Coverage tagged "Vulnerability".
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.4 through 5.0.4 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command…
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud…
Serial number: AV26-1053 Date: October 15, 2026 As of October 15, 2026, SUSE is affected by vulnerabilities in the following products: Rancher Prior to 2.10.5 Prior to 2.11.1 Prior to 2.9.9 Steve…
Serial number: AV26-1052 Date: October 15, 2026 As of October 7, 2026, Johnson Controls is affected by a vulnerability in the following product: ADVMS Prior to 3.10 The Cyber Centre encourages users…
Parts 1 and 2 of this series looked at two pressures facing higher education security teams. First, the threat landscape: universities are dealing with more frequent attacks across complex…
Serial number: AV26-1051 Date: October 15, 2026 As of October 13, 2026, Schneider Electric is affected by a vulnerability in the following products: Sage RTU 1410/1430/1450 Versions prior to…
Serial number: AV26-1050 Date: October 15, 2026 As of October 15, 2026, JetBrains is affected by vulnerabilities in the following products: Datalore Prior to 2026.2.1 Junie CLI Prior to 26.8.3…
Serial number: AV26-1047 Date: October 15, 2026 As of October 14, 2026, Drupal is affected by vulnerabilities in the following product: Drupal core Prior to 11.4.10 Prior to 11.3.19 Prior to 10.6.19…
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Serial number: AV26-1046 Date: October 15, 2026 As of October 15, 2026, Hewlett Packard Enterprise is affected by vulnerabilities in the following products: HPE NonStop HTTP WEBSERVER Version…
Serial number: AV26-1044 Date: October 15, 2026 As of October 14, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.83 Prior to 2.41.4 Prior to 2.42.1 The Cyber…
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and…
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational…
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational…
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational…
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational…
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational…
Serial number: AV26-1043 Date: October 15, 2026 As of October 14, 2026, Juniper Networks is affected by vulnerabilities in the following products: Junos OS Versions prior to 23.2R2-S7.7 Version 23.4…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One…
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An…
