A significant vulnerability has been identified in Unitronics Vision PLC and HMI systems, allowing unauthorized access due to insecure default passwords.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A significant use-after-free vulnerability has been identified in multiple Qualcomm chipsets, posing potential risks to devices utilizing these components.
A serious memory corruption vulnerability has been identified in Apple's WebKit, potentially allowing for code execution through malicious web content.
A newly identified integer overflow vulnerability in Google Skia could allow remote attackers to escape the sandbox, posing a significant risk to various Google products.
A significant path traversal vulnerability has been identified in SysAid Server, allowing potential code execution. This flaw has been actively exploited in the wild.
Recent findings reveal that generating and validating excessively long X9.42 DH keys can lead to significant performance delays, potentially resulting in Denial of Service scenarios.
A serious improper authorization vulnerability has been identified in all versions of Atlassian Confluence Data Center and Server, posing significant risks to user data and system integrity.
A serious deserialization vulnerability has been identified in NextGen Healthcare's Mirth Connect, potentially allowing unauthenticated remote code execution.
A serious XML External Entity (XXE) vulnerability has been identified in multiple versions of North Grid's Proself products, potentially exposing sensitive data to remote attackers.
Cisco has identified a privilege escalation vulnerability in the IOS XE Web UI, allowing attackers to exploit previously unknown issues for unauthorized access.