Search Results

EDIT: This remediation is outdated, and organisations are instructed to follow the advice in the High Severity Cyber Alert CC-4578

The security advisory addresses a critical authentication bypass vulnerability in the management web interface

Exploitation reported for critical vulnerabilities CVE-2024-38812 and CVE-2024-38813

Multiple vulnerabilities affect macOS Sequoia, iOS, iPadOS, Safari, and visionOS

Palo Alto Networks releases security update to address a privilege escalation vulnerability in GlobalProtect App 

The most serious vulnerabilities could allow a remote unauthenticated attacker to gain unauthorised access to QNAP products

CVE-2024-29014 may allow an attacker to execute arbitrary code when processing an EPC Client update

A high severity vulnerability could allow an attacker to upload and download files

The security updates address one critical and ten high severity vulnerabilities

Three buffer overflow vulnerabilities could lead to code execution and three others concern path traversal, authentication bypass, and insecure randomness

QNAP has released a security update addressing several vulnerabilities in their QTS and QuTS NAS operating systems

Updates address critical vulnerabilities in Cloud Services Application, Connect Secure, and Policy Secure

Evidence of chained exploitation of path traversal vulnerabilities affecting Mitel MiCollab following public release of proof-of-concept code  

Scheduled updates for Microsoft products, including security updates for 72 vulnerabilities, with 1 reported as actively exploited

Exploitation in the wild reported for two vulnerabilities potentially leading to RCE

CVE-2024-53677 could allow unauthenticated remote code execution, path traversal or upload of malicious files

A critical vulnerability in BeyondTrust remote access tools could lead to code injection

Security updates address multiple vulnerabilities that could lead to remote code execution, information disclosure, privilege escalation, or DoS

CVE-2024-48889 could lead to remote code execution

Critical vulnerabilities could lead to SQL injection, unauthorised access, or RCE