Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Cisco NX-OS Software External Border Gateway Protocol Denial of Service Vulnerability [CVE-2024-20321]

CVE number – CVE-2024-20321 A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow

Read More
NewsSecurity Vulnerabilities

Microsoft Azure MCR VSTS CLI vstscli Uncontrolled Search Path Element Remote Code Execution Vulnerability

CVE number – to be confirmed This vulnerability allows remote attackers to execute arbitrary code on affected installations of MCR

Read More
NewsSecurity Vulnerabilities

Apache OFBiz createRegister Error Message Information Disclosure Vulnerability [CVE-2024-23946]

CVE number = CVE-2024-23946 This vulnerability in Apache OFBiz allows remote attackers to disclose sensitive information on affected installations of

Read More
NewsSecurity Vulnerabilities

Microsoft Office Word PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability [CVE-2024-21379]

CVE number – CVE-2024-21379 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word.

Read More
NewsSecurity Vulnerabilities

Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability [CVE-2024-21412]

CVE number – CVE-2024-21412 This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on

Read More
NewsSecurity NewsSecurity Vulnerabilities

CISA warns about Roundcube email attacks

On Monday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) took action by adding a medium-severity security flaw that affects

Read More
NewsSecurity Vulnerabilities

Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities

CVE numbers CVE-2024-20252 and CVE-2024-20254 and CVE-2024-20255 Multiple vulnerabilities in the Cisco Expressway Series could allow an unauthenticated, remote attacker

Read More
NewsSecurity Vulnerabilities

Cisco Unified Communications Products Remote Code Execution Vulnerability [CVE-2024-20253]

CVE number = CVE-2024-20253 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated,

Read More
NewsSecurity Vulnerabilities

Critical Remote Code Execution Vulnerability in Junos OS [CVE-2024-21591]

An out-of-bounds write vulnerability in J-Web of Juniper Networks Junos OS SRX Series and EX Series allows an unauthenticated, network-based attacker to

Read More
NewsSecurity Vulnerabilities

Exploitation of vulnerabilities affecting Ivanti Connect Secure and Ivanti Policy Secure

Ivanti has published an advisory detailing two vulnerabilities affecting Connect Secure and Policy Secure gateways. Ivanti is aware that both vulnerabilities are

Read More