Risk Discovery

	[ News \| Blogs \| Reddits \| Lists \| Media \| ? ] HoneyDB
	[ vulnerabilities \| tools ]

Bugtraq

Alerts

CISA Releases Updated Cybersecurity Performance Goals

CISA Releases Eight Industrial Control Systems Advisories

CISA and NSA Release Enduring Security Framework Guidance on Identity and Access Management

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

CISA Releases Eight Industrial Control Systems Advisories

FBI, CISA, and MS-ISAC Release #StopRansomware: LockBit 3.0

CISA Adds One Known Exploited Vulnerability to Catalog

Beware of Bank-Related Scams

CISA Releases SCuBA Hybrid Identity Solutions Architecture Guidance Document for Public Comment

WaterISAC Releases Advisory for Microsoft DCOM Patch

CVEMAP [ Powered by cxsecurity.com ]

Low CVE-2023-0687: GNU Glibc

Low CVE-2020-36660: Eve ship replacement program project Eve ship replacement program

Medium CVE-2022-36728: Library management system project Library management system

Low CVE-2021-30071: Hestiacp Hestiacp

Low CVE-2022-36880: Webmin Usermin

Medium CVE-2022-29286: Pexip Pexip infinity

Medium CVE-2022-26352: Dotcms Dotcms

Low CVE-2022-27930: Pexip Pexip infinity

Medium CVE-2022-27929: Pexip Pexip infinity

Medium CVE-2022-26657: Pexip Pexip infinity

Latest security vulnerabilities Apache Tomcat

Latest security vulnerabilities Modsecurity Modsecurity

Full Disclosure

Re: Microsoft PlayReady security research

Defense in depth -- the Microsoft way (part 83): instead to fix even their most stupid mistaskes, they spill barrels of snakeoil to cover them (or just leave them as-is)

[CFP] Security BSides Ljubljana 0x7E7 | June 16, 2023

Full Disclosure - Fastly

Full Disclosure - Shopify Application

[CVE-2023-25355/25356] No fix available - vulnerabilities in CoreDial sipXcom sipXopenfire

SEC Consult SA-20230306-0 :: Multiple Vulnerabilities in Arris DG3450 Cable Gateway

OpenBSD overflow

SEC Consult SA-20230228-0 :: OS Command Injectionin Barracuda CloudGen WAN

SRP on Windows 11

Bulletins

Vulnerability Summary for the Week of July 27, 2020

4-20 VB Low TAble

Vulnerability Summary for the Week of December 16, 2019

Vulnerability Summary for the Week of June 17, 2019

Vulnerability Summary for the Week of November 5, 2018

Vulnerability Summary for the Week of August 13, 2018

Vulnerability Summary for the Week of January 8, 2018

Vulnerability Summary for the Week of August 21, 2017

Vulnerability Summary for the Week of February 6, 2017

Vulnerability Summary for the Week of June 6, 2016

Latest security vulnerabilities Apple Iphone Os

Latest security vulnerabilities PHP PHP

Open Source Security

Re: TTY pushback vulnerabilities / TIOCSTI

Multiple vulnerabilities in Jenkins plugins

Xen Security Advisory 429 v3 (CVE-2022-42331) - x86: speculative vulnerability in 32bit SYSCALL path

Xen Security Advisory 428 v3 (CVE-2022-42333,CVE-2022-42334) - x86/HVM pinned cache attributes mis-handling

Xen Security Advisory 427 v2 (CVE-2022-42332) - x86 shadow plus log-dirty mode use-after-free

CVE-2023-26513: Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS

[SECURITY ADVISORY] curl: CVE-2023-27538: SSH connection too eager reuse still

[SECURITY ADVISORY] curl: CVE-2023-27537: HSTS double-free

[SECURITY ADVISORY] curl: CVE-2023-27536: GSS delegation too eager connection re-use

[SECURITY ADVISORY] curl: CVE-2023-27535: FTP too eager connection reuse

Microsoft Sec Notification

Latest security vulnerabilities Google Android

Latest security vulnerabilities Linux Linux Kernel