Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Cisco ASA Software and Firepower Threat Defence Software Remote Access VPN Unauthorized Access Vulnerability [CVE-2023-20269]

CVE number = CVE-2023-20269 A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and

Read More
NewsSecurity Vulnerabilities

Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Authentication Bypass Vulnerability [CVE-2023-20238]

CVE number – CVE-2023-20238 A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco

Read More
NewsSecurity Vulnerabilities

TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability [CVE-2023-41184]

CVE number = CVE-2023-41184 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210

Read More
NewsSecurity Vulnerabilities

ClamAV HFS+ File Scanning Infinite Loop Denial of Service Vulnerability [CVE-2023-20197]

CVE number = CVE-2023-20197 A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could

Read More
NewsSecurity Vulnerabilities

ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability [CVE-2023-35720]

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit

Read More
NewsSecurity Vulnerabilities

3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability [CVE-2023-27362]

CVE number = CVE-2023-27362 This vulnerability allows local attackers to escalate privileges on affected installations of 3CX. An attacker must

Read More
NewsSecurity Vulnerabilities

McAfee Safe Connect VPN Uncontrolled Search Path Element Local Privilege Escalation Vulnerability [CVE-2023-40352]

CVE number = CVE-2023-40352 Affected product = McAfee Safe Connect VPN This vulnerability allows local attackers to escalate privileges on

Read More
NewsSecurity Vulnerabilities

Schneider Electric IGSS UpdateService Exposed Dangerous Method Local Privilege Escalation Vulnerability [CVE-2023-3001]

CVE Number = CVE-2023-3001 This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric IGSS. An

Read More
NewsSecurity Vulnerabilities

Microsoft Edge MSDCPDF Javascript addIcon type confusion vulnerability [CVE-2023-36887]

CVE number = CVE-2023-36887 A memory corruption vulnerability exists in the Javascript implementation of the Acrobat-based PDF engine in Microsoft

Read More
NewsSecurity Vulnerabilities

Cisco BroadWorks Privilege Escalation Vulnerability [CVE-2023-20216]

CVE number = CVE-2023-20216 A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an

Read More