Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities

CVE numbers = CVE-2024-20450 and CVE-2024-20451 and CVE-2024-20452 and CVE-2024-20453 and CVE-2024-20454 Multiple vulnerabilities in the web-based management interface of

Read More
NewsSecurity Vulnerabilities

Apache OFBiz resolveURI Authentication Bypass Vulnerability [CVE-2024-38856]

CVE number = CVE-2024-38856 CVSS score = 9.8 This vulnerability allows remote attackers to bypass authentication on affected installations of

Read More
NewsSecurity Vulnerabilities

Apple macOS Metal Framework KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability [CVE-2024-27802]

CVE number = CVE-2024-27802 CVSS Score = 3.3 This vulnerability allows remote attackers to disclose sensitive information on affected installations

Read More
NewsSecurity Vulnerabilities

Microsoft PowerShell Reference for Office Products officedocs-cdn Uncontrolled Search Path Element Remote Code Execution Vulnerability

CVE Number = TBC CVSS Score = 9.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations

Read More
NewsSecurity Vulnerabilities

Microsoft Windows Menu DC Color Space Use-After-Free Local Privilege Escalation Vulnerability [CVE-2024-30082]

CVE number = CVE-2024-30082 CVSS Score = 8.8 This vulnerability allows local attackers to escalate privileges on affected installations of

Read More
NewsSecurity Vulnerabilities

Code injection vulnerability found in Elektra [CVE-2024-41961]

CVE number = CVE-2024-41961 CVSS Score = 9.6 Elektra is an opinionated Openstack Dashboard for Operators and Consumers of Openstack

Read More
NewsSecurity Vulnerabilities

Splashtop Streamer Image File Execution Options Injection Vulnerability [CVE-2024-42050]

– The MSI installer for Splashtop Streamer for Windows versions < 3.7.0.0 uses a temporary folder with weak permissions during installation. A local authenticated user can exploit this to escalate privileges to SYSTEM.

Read More
NewsSecurity Vulnerabilities

Linux kernel vulnerability [CVE-2024-42231]

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for zoned mode calc_available_free_space() returns the

Read More
NewsSecurity Vulnerabilities

Multiple Vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

HPE Aruba Networking has released patches for EdgeConnect SD-WAN Orchestrator that address multiple security vulnerabilities. Affected Products HPE Aruba Networking

Read More
NewsSecurity Vulnerabilities

Broadcom Releases Security Updates for VMware ESXi, vCenter Server, and Cloud Foundation Vulnerabilities

Broadcom has released an advisory addressing three security vulnerabilities in VMware ESXi, VMware vCenter Server, and VMware Cloud Foundation. VMware

Read More