Tag: flaw
-
New Vulnerability in Microchip Advanced Software Framework Poses Risks
The CERT Coordination Center (CERT/CC) at Carnegie Mellon University issued a warning about a security flaw in the Microchip Advanced Software Framewo… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microchip-vulnerability/
-
Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution
Broadcom on Tuesday released updates to address a critical security flaw impacting VMware vCenter Server that could pave the way for remote code execu… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/patch-issued-for-critical-vmware.html
-
Ivanti vTM auth bypass flaw exploited in attacks, CISA warns (CVE-2024-7593)
CVE-2024-7593, a critical authentication bypass vulnerability affecting Ivanti Virtual Traffic Manager (vTM) appliances, is actively exploited by atta… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/25/cve-2024-7593-exploited/
-
1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/poc-exploit-for-rce-flaw-but-patches-from-veeam
-
HPE patches three critical flaws in Aruba proprietary access protocol Interface
First seen on theregister.com Jump to article: www.theregister.com/2024/09/26/hpe_aruba_patch_papi/
-
Cisco’s Smart Licensing Utility flaws suggest it’s pretty dumb on security
First seen on theregister.com Jump to article: www.theregister.com/2024/09/05/cisco_smart_licensing_utility_flaws/
-
ESET fixed two privilege escalation flaws in its products
ESET addressed two local privilege escalation vulnerabilities in security products for Windows and macOS operating systems. Cybersecurity firm ESET re… First seen on securityaffairs.com Jump to article: securityaffairs.com/168795/security/eset-local-privilege-escalation-vulnerabilities.html
-
Multiple 0-Day Flaws in Automated Tank Gauge Systems Threaten Critical Infrastructure
Cybersecurity researchers from BitSight TRACE have uncovered multiple 0-day vulnerabilities in Automated Tank Gauge (ATG) systems, which are integral … First seen on gbhackers.com Jump to article: gbhackers.com/multiple-0-day-flaws/
-
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
SolarWinds has released fixes to address two security flaws in its Access Rights Manager (ARM) software, including a critical vulnerability that could… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/solarwinds-issues-patch-for-critical.html
-
Google Fixes GCP Composer Flaw That Could’ve Led to Remote Code Execution
A now-patched critical security flaw impacting Google Cloud Platform (GCP) Composer could have been exploited to achieve remote code execution on clou… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/google-fixes-gcp-composer-flaw-that.html
-
Chinese APT Earth Baxia target APAC by exploiting GeoServer flaw
Suspected China-linked APT Earth Baxia targeted a government organization in Taiwan by exploiting a recently patched OSGeo GeoServer GeoTools flaw. Tr… First seen on securityaffairs.com Jump to article: securityaffairs.com/168767/apt/earth-baxia-apt-targets-apac-geotools-flaw.html
-
CISA Urges Software Makers to Eliminate XSS Flaws
The latest Secure by Design alert from CISA outlines recommended actions security teams should implement to reduce the prevalence of cross-site script… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cisa-urges-software-makers-eliminate-xss-flaws
-
Attackers exploit second Ivanti Cloud Service Appliance flaw for more access
Hackers are exploiting the vulnerability in tandem with a previously disclosed CVE, to bypass authentication measures and take control of an affected … First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ivanti-critical-cves-exploits/727632/
-
Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability
Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance (CSA) has come under active exploitation in the wild.The high-se… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/ivanti-warns-of-active-exploitation-of.html
-
Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers
Details have emerged about a now-patched security flaw impacting Apple’s Vision Pro mixed reality headset that, if successfully exploited, could allow… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/apple-vision-pro-vulnerability-exposed.html
-
‘CloudImposer’ Flaw in Google Cloud Affected Millions of Servers
Attackers could have exploited a dependency confusion vulnerability affecting various Google Cloud services to execute a sprawling supply chain attack… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/cloudimposer-flaw-google-cloud-affected-millions-servers
-
Rockwell Automation PLC Software Contains RCE Flaw
Attackers Could Shut Down Operations Or Cause Physical Damage. A severe vulnerability in Rockwell Automation software used to configure programmable l… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/rockwell-automation-plc-software-contains-rce-flaw-a-26346
-
Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw
Malicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software W… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html
-
CISA warns of actively exploited Apache HugeGraph-Server bug
The U.S. Cybersecurity and Infrastructure Agency (CISA) has added five flaws to its Known Exploited Vulnerabilities (KEV) catalog, among which is a re… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-apache-hugegraph-server-bug/
-
Ivanti warns of another critical CSA flaw exploited in attacks
Today, Ivanti warned that threat actors are exploiting another Cloud Services Appliance (CSA) security flaw in attacks targeting a limited number of c… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-warns-of-another-critical-csa-flaw-exploited-in-attacks/
-
Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488)
Researchers have released technical details about CVE-2024-45488, a critical authentication bypass vulnerability affecting One Identity’s Safeguard fo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/19/cve-2024-45488/
-
Ivanti Warns of Second CSA Vulnerability Exploited in Attacks
In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited. The … First seen on securityweek.com Jump to article: www.securityweek.com/ivanti-warns-of-second-csa-vulnerability-exploited-in-attacks/
-
Vulnerability Recap 9/9/24 Exploited Vulnerabilities Persist
Recent vulnerability news covered critical flaws affecting major businesses and end users. Explore the latest security updates to ensure you’re protec… First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-september-9-2024/
-
CISA Flags Two Actively Exploited Vulnerabilities: Critical Threats to Windows and WhatsUp Gold
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding two actively exploited security flaws to its Known Explo… First seen on securityonline.info Jump to article: securityonline.info/cisa-flags-two-actively-exploited-vulnerabilities-critical-threats-to-windows-and-whatsup-gold/
-
Updated CISA exploited vulnerabilities catalog adds several flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/updated-cisa-exploited-vulnerabilities-catalog-adds-several-flaws
-
Ivanti warns of a new actively exploited Cloud Services Appliance (CSA) flaw
Ivanti warned of a new Cloud Services Appliance (CSA) vulnerability that is being exploited in attacks in the wild against a limited number of custome… First seen on securityaffairs.com Jump to article: securityaffairs.com/168617/security/ivanti-cloud-services-appliance-cve-2024-8963.html
-
New Federal Alert Seeks to Eliminate XSS Flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-federal-alert-seeks-to-eliminate-xss-flaws
-
Critical SolarWinds ARM flaw fixed
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/critical-solarwinds-arm-flaw-fixed
-
CloudImposer Flaw Could Compromise Google Cloud Platform
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cloudimposer-flaw-could-compromise-google-cloud-platform