Cyber alerts

0 results

January 2024

Published Friday 12 January 2024 (03:26) (updated 12 January 2024)

Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

The vulnerability could allow an authenticated attacker to perform Remote Code Execution (RCE) on the machine where ADSelfService Plus is installed

CC-4436 Medium

Published Tuesday 16 January 2024 (02:50) (updated 16 January 2024)

VMware Releases Critical Security Update for VMware Aria Automation

Security update addresses a Missing Access Control vulnerability in the VMware Aria Automation platform

CC-4432 High

Published Thursday 11 January 2024 (02:25) (updated 16 January 2024)

Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure Gateways

Ivanti has disclosed two zero-day vulnerabilities in Ivanti Connect Secure (ICS) and Ivanti Policy Secure that can allow remote attackers to execute arbitrary commands on targeted devices

CC-4438 Medium

Published Wednesday 17 January 2024 (04:39) (updated 17 January 2024)

Google Releases Security Update Addressing Zero-Day Vulnerability in Google Chrome

Security update addresses three high severity vulnerabilities in Google Chrome including one which is actively exploited, along with one additional undisclosed vulnerability

CC-4440 Medium

Published Friday 19 January 2024 (03:11) (updated 19 January 2024)

Exploitation of Remote Unauthenticated API Access Vulnerability in Ivanti Endpoint Manager Mobile

Critical severity vulnerability could allow an attacker to access restricted functionality or resources

CC-4437 Medium

Published Tuesday 16 January 2024 (04:27) (updated 24 January 2024)

Atlassian Releases Security Updates for Critical Vulnerability in Confluence Data Center and Server

The security update addresses a template injection vulnerability in Confluence Data Center and Server

CC-4442 Medium

Published Wednesday 24 January 2024 (01:43) (updated 25 January 2024)

Critical Vulnerability in Fortra GoAnywhere MFT

The security update addresses a critical authentication bypass vulnerability affecting GoAnywhere MFT

CC-4443 Low

Published Thursday 25 January 2024 (12:08) (updated 25 January 2024)

High Vulnerability in Orthanc Osimis DICOM Web Viewer

The cross-site scripting (XSS) vulnerability could result in arbitrary code execution in the targeted user's browser

CC-4441 Medium

Published Wednesday 24 January 2024 (12:15) (updated 25 January 2024)

Apple Releases Security Updates for Zero Day Vulnerability for Multiple Products

The security update addresses twenty-eight vulnerabilities for multiple products, including one zero day vulnerability

October 2023

CC-4397 Medium

Published Wednesday 25 October 2023 (02:01) (updated 19 January 2024)

VMware Releases Security Updates for VMWare vCenter Server and Cloud Foundation

VMware releases security updates to address a critical out-of-bounds write and information disclosure vulnerability in vCenter Server and Cloud Foundation products