Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Hex-Rays IDA Pro – Uncontrolled Resource Consumption Vulnerability [CVE-2024-44083]

CVE number = CVE-2024-44083 CVSS Score = 9.8 ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a

Read More
NewsSecurity Vulnerabilities

Microsoft Windows 10 WinREUpdateInstaller DLL Hijacking Local Privilege Escalation Vulnerability [CVE-2024-38163]

CVE number = CVE-2024-38163 CVSS Score = 7.0 This vulnerability allows local attackers to escalate privileges on affected installations of

Read More
NewsSecurity Vulnerabilities

Microsoft Office Visio VSDX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability [CVE-2024-38169]

CVE number = CVE-2024-38169 CVSS Score = 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations

Read More
NewsSecurity Vulnerabilities

Webcrack arbitrary file write vulnerability [CVE-2024-43373]

CVE number = CVE-2024-43373 CVSS Score = 7.7 Webcrack is a tool for reverse engineering javascript. An arbitrary file write

Read More
NewsSecurity Vulnerabilities

UNIX editor Vim argument list handling vulnerability [CVE-2024-43374]

CVE number = CVE-2024-43374 CVSS Score = 4.5 The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error

Read More
NewsSecurity Vulnerabilities

Trix Editor Cross-Site Scripting (XSS) vulnerability on copy & paste [CVE-2024-43368]

CVE number = CVE-2024-43368 CVSS Score = 6.5 The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when

Read More
NewsSecurity Vulnerabilities

ZoneMinder time-based SQL Injection vulnerability [CVE-2024-43360]

CVE number = CVE-2024-43360 CVSS score = 9.8 ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is

Read More
NewsSecurity Vulnerabilities

FreeBSD – High-Severity OpenSSH Vulnerability [CVE-2024-7589]

CVE number = CVE-2024-7589 CVSS Score = 7.4 A signal handler in sshd(8) may call a logging function that is

Read More
NewsSecurity Vulnerabilities

Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability [CVE-2024-27829]

CVE number = CVE-2024-27829 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User

Read More
NewsSecurity Vulnerabilities

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities [CVE-2024-20443 and CVE-2024-20479]

CVE numbers = CVE-2024-20443 and CVE-2024-20479 Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could

Read More