Today, Jenkins, the popular open-source automation server, has issued an urgent advisory detailing two vulnerabilities, one with a critical severity rating. These vulnerabilities, identified as CVE-2024-43044 and CVE-2024-43045, expose Jenkins...
AMD has released a security bulletin addressing three potential vulnerabilities in its Secure Encrypted Virtualization – Secure Nested Paging (SEV-SNP) technology. Discovered by a researcher, these vulnerabilities could allow a...
In a recent disclosure, a security researcher has published detailed technical insights and proof-of-concept exploit code for a critical vulnerability in the Linux kernel, identified as CVE-2023-6817. This high-severity flaw,...
The Elastic Team has announced a critical security update for Kibana, their popular open-source data visualization and exploration tool. This update addresses a severe vulnerability, CVE-2024-37287, which carries a CVSS...
Google has released a critical security update for its Chrome web browser on the Stable channel, addressing five vulnerabilities, one of which is rated as critical. The update, versions 127.0.6533.99/.100...
In a move to fortify its mobile security, Samsung has significantly increased the rewards for its ‘Important Scenario Vulnerability Program’. The tech giant is now offering up to a staggering...
Western Digital, a leading provider of storage solutions, has issued a security advisory regarding a vulnerability (CVE-2024-22169, CVSS 7.1) discovered in their WD Discovery Desktop App. This flaw could allow...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a Microsoft COM for Windows vulnerability, CVE-2018-0824, which is currently being exploited by malicious actors. This...
JFrog, a leading provider of software artifact management solutions, has issued a critical security advisory for its Artifactory platform. The vulnerability, identified as CVE-2024-6915 (CVSS 9.3), affects multiple versions of...
In a recent security advisory, JPCERT/CC has highlighted a significant vulnerability affecting Pimax Play and PiTool, two critical components of the Pimax virtual reality (VR) ecosystem. This vulnerability tracked as...
Google’s latest Android security updates have revealed a critical zero-day vulnerability actively exploited in targeted attacks. The flaw, designated CVE-2024-36971, resides within the Linux kernel’s network route management and could...
Apache Linkis, the popular computation middleware widely used to connect applications with various data processing engines, has addressed two significant security vulnerabilities that could have exposed users to potential attacks....
The development team behind Roundcube, the popular open-source webmail client, has announced the release of significant security updates. Yesterday, versions 1.6.8 and 1.5.8 were made available, addressing three serious vulnerabilities...
The Apache InLong project, a popular data integration framework widely used for handling large-scale data streams, has issued a security advisory regarding a critical vulnerability discovered in its TubeMQ component....
In a recent security bulletin, Microsoft disclosed a critical vulnerability in Windows File Explorer, identified as CVE-2024-38100, with a CVSS score of 7.8. This flaw, discovered by Andrea Pierini from...
Support Securityonline.info site. Thanks!
