Grafana fixes a critical vulnerability CVE-2024-9264

Grafana has been affected by critical security vulnerability , could allow attackers to execute arbitrary code on affected systems, potentially leading to complete system compromise. The vulnerability tracked as CVE-2024-9264 with a CVSS v3.1 score of 9.9, stems from an experimental feature called SQL Expressions, which allows users to post-process data source queries using SQL. […]

Solarwinds fixes Critical vulnerability CVE-2024-28988 in WHD Product

thecyberthrone.in - 18/Oct 05:50

SolarWinds, has issued a patch for addressing a severe vulnerability in its Web Help Desk (WHD) platform. If exploited, could allow remote attackers...

SolarWinds Web Help Desk Vulnerability Allows Remote Code Execution

itsecuritynews.info - 18/Oct 08:09

A critical vulnerability in SolarWinds Web Help Desk has been identified. It could allow attackers to execute arbitrary code on affected systems. The...

Trend Micro fixes Critical Vulnerability CVE-2024-48904

thecyberthrone.in - 19/Oct 13:02

Trend Micro has patched a command injection vulnerability in its Cloud Edge appliance that could allow a remote attacker to execute arbitrary code on...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

BIG-IP F5 affected by a vulnerability CVE-2024-45844

thecyberthrone.in - 20/Oct 16:18

A critical vulnerability has been identified in F5 BIG-IP that could allow authenticated attackers to bypass access control restrictions and...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Cisco released patches for critical vulnerabilities in FMC FTD and ASA Products

thecyberthrone.in - 24/Oct 12:12

Cisco has released multiple advisories and patches for vulnerabilities for in its product portfolios FMC The first vulnerability tracked as...

PSAUX Ransomware exploits CyberPanel Vulnerabilities

thecyberthrone.in - 13:39

The PSAUX ransomware has seen exploiting CyberPanel vulnerabilities affects versions 2.3.6 and 2.3.7 and permits unauthenticated attackers to gain...

Apache CloudStack fixes several vulnerabilities

thecyberthrone.in - 17/Oct 08:35

Apache CloudStack project has announced the release of LTS security releases 4.18.2.4 and 4.19.1.2 to address four security vulnerabilities The most...

QNAP fixes CVE-2024-50388 that’s exploited in Pwn2Own Ireland

thecyberthrone.in - 10:13

QNAP has addressed a critical zero-day vulnerability in its HBS 3 Hybrid Backup Sync software, following its successful exploitation at the recent...

Rubriques :