CVE-2024-56512 impacts Apache NiFi

CVE-2024-56512 is a security vulnerability identified in Apache NiFi, specifically affecting versions 1.10.0 through 2.0.0. This vulnerability is due to missing fine-grained authorization checks when creating new Process Groups. Nature of the Vulnerability When creating a new Process Group in Apache NiFi, the framework did not perform authorization checks for the following: Because of this […]

TheCyberThrone Security Weekly Review – January 04, 2025

thecyberthrone.in - 05/Jan 12:47

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending...

Exploit Code released for Apache Traffic Control Flaw CVE-2024-45387

thecyberthrone.in - 30/12/2024 10:33

What is CVE-2024-45387? CVE-2024-45387 is a critical vulnerability identified in Apache Traffic Control, specifically affecting the Traffic Ops module...

CVE-2024-52046 Impacts Apache Mina

thecyberthrone.in - 26/12/2024 13:00

CVE-2024-52046 is a critical security vulnerability found in the Apache MINA library. This vulnerability is located within the...

CVE-2024-23945 Impacts Apache Hive and Spark

thecyberthrone.in - 25/12/2024 17:11

Apache Hive and Apache Spark have been impacted by a vulnerability CVE-2024-23945 with a CVSS score of 8.7.This vulnerability specifically targets the...

CVE-2024-43405 Vulnerability in Nuclei

thecyberthrone.in - 02:07

CVE-2024-43405 is a high severity vulnerability identified in Nuclei, a widely used open-source vulnerability scanner. This vulnerability, affecting...

CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability

thecyberthrone.in - 09:17

CVE-2024-10957 is a high-severity vulnerability affecting the UpdraftPlus: WP Backup & Migration Plugin for WordPress. This vulnerability, present...

CVE-2024-12987 affecting DrayTek Routers

thecyberthrone.in - 01/Jan 09:58

CVE-2024-12987 is a critical security vulnerability identified in the DrayTek Vigor2960 and Vigor300B routers, specifically affecting firmware version...

CVE-2024-45387 Critical Bug in Apache Traffic Control

thecyberthrone.in - 25/12/2024 15:00

CVE-2024-45387 represents a significant security concern within the Traffic Ops component of Apache Traffic Control, specifically impacting versions...

CVE-2024-12108: Progress WhatsUp Gold Vulnerability

thecyberthrone.in - 02/Jan 13:59

CVE-2024-12108 with a CVSS score of 9.6 is a critical security vulnerability affecting WhatsUp Gold, a network monitoring software developed by...

CVE-2024-43441Impacts Apache HugeGraph

thecyberthrone.in - 26/12/2024 03:41

CVE-2024-43441 is a critical vulnerability that impacts Apache HugeGraph-Server. This vulnerability allows attackers to bypass authentication...

Rubriques :