog is vulnerable to remote denial of service via an anonymous attacker.
A remote attacker can exploit a vulnerability in QT to cause a denial of service.
Remote attackers can bypass security controls in Red Hat Ansible Automation Platform to execute code, manipulate data, or cause denial of service.
Local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to escalate privileges and manipulate data.
SAP releases security updates to address multiple new vulnerabilities, including 4 critical and 3 high-severity issues.
AnyDesk for Linux is vulnerable to CVE-2026-109390, allowing remote unauthenticated code execution with elevated privileges.
Progress ShareFile Storage Zones Controller is vulnerable to arbitrary file write and remote code execution.
Remote code execution vulnerability in Genesis World's load_checkpoint function allows attackers to execute arbitrary code.
Genesis World is vulnerable to server-side request forgery via remote attacks.
Remote attackers can disclose sensitive information via directory traversal in Genesis World's URDF library.
Genesis World MJCF library allows remote information disclosure via directory traversal vulnerability.
Genesis World decompress_usdz allows remote code execution via directory traversal.