Vulnerability

HPE OneView Vulnerability Let Attacker Bypass Authentication

In the Hewlett Packard Enterprise OneView Software, three security flaws have been identified, which might be remotely exploited to allow…

8 months ago

Cacti Cross-Site-Scripting Vulnerability Let Attacker Poison Database

A Stored Cross-Site Scripting (Stored XSS) vulnerability was recently discovered in Cacti that allows an authenticated user to poison the data…

8 months ago

Samsung Issued Patches for Multiple Critical Security Flaws

Samsung Mobile has issued fixes to address several security flaws discovered in Galaxy phones and tablets. In the September 2023…

8 months ago

Windows’s File History Service Flaw Let Attackers Escalate Privileges

A Privilege Escalation was recently discovered, which affects Windows’s File History service and can be used by threat actors to…

8 months ago

Hackers Exploit Pre-Authentication RCE Vulnerabilities in Adobe ColdFusion

Adobe ColdFusion is a Java-based, commercial web app development platform using CFML for server-side programming. ColdFusion is primarily known for…

8 months ago

Vulnerability in IBM Security Verify Let Attacker Extract Sensitive Information

Multiple Information Disclosure vulnerabilities were discovered in the IBM Security Verify Information Queue, which can reveal several internal product details.…

8 months ago

Threat and Vulnerability Roundup for the week of August 27th to September 2nd

We are glad to present the most recent news on cybersecurity in this week's Threat and Vulnerability Roundup from Cyber…

8 months ago

Junos OS Flaw Allows a Network-based Attacker to Launch DoS Attack

Junos OS and Junos OS Evolved have been found to be vulnerable to a DoS (Denial of Service) condition, which…

8 months ago

Cisco Unified Communications Products Flaw Let Attackers Escalate Privileges

A recent discovery has highlighted a privilege escalation vulnerability within Cisco Unified Communications Products. This vulnerability was found during internal…

8 months ago

Splunk IT Service Intelligence Injection Flaw Let Attacker Inject ANSI Codes in Log Files

Splunk has been reported with a Unauthenticated Log injection vulnerability in the Splunk IT Service Intelligence (ITSI) product. This vulnerability…

8 months ago