A significant vulnerability in the Linux kernel has been addressed, which could lead to unintended data leakage when sending small packets.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
Research · Sep 17, 2024
VMware vCenter Server Faces Privilege Escalation Vulnerability
A newly discovered vulnerability in VMware vCenter Server could allow unauthorized privilege escalation, posing significant risks to cloud infrastructure.
A significant heap-based buffer overflow vulnerability has been identified in VMware vCenter Server, potentially allowing remote code execution.
A newly identified vulnerability in Microsoft Windows Installer could potentially allow attackers to escalate privileges to SYSTEM level, posing significant security risks.
A newly discovered vulnerability in Microsoft Publisher allows attackers to bypass security mechanisms, potentially exposing users to untrusted files.
A significant deserialization vulnerability has been identified in Veeam Backup and Replication, posing risks of remote code execution for unauthenticated users.
A serious vulnerability in Cisco's Smart Licensing Utility could allow unauthorized remote access due to static credentials, posing risks to system integrity.
A critical SQL injection vulnerability has been identified in Progress WhatsUp Gold, potentially exposing user passwords to attackers.
A newly identified vulnerability in the Diffie-Hellman Key Agreement Protocol could allow remote attackers to exploit server resources through asymmetric consumption.
A significant security flaw has been identified in SolarWinds Web Help Desk, enabling unauthorized access to sensitive functionalities.
A significant type confusion vulnerability has been identified in Google Chromium V8, potentially impacting multiple web browsers and exposing users to remote attacks.
An authentication bypass vulnerability has been identified in Ivanti Virtual Traffic Manager, potentially exposing admin panel access to unauthorized users.