Do Son ImageMagick has patched four security vulnerabilities, including high-severity memory corruption bugs, that could affect applications using the toolkit.
CVE
GitLab has released patches for multiple high-severity vulnerabilities, including several XSS flaws that could lead to account takeover. All users should update immediately.
GitLab releases urgent security updates to fix critical vulnerabilities, including an 8.7 CVSS score XSS flaw. Update your instances now to prevent attacks.
Ivanti patches three Workspace Control flaws exposing sensitive credentials due to hardcoded keys. Update immediately to secure your enterprise.
Go 1.24.4 and 1.23.10 fix flaws in net/http, os, and crypto/x509, addressing data leaks, file inconsistencies, and certificate validation bypasses. Update now!
Critical CVSS 9.8 flaws in HPE Insight Remote Support could allow remote code execution and SYSTEM-level file access. Patch now to stay secure.
MediaTek's June 2025 Security Bulletin reveals a high-severity Bluetooth flaw & multiple medium risks across chipsets, affecting WLAN & IMS. Update your devices!
Earth Lamia, a China-linked APT, is targeting critical industries worldwide using SQL injection, CVEs, and custom backdoors like PULSEPACK.
Xerox fixes 40+ CVEs in April 2025 FreeFlow Print Server patch, enhancing security with updated Java, Firefox, OpenSSL, and encryption protocols.
Urgent: SAP's May 2025 Security Patch Day reveals critical vulnerabilities! Learn about the latest threats and how to protect your systems. Act now to secure your SAP landscape
NETSCOUT advisory reveals critical vulnerabilities in nGeniusONE, including hardcoded credentials & XSS. Update to version 6.4.0 b2350 or later immediately.
GCVE introduces a decentralized system for vulnerability IDs, empowering organizations with autonomy and speed. Complements CVE for smoother vulnerability management.
CISA extends funding for the CVE program, ensuring no disruption to global vulnerability tracking and cybersecurity infrastructure.
The CVE Foundation launches to ensure the future of the CVE Program after U.S. government funding ends for MITRE's operation.
Google Chrome 135 fixes critical CVE-2025-3619 and high CVE-2025-3620 flaws. Users urged to update now to avoid potential code execution threats.
MITRE warns the CVE program may halt after April 16 as U.S. funding expires, threatening global cybersecurity and vulnerability tracking.
Stay informed about the record-breaking surge in CVE publications. Explore the key highlights from the annual CVE data review for 2024.
Find out how Google Cloud is improving vulnerability disclosure with the issuance of CVEs. Discover the company's commitment to security and collaboration.