Coverage tagged "Vulnerability".
Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file…
It was discovered that FreeType had a flaw in its CID font loader. An attacker could possibly use this issue to cause FreeType to consume excessive memory and CPU resources, leading to a denial of…
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of…
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either…
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built…
Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. DSU…
Shaomin Chen discovered that sg3_utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands.
It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion.
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory…
arXiv:2610.04141v1 Announce Type: new Abstract: Matter aims to unify smart home ecosystems through an open, interoperable, and secure standard, relying on cryptographic mechanisms for device…
arXiv:2610.04396v1 Announce Type: new Abstract: Split Computing (SC) enables efficient deployment of Deep Neural Networks (DNNs) by partitioning inference between edge devices and cloud servers…
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE).
Serial Number: AV26-1000 Date: October 5, 2026 As of October 5, 2026, Hewlett Packard Enterprise (HPE) is affected by a vulnerability in the following product: HPE Integrated Lights-Out (iLO) 7 Prior…
Serial Number: AV26-999 Date: October 5, 2026 As of October 5, 2026, Progress Software is affected by vulnerabilities in the following product: Progress Telerik Fiddler Classic Prior to…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.0.0 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Serial Number: AV26-998 Date: October 5, 2026 As of October 2, 2026, GeoVision Inc. is affected by vulnerabilities in the following product: GV-Eye Versions prior to V3.6.0 Android The Cyber Centre…
Posted by Lukasz Lenart on Oct 05 Severity: important Affected versions: - Apache Struts 2.1.8 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.5.14 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts 7.0.0 through 7.3.0 Description…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.0.0 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities…
