BIG-IP F5 affected by a vulnerability CVE-2024-45844

A critical vulnerability has been identified in F5 BIG-IP that could allow authenticated attackers to bypass access control restrictions and potentially compromise the system. The vulnerability tracked as CVE-2024-45844 with a CVSS score of 8.6 exists within the BIG-IP monitor functionality that allow an authenticated attacker with at least manager role privileges to elevate their […]

F5 fixed a high-severity elevation of privilege vulnerability in BIG-IP

securityaffairs.co - 20/Oct 09:14

Technology firm F5 patches a high-severity elevation of privilege vulnerability in BIG-IP and a medium-severity flaw in BIG-IQ. F5 addressed two...

Grafana fixes a critical vulnerability CVE-2024-9264

thecyberthrone.in - 19/Oct 04:04

Grafana has been affected by critical security vulnerability , could allow attackers to execute arbitrary code on affected systems, potentially...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Cisco released patches for critical vulnerabilities in FMC FTD and ASA Products

thecyberthrone.in - 24/Oct 12:12

Cisco has released multiple advisories and patches for vulnerabilities for in its product portfolios FMC The first vulnerability tracked as...

Progress fixes Critical vulnerability in Whatsup Gold

thecyberthrone.in - 28/Oct 14:31

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to...

VMware fixes CVE-2024-38814 in HCX

thecyberthrone.in - 17/Oct 15:06

Broadcom disclosed a SQL injection vulnerability affecting VMware HCX, a key component used in multi-cloud infrastructures to enable application...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Trend Micro fixes Critical Vulnerability CVE-2024-48904

thecyberthrone.in - 19/Oct 13:02

Trend Micro has patched a command injection vulnerability in its Cloud Edge appliance that could allow a remote attacker to execute arbitrary code on...

A critical flaw in Kubernetes Image Builder could allow attackers to gain root access

securityaffairs.co - 17/Oct 09:49

A critical flaw in Kubernetes Image Builder could allow attackers to gain root access if exploited under specific conditions. A critical, Kubernetes...

Apache CloudStack fixes several vulnerabilities

thecyberthrone.in - 17/Oct 08:35

Apache CloudStack project has announced the release of LTS security releases 4.18.2.4 and 4.19.1.2 to address four security vulnerabilities The most...

Rubriques :