Coverage tagged "Vulnerability".
Posted by Eric Covener on Oct 01 Severity: low Affected versions: - Apache HTTP Server 2.4.0 through 2.4.68 Description: Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP…
Serial number: AV26-985 Date: October 1, 2026 As of October 1, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.80 Prior to 2.39.6 Prior to 2.40.1 The Cyber…
Posted by Eric Covener on Oct 01 Severity: low Affected versions: - Apache HTTP Server 2.4.30 through 2.4.68 Description: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response…
Posted by Eric Covener on Oct 01 Severity: low Affected versions: - Apache HTTP Server 2.4.0 through 2.4.68 Description: Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl…
Posted by Eric Covener on Oct 01 Severity: low Affected versions: - Apache HTTP Server 2.4.0 through 2.4.68 Description: NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor…
Cybersecurity has no shortage of metrics. Organizations track vulnerabilities discovered, tickets created, patches applied, remediation SLAs, and countless other measures of security activity. These…
Serial number: AV26-983 Date: October 1, 2026 As of September 30, 2026, CODESYS is affected by vulnerabilities in the following products: CODESYS Control RTE (SL) Prior to 3.5.22.40 CODESYS Control…
Serial number: AV26-982 Date: October 1, 2026 As of September 29, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: Instant ON Prior to or equal to…
Serial number: AV26-981 Date: October 1, 2026 As of September 30, 2026, WatchGuard is affected by a vulnerability in the following product: Fireware OS Prior to 12.12.3 Prior to 12.5.21 Prior to…
Serial number: AV26-980 Date: October 1, 2026 As of September 29, 2026, OpenSSL is affected by vulnerabilities in the following product: OpenSSL Prior to 1.0.2zs Prior to 1.1.1zj Prior to 3.0.23…
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security…
Serial number: AV26-979 Date: October 1, 2026 As of September 30, 2026, JetBrains is affected by vulnerabilities in the following products: Hub Prior to 2026.2.52366 IntelliJ IDEA Prior to 2026.2.3…
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
Legit Security has announced an expansion of its Agentic Remediation capability to cover vulnerabilities found in open-source dependencies, not just first-party code, enabling development teams to…
An unauthenticated attacker who can reach TCP 19009 on a Check Point management server can take it over completely. Bishop Fox reproduced the full root RCE chain on R81.10 and R82.10, breaks down all…
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a…
Posted by Abhishek Choudhary on Oct 01 Severity: CVSS 4.0: 5.1 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N Affected versions: - Apache APISIX 3.12.0 through 3.18.0…
Posted by Abhishek Choudhary on Oct 01 Severity: CVSS 4.0: 6.3 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Affected versions: - Apache APISIX 2.14.1 through 3.18.0…
Posted by Abhishek Choudhary on Oct 01 Severity: CVSS 4.0: 8.2 (high) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected versions: - Apache APISIX 1.3.0 through 3.18.0…
Posted by Abhishek Choudhary on Oct 01 Severity: CVSS 4.0: 2.1 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Affected versions: - Apache APISIX 3.17.0 through 3.18.0…
