Risk Discovery

CISA Advisories

CISA Releases Two Industrial Control Systems Advisories

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Siemens SICAM Products

FBI, CISA, and Partners Release Advisory Highlighting North Korean Cyber Espionage Activity

Positron Broadcast Signal Processor

ISC Releases Security Advisories for BIND 9

National Instruments IO Trace

National Instruments LabVIEW

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Hitachi Energy AFS/AFR Series Products

US-CERT

FBI, CISA, and Partners Release Advisory Highlighting North Korean Cyber Espionage Activity

CISA Releases Two Industrial Control Systems Advisories

ISC Releases Security Advisories for BIND 9

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Releases Four Industrial Control Systems Advisories

Widespread IT Outage Due to CrowdStrike Update

CISA Releases Three Industrial Control Systems Advisories

Oracle Releases Critical Patch Update Advisory for July 2024

Cisco Releases Security Updates for Multiple Products

Ivanti Releases Security Updates for Endpoint Manager

FullDisclosure

CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus

[KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability

[KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability

CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100

SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice

SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products

US CERT Weekly

Vulnerability Summary for the Week of July 15, 2024

Vulnerability Summary for the Week of July 8, 2024

Vulnerability Summary for the Week of July 1, 2024

Vulnerability Summary for the Week of June 24, 2024

Vulnerability Summary for the Week of June 17, 2024

Vulnerability Summary for the Week of June 10, 2024

Vulnerability Summary for the Week of June 3, 2024

Vulnerability Summary for the Week of May 27, 2024

Vulnerability Summary for the Week of May 20, 2024

Vulnerability Summary for the Week of May 13, 2024

Open Source Security

Re: GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow

Re: GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow

GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow

CVE-2024-25090: Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode

[ANNOUNCE] Apache Traffic Server is vulnerable to request smuggling and DoS

Re: [SECURITY ADVISORY] curl: CVE-2024-6197: freeing stack buffer in utf8asn1str

inux kernel: virtio-net host dos

CVE-2023-48362: Apache Drill: XXE Vulnerability in XML Format Reader

[SECURITY ADVISORY] curl: CVE-2024-6874: macidn punycode buffer overread

[SECURITY ADVISORY] curl: CVE-2024-6197: freeing stack buffer in utf8asn1str

CVEMAP

Low CVE-2023-0687: GNU Glibc

Low CVE-2020-36660: Eve ship replacement program project Eve ship replacement program

Medium CVE-2022-36728: Library management system project Library management system

Low CVE-2021-30071: Hestiacp Hestiacp

Low CVE-2022-36880: Webmin Usermin

Medium CVE-2022-29286: Pexip Pexip infinity

Medium CVE-2022-26352: Dotcms Dotcms

Low CVE-2022-27930: Pexip Pexip infinity

Medium CVE-2022-27929: Pexip Pexip infinity

Medium CVE-2022-26657: Pexip Pexip infinity

© 2024 RiskDiscovery | Sponsored by: Deception Logic