Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Broadcom Issues Urgent Security Advisory for VMware vCenter Server and Cloud Foundation

Jason Davies 1577 Views 0 Comments ,  ,  ,  ,  ,  0 min read

Broadcom has released a critical security advisory concerning two vulnerabilities in VMware vCenter Server, the centralized management tool for virtual

Read More
NewsSecurity Vulnerabilities

Kastle Systems Access Control System [CVE-2024-45861]

Duncan 1382 Views 0 Comments ,  ,  0 min read

CVE number = CVE-2024-45861 CVSS Score = 9.2 Kastle Systems firmware prior to May 1st 2024, contained a hard-coded credential,

Read More
NewsSecurity Vulnerabilities

WinZip Mark-of-the-Web Bypass Vulnerability [CVE-2024-8811]

Duncan 1460 Views 0 Comments ,  ,  0 min read

CVE number = CVE-2024-8811 This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip.

Read More
NewsSecurity Vulnerabilities

mySCADA myPRO Hard-Coded Credentials Remote Code Execution Vulnerability [CVE-2024-4708]

Jason Davies 1553 Views 0 Comments ,  ,  0 min read

CVE number = CVE-2024-4708 CVSS Score = 9.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations

Read More
NewsSecurity Vulnerabilities

Nextcloud Desktop Client synchronized files vulnerability [CVE-2024-46958]

Jason Davies 1587 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2024-46958 In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client)

Read More
NewsSecurity Vulnerabilities

Yubico YubiKey 5 Series ECDSA secret-key extraction attack vulnerability [CVE-2024-45678]

Luke Simmonds 1888 Views 0 Comments ,  ,  1 min read

CVE number = CVE-2024-45678 Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before

Read More
NewsSecurity Vulnerabilities

Adobe Acrobat Reader DC Doc Object Use-After-Free Information Disclosure Vulnerability [CVE-2024-45107]

Jason Davies 1353 Views 0 Comments ,  ,  ,  ,  0 min read

CVE Number = CVE-2024-45107 CVSS Score = 3.3 This vulnerability allows remote attackers to disclose sensitive information on affected installations

Read More
NewsSecurity Vulnerabilities

NAC Telecommunication Systems SQL Command Injection vulnerability [CVE-2024-6919]

Luke Simmonds 1664 Views 0 Comments ,  ,  0 min read

CVE number = CVE-2024-6919 CVSS Score = 9.8 Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’)

Read More
NewsSecurity Vulnerabilities

Critical vulnerability in SonicWall SonicOS [CVE-2024-40766]

Kerry Dean 1687 Views 0 Comments ,  ,  0 min read

SonicWall has issued a security advisory regarding a critical access control vulnerability (CVE-2024-40766) in its SonicOS. This flaw could allow

Read More
NewsSecurity Vulnerabilities

Drupal Full Path Disclosure Vulnerability [CVE-2024-45440]

Luke Simmonds 1722 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the

Read More