Cyber

Acronis Cyber Infrastructure has been found to have an insecure default password vulnerability that could lead to remote command execution.

Read the briefing

A significant vulnerability affecting the Linux kernel's NFS has been addressed, specifically concerning file size handling that could lead to underflow issues.

Read the briefing

A newly identified vulnerability in Oracle WebLogic Server could allow unauthenticated attackers to access sensitive data remotely, affecting multiple supported versions.

Read the briefing

A critical vulnerability in the Linux kernel's NFS client has been addressed, which could lead to indefinite request retries under specific conditions.

Read the briefing

ServiceNow has patched a significant input validation vulnerability that could allow remote code execution by unauthenticated users in the Now Platform.

Read the briefing

ServiceNow has resolved a significant input validation vulnerability that could allow remote code execution, affecting multiple releases of the Now Platform.

Read the briefing

A serious vulnerability has been identified in Apache HTTP Server that could allow unauthorized access to filesystem locations, leading to potential code execution or data exposure.

Read the briefing

A severe vulnerability in OSGeo GeoServer allows unauthenticated users to execute remote code, impacting multiple versions of the software. Immediate action is required to mitigate risks.

Read the briefing

A significant path traversal vulnerability has been identified in Progress WhatsUp Gold, affecting versions prior to 2023.1.3, allowing unauthenticated remote code execution.

Read the briefing

A critical authentication bypass vulnerability in VMware ESXi could allow unauthorized access to hosts configured with Active Directory for user management.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, allowing potential arbitrary data injection from userspace under specific conditions.

Read the briefing

A newly identified out-of-bounds write vulnerability in VMware vCenter Server could allow remote code execution, posing significant risks to network security.

Read the briefing