Collaborate Disseminate
Cisco patches a high-severity Integrated Management Controller vulnerability for which PoC exploit code is available.
The post Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability appeared first on SecurityWeek.
Continue reading Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability
Ivanti releases patches for 27 vulnerabilities in the Avalanche MDM product, including critical flaws leading to command execution.
The post Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product appeared first on SecurityWeek.
Continue reading Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product
Chrome and Firefox security updates resolve over 35 vulnerabilities, including a dozen high-severity bugs.
The post Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.
Continue reading Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities
Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update.
The post Oracle Patches 230 Vulnerabilities With April 2024 CPU appeared first on SecurityWeek.
Continue reading Oracle Patches 230 Vulnerabilities With April 2024 CPU
PuTTY vulnerability CVE-2024-31497 allows attackers to compromise private keys and use them to forge signatures.
The post Critical PuTTY Vulnerability Allows Secret Key Recovery appeared first on SecurityWeek.
Continue reading Critical PuTTY Vulnerability Allows Secret Key Recovery
PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who found the flaw.
The post Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Att… Continue reading Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt
Juniper Networks patches dozens of vulnerabilities in Junos OS, Junos OS Evolved, and other products.
The post Juniper Networks Publishes Dozens of New Security Advisories appeared first on SecurityWeek.
Continue reading Juniper Networks Publishes Dozens of New Security Advisories
Second identifier, CVE-2024-3272, assigned to unpatched D-Link NAS device vulnerabilities, just as exploitation attempts soar.
The post Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars appeared first on SecurityWeek.
Continue reading Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars
Palo Alto Networks warns of limited exploitation of a critical command injection vulnerability leading to code execution on firewalls.
The post Palo Alto Networks Warns of Exploited Firewall Vulnerability appeared first on SecurityWeek.
Continue reading Palo Alto Networks Warns of Exploited Firewall Vulnerability
A report from Binarly finds that a silently patched bug in a popular web server will likely live on in several major end-of-life products.
The post Six-year old bug will likely live forever in Lenovo, Intel products appeared first on CyberScoop.
Continue reading Six-year old bug will likely live forever in Lenovo, Intel products