Cyber

A type confusion vulnerability in Google Chromium V8 could allow remote attackers to exploit heap corruption through crafted HTML pages, impacting multiple web browsers.

Read the briefing

A path traversal vulnerability in Kingsoft WPS Office could allow attackers to execute arbitrary code, posing significant risks to users.

Read the briefing

A Java deserialization vulnerability in SolarWinds Web Help Desk could allow remote code execution. Users are urged to apply the available patch promptly.

Read the briefing

A Cross-Site Scripting vulnerability has been identified in RoundCube Webmail, affecting versions up to 1.6.7, potentially allowing remote attackers to exploit user data.

Read the briefing

A critical incorrect authorization vulnerability has been discovered in Apache OFBiz, necessitating immediate action from users to mitigate potential risks.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, which could lead to stack overflow due to improper cpumask variable allocation.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, preventing potential double free errors in the ethernet subsystem.

Read the briefing

Acronis Cyber Infrastructure has been found to have an insecure default password vulnerability that could lead to remote command execution.

Read the briefing

A significant vulnerability affecting the Linux kernel's NFS has been addressed, specifically concerning file size handling that could lead to underflow issues.

Read the briefing

A newly identified vulnerability in Oracle WebLogic Server could allow unauthenticated attackers to access sensitive data remotely, affecting multiple supported versions.

Read the briefing

A critical vulnerability in the Linux kernel's NFS client has been addressed, which could lead to indefinite request retries under specific conditions.

Read the briefing

ServiceNow has patched a significant input validation vulnerability that could allow remote code execution by unauthenticated users in the Now Platform.

Read the briefing