Cyber

A serious deserialization vulnerability has been identified in Veeam Backup and Replication, enabling remote code execution by unauthenticated users.

Read the briefing

A serious vulnerability in Cisco's Smart Licensing Utility could allow unauthorized remote access through static credentials, necessitating immediate attention from affected users.

Read the briefing

A SQL injection vulnerability has been identified in Progress WhatsUp Gold, potentially exposing user credentials to attackers.

Read the briefing

A new vulnerability in the Diffie-Hellman Key Agreement Protocol could allow remote attackers to exploit server resources, leading to potential denial-of-service conditions.

Read the briefing

A hardcoded credential vulnerability has been identified in SolarWinds Web Help Desk, posing significant risks to user data and internal functionality.

Read the briefing

A type confusion vulnerability in Google Chromium V8 could allow remote attackers to exploit heap corruption through crafted HTML pages, impacting multiple web browsers.

Read the briefing

A path traversal vulnerability in Kingsoft WPS Office could allow attackers to execute arbitrary code, posing significant risks to users.

Read the briefing

A Java deserialization vulnerability in SolarWinds Web Help Desk could allow remote code execution. Users are urged to apply the available patch promptly.

Read the briefing

A Cross-Site Scripting vulnerability has been identified in RoundCube Webmail, affecting versions up to 1.6.7, potentially allowing remote attackers to exploit user data.

Read the briefing

A critical incorrect authorization vulnerability has been discovered in Apache OFBiz, necessitating immediate action from users to mitigate potential risks.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, which could lead to stack overflow due to improper cpumask variable allocation.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, preventing potential double free errors in the ethernet subsystem.

Read the briefing