Cyber alerts

Published Monday 19 February 2024 (01:33) (updated 19 February 2024)

SolarWinds Releases Critical Security Updates for Access Rights Manager

Updates address five vulnerabilities that could lead to remote code execution

Published Tuesday 20 February 2024 (02:12) (updated 22 February 2024)

ConnectWise Releases Critical Security Update for ScreenConnect

Exploitation of these vulnerabilities could allow an unauthenticated remote attacker to execute arbitrary code

Published Wednesday 28 February 2024 (02:33) (updated 28 February 2024)

Santesoft Release Security Update to Address Vulnerability in Sante DICOM Viewer Pro

CVE-2024-1453 could allow the disclosure of confidential information or arbitrary code execution on affected devices

Published Friday 1 March 2024 (04:15) (updated 1 March 2024)

MicroDicom Releases DICOM Viewer Software Update

Two vulnerabilities could allow an attacker to cause memory corruption issues leading to arbitrary code execution

Published Monday 4 March 2024 (04:46) (updated 4 March 2024)

SolarWinds Releases Security Update for Security Event Manager

Update addresses a vulnerability that could lead to RCE and 4 third-party vulnerabilities in SEM

Published Wednesday 6 March 2024 (11:39) (updated 6 March 2024)

Santesoft Releases Security Update for Sante FFT Imaging

The out-of-bounds write vulnerability could lead to arbitrary code execution

Published Wednesday 6 March 2024 (01:40) (updated 6 March 2024)

VMware Releases Critical Security Updates for Multiple Products

The vulnerabilities could allow an attacker to execute arbitrary code, escape the sandboxed environment, and read protected memory in VMware hypervisors

Published Tuesday 5 March 2024 (01:50) (updated 7 March 2024)

Critical Security Update Released for JetBrains TeamCity On-Premises

Exploitation of the two vulnerabilities could allow an attacker to gain administrative control of a TeamCity server

Published Friday 8 March 2024 (05:21) (updated 8 March 2024)

Cisco Releases Security Updates for Secure Client Software

Updates address two high severity vulnerabilities, one that could lead to arbitrary code execution and the other that could be used to establish a remote access VPN session with the privileges of the affected user

Published Thursday 7 March 2024 (01:53) (updated 11 March 2024)

Progress Releases Critical Security Update for OpenEdge Authentication Gateway and AdminServer

The critical vulnerability could allow an attacker to bypass authentication controls