Sophos issues hotfixes for three critical flaws in XG firewall
Sophos has issued hotfixes to resolve three security vulnerabilities in its Firewall products. These flaws, under certain conditions, could enable
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Webmin CGI Command Injection Remote Code Execution Vulnerability [CVE-2024-12828]
CVE number = CVE-2024-12828 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is
Read More
Linux Kernel ksmbd TCP Connection Memory Exhaustion Denial-of-Service Vulnerability [CVE-2024-50285]
CVE number = CVE-2024-50285 This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux
Read More
Ivanti Avalanche FileStoreConfig Unrestricted File Upload Remote Code Execution Vulnerability [CVE-2024-37373]
CVE number = CVE-2024-37373 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication
Read More
Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability [CVE-2024-47977]
Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability – CVE number CVE-2024-47977 has been assigned to this. This
Read More
Playloom Engine Data Storage Vulnerability [CVE-2024-55946]
CVE number = CVE-2024-55946 Playloom Engine is an open-source, high-performance game development engine. Engine Beta v0.0.1 has a security vulnerability
Read More
Mullvad VPN client out of band write vulnerability [CVE-2024-55884]
CVE number – CVE-2024-55884 In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack
Read More
Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [CVE-2024-47964]
CVE number = CVE-2024-47964 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2.
Read MoreLinux Kernel Bluetooth HCI Request Race Condition Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the
Read MoreProgress Software WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability [CVE-2024-46909]
This vulnerability has a CVE number of CVE-2024-46909 and a CVSS score of 9.8 and allows remote attackers to execute
Read More