Spring Security fixes Critical Vulnerability CVE-2024-38821

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If exploited, this vulnerability could potentially allow unauthorized access to static resources, undermining application security. The vulnerability tracked as CVE-2024-38821 with a CVSS score of 9.1, stems in Spring WebFlux applications that meet all the following conditions: Affected […]

Progress fixes Critical vulnerability in Whatsup Gold

thecyberthrone.in - 28/Oct 14:31

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to...

Grafana fixes a critical vulnerability CVE-2024-9264

thecyberthrone.in - 19/Oct 04:04

Grafana has been affected by critical security vulnerability , could allow attackers to execute arbitrary code on affected systems, potentially...

Apache Solr fixes Critical Vulnerability CVE-2024-45216

thecyberthrone.in - 18/Oct 05:34

Apache Solr, has been affected by two security vulnerabilities that could present serious risks for organizations running affected Solr...

Spring framework fixes a High severity vulnerability CVE-2024-38819

thecyberthrone.in - 18/Oct 14:14

Spring Framework has been identified with a new path traversal vulnerability, poses a significant risk to applications serving static resources via...

Solarwinds fixes Critical vulnerability CVE-2024-28988 in WHD Product

thecyberthrone.in - 18/Oct 05:50

SolarWinds, has issued a patch for addressing a severe vulnerability in its Web Help Desk (WHD) platform. If exploited, could allow remote attackers...

A critical flaw in Kubernetes Image Builder could allow attackers to gain root access

securityaffairs.co - 17/Oct 09:49

A critical flaw in Kubernetes Image Builder could allow attackers to gain root access if exploited under specific conditions. A critical, Kubernetes...

QNAP fixes CVE-2024-50388 that’s exploited in Pwn2Own Ireland

thecyberthrone.in - 10:13

QNAP has addressed a critical zero-day vulnerability in its HBS 3 Hybrid Backup Sync software, following its successful exploitation at the recent...

VMware fixes CVE-2024-38814 in HCX

thecyberthrone.in - 17/Oct 15:06

Broadcom disclosed a SQL injection vulnerability affecting VMware HCX, a key component used in multi-cloud infrastructures to enable application...

BIG-IP F5 affected by a vulnerability CVE-2024-45844

thecyberthrone.in - 20/Oct 16:18

A critical vulnerability has been identified in F5 BIG-IP that could allow authenticated attackers to bypass access control restrictions and...

Kubernetes fixes Critical Vulnerability CVE-2024-9486

thecyberthrone.in - 17/Oct 01:43

The Kubernetes Security Response Committee has disclosed two security vulnerabilities in the Kubernetes Image Builder that could allow attackers to...

Rubriques :