Cyber alerts

719 results

April 2024

Published Thursday 18 April 2024 (04:29) (updated 18 April 2024)

Cisco Releases Advisories for Command Injection Vulnerabilities in Multiple Products

Two vulnerabilities found in devices using Cisco Integrated Management Controller (IMC) could lead to privilege escalation

CC-4480 Medium

Published Thursday 18 April 2024 (04:25) (updated 18 April 2024)

VMware Releases Security Updates for SD-WAN Edge and SD-WAN Orchestrator

The vulnerabilities could allow an attacker to remotely execute code, access the BIOS configuration or redirect a victim to an attacker-controlled domain

CC-4479 Medium

Published Thursday 18 April 2024 (01:54) (updated 18 April 2024)

Atlassian Releases April 2024 Security Bulletin

Six vulnerabilities affect Atlassian's Bamboo, Confluence, Jira, and Jira Service Management product lines

CC-4478 Medium

Published Wednesday 17 April 2024 (01:25) (updated 17 April 2024)

Multiple Vulnerabilities Affecting Ivanti Avalanche

Security update includes remediations for 27 vulnerabilities, two of which are critical severity.

CC-4477 High

Published Friday 12 April 2024 (02:15) (updated 18 April 2024)

Palo Alto Releases Critical Security Update for PAN-OS GlobalProtect Gateway

Successful exploitation of CVE-2024-3400 could lead to remote code execution

CC-4476 Medium

Published Wednesday 10 April 2024 (03:05) (updated 10 April 2024)

Microsoft Releases April 2024 Security Updates

Scheduled updates for Microsoft products, including security updates for 149 vulnerabilities with 2 reported as actively exploited

CC-4475 Medium

Published Wednesday 10 April 2024 (01:25) (updated 10 April 2024)

Fortinet Releases Multiple Security Advisories

The security advisories address a critical vulnerability in FortiClientLinux, a high vulnerability in FortiClientMac, and a high vulnerability in FortiOS and FortiProxy.

CC-4474 Medium

Published Thursday 4 April 2024 (01:10) (updated 4 April 2024)

Ivanti Releases Security Updates for Connect Secure and Policy Secure Gateways

Successful exploitation could lead to arbitrary code execution

CC-4473 Medium

Published Tuesday 2 April 2024 (03:48) (updated 3 April 2024)

Critical Vulnerability in XZ Utils for Linux

A critical vulnerability in XZ Utils could lead to RCE

CC-4472 Medium

Published Tuesday 2 April 2024 (01:43) (updated 2 April 2024)

Critical Vulnerability in Imperva SecureSphere Web Application Firewall

The critical vulnerability could allow an attacker to bypass Web Application Firewall (WAF) rules