Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Microsoft Windows Menu DC Color Space Use-After-Free Local Privilege Escalation Vulnerability [CVE-2024-30082]

CVE number = CVE-2024-30082 CVSS Score = 8.8 This vulnerability allows local attackers to escalate privileges on affected installations of

Read More
NewsSecurity Vulnerabilities

Code injection vulnerability found in Elektra [CVE-2024-41961]

CVE number = CVE-2024-41961 CVSS Score = 9.6 Elektra is an opinionated Openstack Dashboard for Operators and Consumers of Openstack

Read More
NewsSecurity Vulnerabilities

Splashtop Streamer Image File Execution Options Injection Vulnerability [CVE-2024-42050]

CVE number = CVE-2024-42050 CVSS Score = Base score: 7.0 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) The MSI installer for Splashtop Streamer for Windows versions

Read More
NewsSecurity Vulnerabilities

Linux kernel vulnerability [CVE-2024-42231]

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for zoned mode calc_available_free_space() returns the

Read More
NewsSecurity Vulnerabilities

Multiple Vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

HPE Aruba Networking has released patches for EdgeConnect SD-WAN Orchestrator that address multiple security vulnerabilities. Affected Products HPE Aruba Networking

Read More
NewsSecurity Vulnerabilities

Broadcom Releases Security Updates for VMware ESXi, vCenter Server, and Cloud Foundation Vulnerabilities

Broadcom has released an advisory addressing three security vulnerabilities in VMware ESXi, VMware vCenter Server, and VMware Cloud Foundation. VMware

Read More
NewsSecurity Vulnerabilities

Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability [CVE-2024-5652]

CVE number = CVE-2024-5652 This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop.

Read More
NewsSecurity Vulnerabilities

Multiple vulnerabilities in Ivanti EPMM

Ivanti released a security advisory addressing several vulnerabilities in its EPMM solution (formerly known as MobileIron). These vulnerabilities could lead

Read More
NewsSecurity Vulnerabilities

SolarWinds Access Rights Manager AddGeneratedReport Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability [CVE-2024-23472]

CVE number = CVE-2024-23472 CVSS Score = 10 This vulnerability allows remote attackers to read and delete arbitrary files on

Read More
NewsSecurity Vulnerabilities

SolarWinds Access Rights Manager AddReportResult Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability [CVE-2024-23475]

CVE number = CVE-2024-23475 CVSS Score = 10 This vulnerability allows remote attackers to read and delete arbitrary files on

Read More