A significant use-after-free vulnerability has been identified in the Linux Kernel, impacting Siemens' SIMATIC S7-1500 TM MFP firmware, posing potential security risks.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A critical vulnerability has been identified in SQLite3 versions up to 3.43.0, necessitating immediate attention from users and developers.
A significant use-after-free vulnerability in the Linux kernel's netfilter component has been identified, enabling potential local privilege escalation for attackers.
A significant vulnerability has been identified in Unitronics Vision PLC and HMI systems, allowing unauthorized access due to insecure default passwords.
A serious memory corruption vulnerability has been identified in Apple's WebKit, potentially allowing for code execution through malicious web content.
A newly identified integer overflow vulnerability in Google Skia could allow remote attackers to escape the sandbox, posing a significant risk to various Google products.
Research · Nov 21, 2023
Critical Authentication Flaw Discovered in ownCloud
A serious vulnerability in ownCloud allows unauthorized access to files, posing significant risks for users without proper security configurations.
Research · Nov 15, 2023
Critical HTTP Tunneling Vulnerability Discovered in Qlik Sense
A significant vulnerability in Qlik Sense allows unauthenticated remote code execution, posing serious risks to users who have not updated their systems.
A new privilege escalation vulnerability has been identified in the Microsoft Windows Desktop Window Manager (DWM) Core Library, affecting Windows 10 version 1809.
A significant path traversal vulnerability has been identified in SysAid Server, allowing potential code execution. This flaw has been actively exploited in the wild.
Recent findings reveal that generating and validating excessively long X9.42 DH keys can lead to significant performance delays, potentially resulting in Denial of Service scenarios.
A serious improper authorization vulnerability has been identified in all versions of Atlassian Confluence Data Center and Server, posing significant risks to user data and system integrity.