Do Son CISA has issued an urgent warning regarding two actively exploited vulnerabilities affecting the Linux Kernel and Check Point Quantum Security Gateways
CISA
The first vulnerability, tracked as CVE-2023-43208 (CVSS 9.8), affects NextGen Healthcare's Mirth Connect.
Two of the vulnerabilities, CVE-2014-100005 and CVE-2021-40655, affect specific models of D-Link routers (DIR-600 and DIR-605)
Two vulnerabilities (CVE-2021-36380 & CVE-2023-21237), known to be under active attack, have landed on their KEV catalog
CISA added a recently patched security flaw (CVE-2023-29360) in Microsoft Streaming Service to its Known Exploited Vulnerabilities catalog
CVE-2020-3259, with a CVSS score of 7.5, targets the web services interface of Cisco Adaptive Security Appliance (ASA) Software
initially disclosed in a security advisory update on September 5, 2023, this vulnerability carries a chilling CVSS score of 8.8
tracked as CVE-2018-15133 (CVSS score: 8.1), the vulnerability has been described as a deserialization of untrusted data vulnerability
The agency recently added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog
CVE-2023-33063 vulnerability arises from memory corruption in DSP Services during a remote call from the High-Level Operating System (HLOS)
Identified as CVE-2023-26360, this flaw has been exploited by threat actors for initial access to government servers, as confirmed by CISA
CVE-2021-1435 provides attackers a door into the system, permitting them to inject arbitrary commands, all executable as the all-powerful root user
The premier U.S. cybersecurity agency has announced plans to incorporate a section dedicated to groups deploying malicious...
CISA has added three new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation
CVE-2023-28229 is an elevation of privilege vulnerability that allows a local authenticated attacker to gain elevated privileges on the system
CISA recently added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, alerting security practitioners nationwide.
The vulnerability tracked as CVE-2023-2868 and boasting a worrisome CVSS score of 9.4, allows attackers to remotely execute system commands
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating evidence of active exploitation.
The CVE-2023-21839 vulnerability affects the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Attackers can leverage the CVE-2023-27350 vulnerability to bypass authentication, execute arbitrary code in the context of SYSTEM
CVE-2019-8526 allows a local attacker to obtain elevated privileges by exploiting a use-after-free issue in the Security component
CVE-2022-35914 allows a remote attacker to execute arbitrary PHP code on the system, caused by a flaw in the script in the htmlawed module