Coverage tagged "Vulnerability".
Vijil has released Diamond Adaptive Red Teaming for Agents (DART), an automated testing system that finds security vulnerabilities and policy violations in enterprise AI agents. DART employs multiple…
It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with timestamps omitting the trailing timezone indicator. A local…
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances.
Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track.
Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland
Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and…
Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking…
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory.
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.12 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.11 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net…
Posted by Gary D. Gregory on Oct 06 Severity: low CVSS 3.1: 4.7 (medium) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS 4.0: 2.3 (low)…
Posted by Gary D. Gregory on Oct 06 Severity: important CVSS 3.1: 5.9 (medium) CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS 4.0: 8.2 (high)…
Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way…
arXiv:2610.07635v1 Announce Type: new Abstract: Compiler-introduced security bugs (CISBs) arise when an optimization, lowering, or instrumentation decision changes a security-relevant property of the…
X.Org fixed 12 security flaws in the X server and Xwayland, with the repairs shipping in xorg-server 21.1.25 and xwayland-24.1.14. Nine of the flaws can lead to arbitrary code execution. The other…
Splunk remedied common vulnerabilities and exposures (CVEs) in third-party packages in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 or higher.
