GitLab fixes critical vulnerability CVE-2024-45409

GitLab has released security patches for a critical vulnerability that affects both GitLab Community Edition (CE) and Enterprise Edition (EE) that allows a threat actor to bypass authentication checks and gain access to sensitive GitLab projects, including source code repositories, without needing to supply valid credentials. The flaw, identified as CVE-2024-45409, with a CVSS score of 10, […]

Progress fixes Critical vulnerability in Whatsup Gold

thecyberthrone.in - 28/Oct 14:31

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to...

Veeam Fixes CVE-2024-40715 with a hotfix release

thecyberthrone.in - 07/Nov 13:58

Veeam has released a patch for a vulnerability impacting Veeam Backup Enterprise Manager. that is vulnerable to Man-in-the-Middle (MITM)...

TheCyberThrone CyberSecurity Newsletter Top 5 Articles – October, 2024

thecyberthrone.in - 01/Nov 02:18

Welcome to TheCyberThrone cybersecurity month in review will be posted covering the important security happenings . This review is for the month...

CISA adds PTZOptics flaws to its KEV Catalog

thecyberthrone.in - 05/Nov 07:32

The US CISA has added PTZOptics flaws to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. CVE-2024-8956 ...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766

securityaffairs.co - 29/Oct 11:51

Fog and Akira ransomware operators are exploiting SonicWall VPN flaw CVE-2024-40766 to breach enterprise networks. Fog and Akira ransomware operators...

Vulnerability Summary for the Week of October 28, 2024

itsecuritynews.info - 04/Nov 17:38

High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info acnoo — flutter_api Authentication Bypass...

Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)

itsecuritynews.info - 07/Nov 09:36

Cisco has fixed a critical command injection vulnerability (CVE-2024-20418) affecting its Ultra-Reliable Wireless Backhaul (URWB) Access Points that...

Rubriques :