SonicWall, a leading cybersecurity provider, has issued a security patch to address a heap-based buffer overflow vulnerability in its SonicOS operating system. This vulnerability, identified as CVE-2024-40764 with a CVSS...
A new study presented at the Privacy Enhancing Technologies Symposium (PETS) 2024 has revealed a vulnerability in popular VPN protocols like OpenVPN and WireGuard. This flaw, dubbed “port shadow,” could...
The Apache Software Foundation has issued a security advisory regarding two critical vulnerabilities, CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to...
Cybersecurity researchers at Wiz have uncovered a series of critical vulnerabilities in SAP AI Core, a service designed to develop and deploy AI models. These flaws, collectively dubbed “SAPwned,” could...
A series of critical vulnerabilities have been identified in FutureNet’s NXR, VXR, and WXR series networking devices, leaving thousands of users potentially exposed to cyberattacks. The Japan Computer Emergency Response...
Cisco has issued an urgent security alert regarding a critical vulnerability (CVE-2024-20419) discovered in its Smart Software Manager (SSM) On-Prem and Satellite products. This vulnerability, with the highest possible severity...
Cisco has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-20401) found in its Secure Email Gateway product. This flaw, with a CVSS score of 9.8, could allow attackers...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning, adding three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This move highlights the urgent...
SolarWinds, a leading provider of IT management software, has issued an urgent security advisory regarding multiple critical vulnerabilities discovered in its Access Rights Manager (ARM) product. These flaws expose organizations...
Ivanti, a prominent provider of endpoint management solutions, has promptly addressed a SQL Injection vulnerability in its Endpoint Management (EPM) software. This vulnerability, designated as CVE-2024-37381, could have enabled authenticated...
Apache Airflow, the popular open-source workflow management platform, has released a security update to address a potentially severe code execution vulnerability (CVE-2024-39877) affecting versions 2.4.0 through 2.9.2. This vulnerability could...
A critical vulnerability has been discovered in the widely-used WordPress plugin, HUSKY – Products Filter Professional for WooCommerce. This security flaw, tracked as CVE-2024-6457 with a CVSS score of 9.8...
In a recent security advisory, Atlassian, a renowned software company known for its collaboration and productivity tools, has disclosed two high-severity vulnerabilities affecting its widely used products, Bamboo and Confluence....
A remote code execution (RCE) vulnerability, tracked as CVE-2024-27348, is currently under active exploitation in the wild, targeting Apache HugeGraph-Server deployments. This discovery comes from the Shadowserver Foundation, a non-profit...
baramundi software GmbH has issued a critical security advisory regarding vulnerabilities discovered in their widely-used IT management solution, baramundi Management Suite (bMS). These vulnerabilities, classified as high to critical risk,...
Support Securityonline.info site. Thanks!
