Categoria: vulnerability

Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution

fortinet-patches-critical-fortios-vulnerability-leading-to-remote-code-execution

Fortinet patches a critical-severity vulnerability in FortiOS and FortiProxy that could lead to remote code execution.

The post Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution appeared first on SecurityWeek.

Critical Vulnerability Can Allow Takeover of Mastodon Servers

critical-vulnerability-can-allow-takeover-of-mastodon-servers

A critical vulnerability in the Mastodon social networking platform may allow attackers to take over target servers.

The post Critical Vulnerability Can Allow Takeover of Mastodon Servers appeared first on SecurityWeek.

StackRot Linux Kernel Vulnerability Shows Exploitability of UAFBR Bugs

stackrot-linux-kernel-vulnerability-shows-exploitability-of-uafbr-bugs

A new Linux kernel vulnerability tracked as StackRot and CVE-2023-3269 shows the exploitability of use-after-free-by-RCU (UAFBR) bugs.

The post StackRot Linux Kernel Vulnerability Shows Exploitability of UAFBR Bugs appeared first on SecurityWeek.

MITRE Updates CWE Top 25 Most Dangerous Software Weaknesses

mitre-updates-cwe-top-25-most-dangerous-software-weaknesses

Use-after-free and OS command injection vulnerabilities reach the top five most dangerous software weaknesses in the 2023 CWE Top 25 list.

The post MITRE Updates CWE Top 25 Most Dangerous Software Weaknesses appeared first on SecurityWeek.

Serious Vulnerability Exposes Admin Interface of Arcserve UDP Backup Solution

serious-vulnerability-exposes-admin-interface-of-arcserve-udp-backup-solution

Researchers publish PoC for a high-severity authentication bypass vulnerability in the Arcserve UDP data backup solution.

The post Serious Vulnerability Exposes Admin Interface of Arcserve UDP Backup Solution appeared first on SecurityWeek.

Vulnerabilities in Honda eCommerce Platform Exposed Customer, Dealer Data

vulnerabilities-in-honda-ecommerce-platform-exposed-customer,-dealer-data

Vulnerabilities found by a researcher in a Honda ecommerce platform used for equipment sales exposed customer and dealer information.

The post Vulnerabilities in Honda eCommerce Platform Exposed Customer, Dealer Data appeared first on SecurityWeek.

High-Severity Vulnerabilities Patched in Splunk Enterprise

high-severity-vulnerabilities-patched-in-splunk-enterprise

Splunk has resolved multiple high-severity vulnerabilities in Splunk Enterprise, including bugs in third-party packages used by the product.

The post High-Severity Vulnerabilities Patched in Splunk Enterprise appeared first on SecurityWeek.

Critical Vulnerabilities Found in Faronics Education Software

critical-vulnerabilities-found-in-faronics-education-software

Faronics patches critical-severity remote code execution (RCE) vulnerabilities in the Insight education software.

The post Critical Vulnerabilities Found in Faronics Education Software appeared first on SecurityWeek.

Many Vulnerabilities Found in PrinterLogic Enterprise Software

many-vulnerabilities-found-in-printerlogic-enterprise-software

Multiple vulnerabilities in PrinterLogic’s enterprise management printer solution could expose organizations to various types of attacks.

The post Many Vulnerabilities Found in PrinterLogic Enterprise Software appeared first on SecurityWeek.

GitLab Security Update Patches Critical Vulnerability

gitlab-security-update-patches-critical-vulnerability

GitLab CE/EE version 16.0.1 patches a critical arbitrary file read vulnerability tracked as CVE-2023-2825.

The post GitLab Security Update Patches Critical Vulnerability appeared first on SecurityWeek.