Atlassian fixes CVE-2024-21689 vulnerability in Bamboo

Atlassian has issued a patch for a high severity vulnerability in its Bamboo Data Center and Server products, which is a Remote Code Execution. The vulnerability tracked as CVE-2024-21689 with a CVSS score of 7.6, which stems in several versions of Bamboo Data Center and Server, specifically versions 9.1.0 through 9.6.0. The vulnerability allows an […]

VMware fixes bad patch for critical vCenter Server RCE flaw

bleepingcomputer.com - 22/Oct 14:08

VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not...

VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812

securityaffairs.co - 22/Oct 07:30

VMware addressed a remote code execution flaw, demonstrated in a Chinese hacking contest, for the second time in two months. VMware failed to fully...

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Oracle fixes CVE-2024-21216 in Weblogic Server

thecyberthrone.in - 21/Oct 14:58

Oracle has released patches as part of its October 2024 Critical Patch Update (CPU), addressing 329 vulnerabilities across a variety of products....

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Squid Proxy has a DoS Vulnerability CVE-2024-45802

thecyberthrone.in - 30/Oct 06:47

The SQUID project has released patches for a high-severity DoS vulnerability in Squid. This vulnerability, tracked as CVE-2024-45802 with...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Microsoft SharePoint RCE bug exploited to breach corporate network

bleepingcomputer.com - 02/Nov 15:19

A recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial...

Rubriques :