AutomationDirect DirectLogic H2-DM1E

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable from an adjacent network/low attack complexity Vendor: AutomationDirect Equipment: DirectLogic H2-DM1E Vulnerabilities: Session Fixation, Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker…

Delta Electronics InfraSuite Device Master

itsecuritynews.info - 29/Oct 15:36

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: InfraSuite...

Solar-Log Base 15

itsecuritynews.info - 29/Oct 15:36

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Solar-Log...

CISA adds PTZOptics flaws to its KEV Catalog

thecyberthrone.in - 05/Nov 07:32

The US CISA has added PTZOptics flaws to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. CVE-2024-8956 ...

Vulnerability Summary for the Week of October 28, 2024

itsecuritynews.info - 04/Nov 17:38

High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info acnoo — flutter_api Authentication Bypass...

The CyberThrone most exploited vulnerabilities review – October 26, 2024

thecyberthrone.in - 28/Oct 11:53

Welcome to TheCyberThrone most exploited vulnerabilities review. This review is for the weeks ending Saturday, October 26, 2024. Fortinet...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

itsecuritynews.info - 04/Nov 16:34

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8957...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

TheCyberThrone CyberSecurity Newsletter Top 5 Articles – October, 2024

thecyberthrone.in - 01/Nov 02:18

Welcome to TheCyberThrone cybersecurity month in review will be posted covering the important security happenings . This review is for the month...

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

itsecuritynews.info - 04/Nov 15:11

Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited by a...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Rubriques :