latest vulnerabilities

 

High-Severity Flaws in ConnectedIO’s 3G/4G Routers Raise Concerns for IoT Security

High-Severity Flaws in ConnectedIO’s 3G/4G Routers Raise Concerns for IoT SecurityCVE IDCVE-2023-33375 (CVSS score: 8.6) – A stack-based buffer overflow vulnerability…
Read More

Citrix ADC Code Injection Vulnerability

Citrix ADC Code Injection VulnerabilityCVE IDCVE-2023-3519Exploit RatingyesRisk RatingCVSS9.8 – Zero-day Associated Threat actor Malware/campaignUnder Attack by multiple adversariesUser InteractionNoAffected ProductsNetScaler ADC…
Read More

Chromium Heap Buffer Overflow in WebP Vulnerability

Chromium Heap Buffer Overflow in WebP VulnerabilityCVE IDCVE-2023-4863Exploited in the wide YesRisk RatingCVSS9.8 / Zero-day Associated Threat actor Malware/campaign NoneUser InteractionNoneAffected Products Google Chrome…
Read More

Cisco ASA and FTD Software Remote Access VPN Unauthorized Access Vulnerability

Cisco ASA and FTD Software Remote Access VPN Unauthorized Access VulnerabilityCVE IDCVE-2023-20269Exploited in the wildYesRisk RatingCVSS6.5 /Zero Day Associated Threat actor Malware/campaignThis…
Read More

Aria Operations for Networks Authentication Bypass Vulnerability

Aria Operations for Networks Authentication Bypass VulnerabilityCVE IDCVE-2023-34039Exploited in the wideNoRisk RatingCVSS9.8 Associated Threat actor Malware/campaign Still unknownUser InteractionNoneAffected Products Impacts all Aria…
Read More

‘Clickless’ Zero-Day Image Processing Vulnerability in iOS, macOS

‘Clickless’ Zero-Day Image ProcessingVulnerability in iOS, macOSCVE IDCVE-2023-41064 / CVE-2023-41061Exploited in the wideYesRisk RatingCVSS9.8 Associated Threat actor Malware/campaign exploited in a chain…
Read More

Use-After-Free Affecting Mozilla

Use-After-Free Affecting MozillaCVE nameCVE-2022-26486Severity/CVSS ScoreCriticalCVSS: 9.8Exploitation StatusExploited in the Wild as a Zero-DayDescriptionIt allows for a use-after-free attack, which can…
Read More

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion VulnerabilityCVE nameCVE-2022-1096Severity/CVSS ScoreHighCVSS: 8.8Exploitation StatusExploited in the Wild as a Zero-DayDescriptionA type confusion vulnerability allows…
Read More

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution VulnerabilityCVE nameCVE-2023-21529Severity/CVSS ScoreHighCVSS:8.8Exploitation StatusExploited in the WildDescriptionremote code execution vulnerability associated with Ransomware in Microsoft Exchange…
Read More

Microsoft Outlook Security Feature Bypass Vulnerability

Microsoft Outlook Security Feature Bypass VulnerabilityCVE nameCVE-2023-35311Severity/CVSS ScoreHighCVSS:8.8Exploitation StatusExploited in the Wild as Zero-DayDescriptionThe vulnerability allows an attacker to bypass…
Read More
1 2 3 9