Cyber

ServiceNow has resolved a significant input validation vulnerability that could allow remote code execution, affecting multiple releases of the Now Platform.

Read the briefing

A serious vulnerability has been identified in Apache HTTP Server that could allow unauthorized access to filesystem locations, leading to potential code execution or data exposure.

Read the briefing

A severe vulnerability in OSGeo GeoServer allows unauthenticated users to execute remote code, impacting multiple versions of the software. Immediate action is required to mitigate risks.

Read the briefing

A significant path traversal vulnerability has been identified in Progress WhatsUp Gold, affecting versions prior to 2023.1.3, allowing unauthenticated remote code execution.

Read the briefing

A critical authentication bypass vulnerability in VMware ESXi could allow unauthorized access to hosts configured with Active Directory for user management.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, allowing potential arbitrary data injection from userspace under specific conditions.

Read the briefing

A newly identified out-of-bounds write vulnerability in VMware vCenter Server could allow remote code execution, posing significant risks to network security.

Read the briefing

GeoVision devices are affected by a serious OS command injection vulnerability, allowing remote attackers to execute arbitrary commands.

Read the briefing

A serious XML External Entity (XXE) vulnerability has been identified in Adobe Commerce and Magento Open Source, potentially allowing arbitrary code execution.

Read the briefing

A significant OS command injection vulnerability has been discovered in specific PHP versions, affecting systems using Apache and PHP-CGI on Windows.

Read the briefing

A directory traversal vulnerability has been identified in SolarWinds Serv-U, potentially exposing sensitive files on affected systems.

Read the briefing

A critical authentication bypass vulnerability has been identified in Progress Telerik Report Server, allowing unauthorized access to restricted functionalities.

Read the briefing