Latest news
CVE-2023-36884, characterized as a high-severity flaw, plagues both Office and Windows, offering attackers a dangerous platform to execute arbitrary code
CVE-2023-37266 could allow unauthenticated attackers to craft arbitrary JWTs and access features that usually require authentication
CVE-2023-3696 bug, which carries a significant CVSS score of 10, stands testimony to its gravity and potential for wreaking havoc
CVE-2023-37466, a critical CVSS score of 9.8, exposed the VM2's sandbox, allowing rogue elements to bypass Promise handler sanitization
The CVE-2023-38198 flaw, allowing for the execution of arbitrary commands via 'eval', has reportedly been exploited in the wild in June 2023
Cisco released security updates to address a critical severity vulnerability (CVE-2023-20214) found in the Cisco SD-WAN vManage software
In Apache RocketMQ, the black hole takes the form of CVE-2023-37582, a lingering vulnerability threatening the secure performance of this reliable platform
CVE-2023-33308 in FortiOS and FortiProxy might allow a remote attacker to execute arbitrary code or commands via carefully crafted packets
recent revelations highlight some vulnerabilities in the system that have been silent undercurrents, threatening to unseat us from our boards
CVE-2023-24492 vulnerability, discovered in the Citrix Secure Access client for Ubuntu, bears a CVSS score of 9.6
CVE-2022-42009, is a notable case of Spring Expression Language injection. A malicious authenticated user can execute arbitrary code remotely
CVE-2023-37450 zero-day exploit allows ill-intentioned hackers to execute arbitrary code on targeted devices
IMY considers that the data transferred to the US via Google's statistics tool is personal data because the data can be linked with other unique data
With a towering CVSS score of 9.9, CVE-2023-36460 allowed attackers to create arbitrary files anywhere, using specially crafted media files
After trace analysis, Kaspersky discovered 34 analogous extensions on the Chrome Web Store. While these extensions offer specific functionalities
The CVE-2023-20185 security loophole is specific to Cisco Nexus 9000 Series Fabric Switches in ACI mode running releases 14.0 and later
An unauthenticated attacker could potentially exploit the CVE-2023-36934 flaw to gain unauthorized access to the MOVEit Transfer database
CVE-2023-21250 is a critical-severity remote code execution (RCE) flaw affecting Android releases 11, 12, 12L, and 13.
StackRot (CVE-2023-3269) refers to a flaw discovered in the Linux kernel's handling of stack expansion, specifically within versions 6.1 through 6.4