Common Vulnerability Scoring System (CVSS) (Page 10)

Multiple critical security flaws in WiFi routers from Asus, AVM, D-Link, Netgear, Edimax, TP-Link, Synology, and Linksys. Update the firmware immediately

On: December 3, 2021

Tagged: Asus, AVM, Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, D-Link, Edimax, Hacking, incidents, Internet of Things (IoT), Linksys, Routers, security flaws, security risks, Synology, TP-Link, vulnerability, WiFi routers

After a thorough analysis, a group of researchers found more than 200 vulnerabilities in nine of the most popular WiFi routers, which reside even on devices running their latest firmwareRead More →

SQL injection vulnerabilities in WordPress plugin Hide My WP

On: December 2, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), content management system (CMS), Cyberattack, cybersecurity, Hacking, Hide My WP, Information Security, Plugins, security flaws, SQL injections, technology, Wordpress

Cybersecurity specialists report the detection of two vulnerabilities in Hide My WP, a popular security plugin for WordPress websites. According to the report, successful exploitation of these flaws would allowRead More →

Zero-day vulnerability in Cisco Security Manager; No patch available

On: November 30, 2021

In: Vulnerabilities

Tagged: Apache HTTP server, Cisco, Cisco Security Manager, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, incidents, security flaws, vulnerability

Cybersecurity specialists report the detection of two critical vulnerabilities in Cisco Security Manager, which allows system administrators to apply the best security policies, in addition to facilitating the resolution ofRead More →

Critical vulnerabilities in VMware vCenter Server; update now

On: November 25, 2021

In: Vulnerabilities

Tagged: arbitrary file reading, Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, Hacking, incidents, Information Security, security flaws, Server-side request forgery (SSRF), VMware, VMware vCenter Server, vulnerability

In a security report, VMware notified its customers of the fix of some server-side request forgery (SSRF) and arbitrary file reading vulnerabilities in vCenter Server. According to the report, theRead More →

Four critical vulnerabilities in industrial VPN solutions from vendors such as HMS Industrial Networks, Siemens, PerFect, and MB connect line

On: November 23, 2021

In: Vulnerabilities

Tagged: Claroty, Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, Hacking, HMS Industrial Networks, incidents, Information Security, OpenVPN, PerFact, security flaws, Server-side request forgery (SSRF), Siemens, virtual private network (VPN), vulnerability

Specialists from the security firm Claroty reported the detection of multiple code execution vulnerabilities in various virtual private network (VPN) products dependent on OpenVPN. In total, 4 flaws were detectedRead More →

Critical remote code execution flaw in QNAP QTS and QuTS hero NAS. Patch immediately

On: November 19, 2021

In: Vulnerabilities

Tagged: buffer overflow, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, International Institute of Cyber Security (IICS), network-attached storage (NAS), QNAP, security flaws, vulnerability

Cybersecurity specialists report the detection of a critical vulnerability affecting QNAP QTS and QNAP QuTS hero, two versions of the operating system for network attached storage (NAS) equipment developed byRead More →

Netgear patches CVE-2021-34991, a vulnerability that affects routers, extenders, and modems after released PoC. Update immediately

On: November 17, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, incidents, Information Security, modem, NETGEAR, Routers, vulnerability, WiFi routers

Cybersecurity specialists report the detection of a severe vulnerability in Netgear devices for home and small business use that could be exploited in order to execute remote code with rootRead More →

Researchers publish details of the easy-to-exploit ChaosDB vulnerability affecting Azure Cosmos DB database solution

On: November 12, 2021

In: Vulnerabilities

Tagged: Blackhat Europe, ChaosDB, Common Vulnerability Scoring System (CVSS), Cosmos DB, Cyberattack, cybersecurity, databases, hackers, Hacking, incidents, Information Security, Microsoft, Microsoft Azure, research, vulnerability

A few months ago a group of researchers discovered the ChaosDB vulnerability, a severe flaw in the Azure Cosmos DB database solution whose exploitation would allow threat actors to accessRead More →

3 critical vulnerabilities in GoCD, the open-source software build and release tool, allow hackers to insert backdoors in your software

On: November 12, 2021

In: Vulnerabilities

Tagged: backdoor, Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, GoCD, Hacking, incidents, Information Security, malware, Open Source, security flaws, SOFTWARE DEVELOPMENT

The team in charge of GoCD announced the fix of three vulnerabilities that could be exploited in a chained manner to take full control of the underlying server. These flawsRead More →