Cyber alerts

1,001 results

April 2024

Published Monday 22 April 2024 (03:46) (updated 22 April 2024)

Zero-Day Vulnerability in CrushFTP

A zero-day vulnerability is being exploited in the wild that could allow an attacker to escape the virtual file system (VFS) and download system files

CC-4481 Medium

Published Thursday 18 April 2024 (04:29) (updated 18 April 2024)

Cisco Releases Advisories for Command Injection Vulnerabilities in Multiple Products

Two vulnerabilities found in devices using Cisco Integrated Management Controller (IMC) could lead to privilege escalation

CC-4480 Medium

Published Thursday 18 April 2024 (04:25) (updated 18 April 2024)

VMware Releases Security Updates for SD-WAN Edge and SD-WAN Orchestrator

The vulnerabilities could allow an attacker to remotely execute code, access the BIOS configuration or redirect a victim to an attacker-controlled domain

CC-4479 Medium

Published Thursday 18 April 2024 (01:54) (updated 18 April 2024)

Atlassian Releases April 2024 Security Bulletin

Six vulnerabilities affect Atlassian's Bamboo, Confluence, Jira, and Jira Service Management product lines

CC-4478 Medium

Published Wednesday 17 April 2024 (01:25) (updated 17 April 2024)

Multiple Vulnerabilities Affecting Ivanti Avalanche

Security update includes remediations for 27 vulnerabilities, two of which are critical severity.

CC-4476 Medium

Published Wednesday 10 April 2024 (03:05) (updated 10 April 2024)

Microsoft Releases April 2024 Security Updates

Scheduled updates for Microsoft products, including security updates for 149 vulnerabilities with 2 reported as actively exploited

CC-4475 Medium

Published Wednesday 10 April 2024 (01:25) (updated 10 April 2024)

Fortinet Releases Multiple Security Advisories

The security advisories address a critical vulnerability in FortiClientLinux, a high vulnerability in FortiClientMac, and a high vulnerability in FortiOS and FortiProxy.

CC-4474 Medium

Published Thursday 4 April 2024 (01:10) (updated 4 April 2024)

Ivanti Releases Security Updates for Connect Secure and Policy Secure Gateways

Successful exploitation could lead to arbitrary code execution

CC-4473 Medium

Published Tuesday 2 April 2024 (03:48) (updated 3 April 2024)

Critical Vulnerability in XZ Utils for Linux

A critical vulnerability in XZ Utils could lead to RCE

CC-4472 Medium

Published Tuesday 2 April 2024 (01:43) (updated 2 April 2024)

Critical Vulnerability in Imperva SecureSphere Web Application Firewall

The critical vulnerability could allow an attacker to bypass Web Application Firewall (WAF) rules