Cyber

A critical out-of-bounds read vulnerability in the Linux kernel's USB audio driver has been patched, enhancing the security of audio devices.

Read the briefing

A code injection vulnerability has been identified in Craft CMS, affecting users with specific PHP configurations. Immediate updates are recommended to mitigate risks.

Read the briefing

A critical command injection vulnerability has been identified in BeyondTrust's Privileged Remote Access and Remote Support products, posing significant risk to users.

Read the briefing

Cleo has identified a significant unauthenticated file upload vulnerability in its Harmony product suite, requiring immediate attention from users.

Read the briefing

A buffer overflow vulnerability in the Windows Common Log File System driver could allow local privilege escalation, impacting Windows 10 users.

Read the briefing

A significant vulnerability in the Linux kernel's netfilter component has been addressed, enhancing security against potential exploitation.

Read the briefing

A significant out-of-bounds write vulnerability in the Linux kernel has been addressed, impacting the media subsystem's handling of UVC video formats.

Read the briefing

A newly discovered improper access control vulnerability in Microsoft Partner Center could allow unauthenticated attackers to elevate privileges over a network.

Read the briefing

An improper authentication vulnerability has been identified in ProjectSend, allowing remote attackers to exploit the system and gain unauthorized access.

Read the briefing

A significant vulnerability has been identified in Oracle Agile Product Lifecycle Management, allowing unauthorized access to sensitive data.

Read the briefing

A significant authentication bypass vulnerability has been identified in Palo Alto Networks PAN-OS, allowing unauthorized access to administrative privileges.

Read the briefing

A significant OS command injection vulnerability has been identified in certain end-of-life GeoVision devices, allowing remote attackers to execute arbitrary commands.

Read the briefing