Do Son Qualcomm has released a security bulletin this month, patching 16 flaws – including two critical flaws (CVE-2023-28578 and CVE-2023-28582)
Vulnerability
The proof of concept (PoC) for exploiting CVE-2024-27302 is alarmingly straightforward, underscoring the vulnerability's severity
Security researchers have sounded the alarm on a critical vulnerability (CVE-2024-0778) affecting outdated Zhejiang Uniview ISC cameras
Two vulnerabilities (CVE-2021-36380 & CVE-2023-21237), known to be under active attack, have landed on their KEV catalog
CVE-2024-22252, CVE-2024-22253 (UHCI/XHCI USB Controller): Use-after-free flaws with CVSSv3 scores of 9.3 (Workstation/Fusion) and 8.4 (ESXi)
Apple recently pushed out emergency patches to fix two "zero-day" vulnerabilities (CVE-2024-23225 and CVE-2024-23296) that are already under attack
CVE-2024-2048 that could allow attackers to bypass authentication and gain unauthorized access to your organization's most valuable secrets
CISA has added a critical Windows Kernel vulnerability (CVE-2024-21338) to its Known Exploited Vulnerabilities catalog
A severe security flaw (CVE-2023-6825) has been uncovered in the popular File Manager and File Manager Pro WordPress plugins
two (CVE-2024-1929, CVE-2024-1930) critical vulnerabilities could allow attackers to gain complete control of affected systems
CVE-2024-0039 is a critical security flaw in the System component that could lead to RCE with no additional execution privileges needed
The vulnerabilities, identified as CVE-2024-27198 and CVE-2024-27199, expose the underbelly of TeamCity's security mechanisms
A severe security hole (CVE-2024-27497) in the Linksys E2000 router lets hackers waltz right into your network
Hikvision, a titan in the surveillance solutions industry, recently addressed two security vulnerabilities affecting its centralized security...
CVE-2023-50378, a stored cross-site scripting (XSS) flaw, presents a significant risk administrators need to address immediately.
SolarWinds has disclosed and patched a serious remote code execution (CVE-2024-0692) vulnerability in its Security Event Manager solution
A security researcher has published details and proof-of-concept (PoC) code for a macOS vulnerability (CVE-2023-42942)
CISA added a recently patched security flaw (CVE-2023-29360) in Microsoft Streaming Service to its Known Exploited Vulnerabilities catalog
A security vulnerability has been discovered in the popular Avada WordPress theme (CVE-2024-1468, CVSS score 8.8)
CVE-2024-0071 and CVE-2024-0073, both rated CVSS 7.8, represent critical threats within the Windows environment
The CVE-2024-21338 (CVSS 7.8) vulnerability allowed attackers to deploy an advanced, stealthy rootkit, named "FudModule."
CVE-2024-20321, and CVE-2024-20267, rated as "High" severity, reside within Cisco's NX-OS and could be leveraged to launch DoS attacks.