Vulnerabilities (Page 16)

Cyber Security Vulnerabilities | Infosec Vulnerabilities | Information Security Vulnerabilities | Bug bounty

Critical remote code execution vulnerability in Ruby library asciidoctor-include-ex. Secure your applications

On: April 8, 2022

Tagged: AsciiDoc, Common Vulnerability Scoring System (CVSS), cybercrime, cybersecurity, cyebrattack, Hacking, Information Security, remote code execution (RCE), Ruby, Security breach, security flaws, vulnerability

Developers addressed a command injection vulnerability in asciidoctor-include-ext, a popular Ruby library that allows users to parse and convert AsciiDoc files. According to the report, this vulnerability allows remote codeRead More →

6 critical vulnerabilities in VMware Workspace ONE Access, Identity Manager, and other products

On: April 7, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, hackers, Hacking, Information Security, remote code execution (RCE), security flaws, Server-side request forgery (SSRF), technology, VMware

VMware released a critical security alert to address various vulnerabilities found in Workspace ONE Access, VMware Identity Manager (vIDM), vRealize Lifecycle Manager, vRealize Automation, and VMware Cloud Foundation products. AccordingRead More →

Critical vulnerability in PHP allows easy DoS attack on millions of websites

On: April 1, 2022

In: Vulnerabilities

Tagged: Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, Information Security, PHP, Security breach, technology, web application security, Web Applications

A severe vulnerability in a PHP function would allow threat actors to evade security measures implemented for the protection of web applications. The affected feature is filter_var(), which allows developersRead More →

Severe remote code execution vulnerability in Vim text editor: PoC published

On: March 31, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, hackers, Hacking, incidents, Information Security, security flaws, Unix, use-after-free, Vim, vulnerability

Cybersecurity specialists report the detection of a critical vulnerability in Vim, the improved version of the Vi text editor, present in all UNIX systems and developed by Bram Moolenaar inRead More →

8 critical Vulnerabilities in Western Digital My Cloud OS 5 pose a serious risk to your data backups

On: March 28, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, data security, Hacking, Information Security, My Cloud OS 5, security flaws, technology, vulnerability, Western Digital

Cybersecurity specialists report the detection of two critical vulnerabilities in Western Digital My Cloud OS 5, a solution for creating backups and managing large volumes of content from multiple computersRead More →

Critical vulnerability in Mitmproxy, an open source HTTPS proxy service

On: March 25, 2022

In: Vulnerabilities

Tagged: Cyberattack, cybercrime, cybersecurity, GitHub, Hacking, incidents, Information Security, Mitmproxy, request smuggling, Security breach, security flaws, vulnerability

Open source interactive HTTPS proxy service Mitmproxy announced the fix of a dangerous vulnerability that would have allowed threat actors to deploy HTTP request smuggling attacks against backend servers. TheseRead More →

Buffer overflow vulnerability in Sonicwall SonicOS affects different products: Patch immediately

On: March 25, 2022

In: Vulnerabilities

Tagged: arbitrary code execution, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, incidents, Information Security, SonicOS, SonicWall, vulnerability

Cybersecurity specialists report the detection of a critical vulnerability in SonicOS, the operating system executed in the physical and virtual firewalls developed by the technology firm SonicWall. According to theRead More →

These three critical vulnerabilities in NumPy, an important Python library, affect your web applications?

On: March 24, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, NumPy, Python, security flaws, technology, vulnerability

Cybersecurity specialists report the detection of some critical vulnerabilities in NumPy, a library for the Python programming language with support for creating vectors and multidimensional arrays, along with a largeRead More →

SQL injection vulnerability in Mail Manager Component would allow authenticated attackers to execute code in Sophos UTM

On: March 24, 2022

In: Vulnerabilities

Tagged: antivirus, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, incidents, Information Security, security flaws, sophos, SQL injections, Universal Threat Manager (UTM), vulnerability

Sophos security teams announced the fix of a critical vulnerability in authentication software running on Universal Threat Manager (UTM) devices. The vulnerability was described as a SQL injection bug inRead More →