Dell fixes CVE-2024-37143 and CVE-2024-38144 vulnerabilities

Dell has recently released security updates to address multiple vulnerabilities affecting several of its enterprise products, including PowerFlex, InsightIQ, and Data Lakehouse. The vulnerabilities, identified as CVE-2024-37143 with a CVSS score of 10 and CVE-2024-37144 with a CVSS score of 8.2, pose significant risks, ranging from remote code execution to information disclosure. Overview of the […]

Sophos fixes Triple Critical Vulnerabilities in its Firewall

thecyberthrone.in - 20/Dec 17:05

Sophos released patches for three critical security vulnerabilities in their widely-used network security tool, Sophos Firewall that posed significant...

CISA adds BeyondTrust CVE-2024-12356 to its KEV Catalog

thecyberthrone.in - 20/Dec 01:22

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-12356:...

Fortinet fixes several vulnerabilities including CVE-2023-34990

thecyberthrone.in - 19/Dec 15:33

Fortinet has released patches for vulnerabilities affecting its popular products, including FortiClient VPN, FortiManager, and FortiWLM. These flaws...

CISA KEV Catalog Update Part V – December 2024

thecyberthrone.in - 19/Dec 02:44

The US CISA has added the following vulnerabilities to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation...

Apache Tomcat fixes CVE-2024-50379 and CVE-2024-54677

thecyberthrone.in - 18/Dec 15:46

The Apache Software Foundation has released patches to mitigate two newly discovered vulnerabilities in Apache Tomcat, an extensively used open-source...

U.S. CISA adds BeyondTrust software flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 20/Dec 10:43

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection...

CISA KEV Catalog Update Part IV – December 2024

thecyberthrone.in - 17/Dec 01:45

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation....

Django was affected by CVE-2024-53907 and CVE-2024-53908

thecyberthrone.in - 08/Dec 11:01

The Django team has released Django 5.1.4, Django 5.0.10, and Django 4.2.17 versions to address two security vulnerabilities. The first...

Apache Superset 4.1.0 released with bug fixes

thecyberthrone.in - 11/Dec 13:20

The Apache Software Foundation has announced the release of Apache Superset 4.1.0 with several bug fixes that could potentially allow attackers to...

CISA adds CVE-2024-49138 to its KEV Catalog

thecyberthrone.in - 11/Dec 07:38

The US CISA adds Microsoft vulnerability to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. The...

Rubriques :