Latest news
CVE-2023-25076 affects the latest version on GitHub, the 0.6.0-2 Debian package, and potentially several forks of the original repository
TA473 started exploiting the Zimbra vulnerability CVE-2022-27926 in phishing campaigns targeting European government entities
CVE-2023-0614 highlights a vulnerability that allows attackers to access and potentially obtain confidential information
CVE-2023-28326 is considered critical and can potentially cause serious harm to users and organizations that use this software.
Dubbed "MacStealer," the attack targets Wi-Fi networks with malicious insiders and exploits client isolation bypasses (CVE-2022-47522)
However, an e-commerce giant Pinduoduo used CVE-2023-20963 in conjunction with prior vulnerabilities to re-exploit the flaws.
The CVE-2023-25196 vulnerability also involves improper neutralization of special elements used in SQL commands.
CVE-2023-1177 is a more severe security vulnerability with a CVSS score of 10, enables an attacker to download arbitrary files from the host server
CVE-2022-47502 is a critical-severity vulnerability that affects Apache OpenOffice versions 4.1.13 and older.
Deno, the popular runtime for JavaScript, TypeScript, has recently been identified with a critical security vulnerability (CVE-2023-28445)
a critical vulnerability with a CVSS score of 9.8, resides in the WooCommerce Payments plugin versions 4.8.0 through 5.6.1
Due to CVE-2023-28432, MinIO returns all environment variables, including sensitive information like MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD
Designated as CVE-2023-0386, this vulnerability has been assigned a CVSS score of 7.0, indicating a high level of severity