Aggregator

A vulnerability was found in Cisco Nexus Dashboard Fabric Controller. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component REST API Endpoint. The manipulation leads to argument injection. This vulnerability is known as CVE-2024-20444. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Nexus Dashboard. It has been classified as critical. Affected is an unknown function of the component REST API Endpoint. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-20442. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Nexus Dashboard Fabric Controller up to 12.2.1 and classified as critical. This issue affects some unknown processing of the component REST API Endpoint. The manipulation leads to protection mechanism failure. The identification of this vulnerability is CVE-2024-20438. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Cisco Nexus Dashboard Fabric Controller up to 12.2.1 and classified as critical. This vulnerability affects unknown code of the component REST API/Web UI. The manipulation leads to command injection. This vulnerability was named CVE-2024-20432. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Cisco Nexus Dashboard Orchestrator. This affects an unknown part of the component NDO Validate Peer Certificate Site Management. The manipulation leads to improper certificate validation. This vulnerability is uniquely identified as CVE-2024-20385. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Cisco Unified Computing System. Affected by this issue is some unknown functionality of the component Redfish API. The manipulation leads to command injection. This vulnerability is handled as CVE-2024-20365. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Cisco RV042, RV042G, RV320 and RV325. Affected by this vulnerability is an unknown functionality of the component Web-based Management Interface. The manipulation leads to stack-based buffer overflow. This vulnerability is known as CVE-2024-20518. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Multiple flaws in DrayTek residential and enterprise routers can be exploited to fully compromise vulnerable devices. Forescout researchers discovered 14 new vulnerabilities in DrayTek routers, two of which have been rated as critical. Of the 14 security flaws nine are rated high, and three are rated medium in severity. The flaws impact residential and enterprise […]

A vulnerability classified as critical has been found in Cisco RV340, RV340W, RV345 and RV345P. Affected is an unknown function of the component Web-based Management Interface. The manipulation leads to improper neutralization of expression/command delimiters. This vulnerability is traded as CVE-2024-20470. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Acrobat Reader up to 11.0.16/15.006.30174/15.016.20045 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2016-4211. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

ИИ против опытных радиологов в новом эксперименте.

A vulnerability was found in magzter Where Dallas 3.0.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is handled as CVE-2014-7334. The attack can only be initiated within the local network. There is no exploit available.

IntroductionIn the ever-evolving landscape of cybersecurity, logs, that is informatio

Authors:(1) Yinwei Dai, Princeton University (Equal contributions);(2) Rui Pan, Princeton Univers

Three different organizations in the U.S. were targeted in August 2024 by a North Korean state-spon

Проект FlyWire открывает путь к новым открытиям в нейробиологии

A vulnerability, which was classified as problematic, has been found in Apache Airflow up to 2.5.x. This issue affects some unknown processing of the component Run Task Handler. The manipulation leads to execution with unnecessary privileges. The identification of this vulnerability is CVE-2023-39508. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in WP ULike Plugin up to 4.7.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-6094. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in AMD EPYC 7001 Processors, EPYC 7002 Processors, EPYC 7003 Processors, EPYC 9004 Processors, Ryzen 7000 Desktop Processors, Ryzen Threadripper PRO 5000WX Processors, Ryzen 7020 Processors with Radeon Graphics, Ryzen 6000 Processors with Radeon Graphics, Ryzen 7035 Processors with Radeon Graphics, EPYC Embedded 3000, EPYC Embedded 7002, EPYC Embedded 7003, EPYC Embedded 9003, Ryzen Embedded 7000 and RyzenTM Embedded V3000. It has been rated as critical. This issue affects some unknown processing of the component SMM. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2023-20578. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenText Identity Manager REST Driver and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to sensitive information in log files. This vulnerability is handled as CVE-2022-26322. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.