4627 karet z 5124 položek
· strana 40 z 78
CZ ·
EN/orig
Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku.
Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl
jen odkazovat, třeba jako na starší kauzu.
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. [...]
Serial number: AV26-1022 Date: October 8, 2026 As of October 8, 2026, IBM is affected by vulnerabilities in the following products: IBM DataPower Gateway 10.5.0 Prior to or equal to 10.5.0.22 IBM DataPower Gateway 10.6.0 Prior to or equal to 10.6.0.10 IBM DataPower Gateway 10.6CD Prior to or equal to 10.6.6 IBM DataPower Gateway 11.0.0 Prior to or equal to 11.0.0.2 Langflow OSS Version 1.0.0 to 1.12.2 The Cyber Centre encourages users and administrators to review the provided web links and…
Welcome to this week’s edition of the Threat Source newsletter. My name is Pierre Cadieux, and I’ll be helping contribute to these newsletters. A little about me: I’ve been working in the cybersecurity industry in many roles over the past 20+ years, first focusing on endpoint security, policies, and firewalls, then moving to risk management and compliance, disaster recovery, and investigations. I spent about 15 years as a consultant working across many well-known consultancy firms and…
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. [...]
Serial number: AV26-1021 Date: October 8, 2026 As of October 6, 2026, Elastic is affected by vulnerabilities in the following products: Elasticsearch Prior to or equal to 8.19.23 Prior to or equal to 9.4.8 Prior to or equal to 9.5.5 Kibana Prior to or equal to 8.19.22 Prior to or equal to 9.4.7 Prior to or equal to 9.5.4 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Elasticsearch 8.19.23, 9.4.8, 9…
Serial number: AV26-1020 Date: October 8, 2026 As of October 7, 2026, Cisco is affected by vulnerabilities in the following products: Cisco Nexus 3000 Series Switches Multiple versions and models Cisco Nexus 9000 Series Switches Multiple versions and models UCS 6300 Series Fabric Interconnect Prior to 4.3(6.260049) Meraki Campus Gateways Prior to 32.2.5 (late Oct 2026) Prior to 33.1.4 (mid-Nov 2026) Meraki MG Cellular Gateways Prior to 26.1.4 Meraki MR Wireless Access Points Multiple versions…
Serial number: AV26-1019 Date: October 8, 2026 As of October 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Vault Community Edition Prior to 2.1.2 Vault Enterprise Prior to 1.19.23 Prior to 1.20.17 Prior to 1.21.12 Prior to 2.1.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries…
Rilasciati aggiornamenti di sicurezza per Docker Engine e per il modulo Go del progetto Moby che risolvono una vulnerabilità di gravità alta. Tale vulnerabilità, dovuta a un'errata gestione delle risposte DNS, potrebbe consentire a un attaccante di compromettere la sicurezza delle connessioni ai registri delle immagini container, causando la possibile esposizione delle credenziali di autenticazione o la sostituzione delle immagini legittime con contenuti malevoli.
Serial number: AV26-1018 Date: October 8, 2026 As of October 7, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to 10.0.10 Prior to 10.2.7 Prior to 10.4.3 Prior to 9.4.15 Splunk MCP Server Prior to 1.2.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Vulnerabilities in Splunk Enterprise - September/October 2026 - SVD-2026-1001 Security…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. The following versions of Satel Netco Design are affected: Satel Netco Design CVSS Vendor Equipment v3 8.8 Satel Satel Netco Design 3 Vulnerabilities Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'),…
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a specific URL on the device. This action can be scripted on the malicious user's local machine to cause continuous rebooting of the switch. The following versions of Red Lion Controls N-Tron 700…
HashiCorp ha rilasciato aggiornamenti di sicurezza che sanano 4 vulnerabilità, di cui 2 con gravità "alta", in Vault Enterprise e Community Edition, soluzioni per la gestione centralizzata e sicura di segreti, credenziali e accessi. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato autenticato, in determinate condizioni, di elevare i propri privilegi ed eseguire codice arbitrario sui sistemi interessati.
Kiteworks heeft meerdere kwetsbaarheden verholpen in de Kiteworks productlijn. De kwetsbaarheden in Kiteworks betreffen diverse componenten en functionaliteiten binnen de producten. - Geauthenticeerde beheerders kunnen onder andere misbruik maken van onvoldoende validatie in import- en exportfuncties, wat leidt tot het schrijven van bestanden op willekeurige locaties en het uitvoeren van arbitrary code. - Er zijn meerdere gevallen van privilege-escalatie waarbij gebruikers met beperkte rechten…
Rilasciati aggiornamenti di sicurezza per X server, componente fondamentale del sistema grafico utilizzato in numerosi ambienti Unix e Linux, e per Xwayland, livello di compatibilità che consente l'esecuzione di applicazioni X11 in ambienti Wayland. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di compromettere la disponibilità del servizio, accedere ad informazioni sensibili ed eseguire codice arbitrario sui sistemi interessati.
Rilevate molteplici nuove vulnerabilità in prodotti Splunk, di cui 3 con gravità "critica" e 3 con gravità "alta" in Splunk Enterprise. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato, in determinate condizioni, di eseguire codice arbitrario, eludere meccanismi di sicurezza ed elevare i propri privilegi sui sistemi interessati.
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco License On-Prem. De kwetsbaarheden bevinden zich in de webgebaseerde managementinterface en API-eindpunten van Cisco License On-Prem. Niet-geauthenticeerde aanvallers kunnen onder meer wachtwoorden resetten, bestanden schrijven of DoS-condities veroorzaken. Geauthenticeerde aanvallers met beheerdersrechten kunnen willekeurige commando's met rootrechten uitvoeren en via SQL-injectie toegang krijgen tot interne database-inhoud. Daarnaast zijn…
Authentication bypass in multiple products from Frappe Technologies Thu, 10/08/2026 - 11:26 Aviso Affected Resources Frappe Cloud; ERPNext registration service. Description INCIBE has coordinated the publication of a medium severity vulnerability affecting several products by Frappe Technologies, enterprise resource planning software and a cloud platform for managing and monitoring multiple Frappe deployments. The vulnerability was discovered by Miguel Jiménez Cámara. This vulnerability has…
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco NX-OS Software. De kwetsbaarheden betreffen verschillende componenten van Cisco NX-OS Software. - Een kwetsbaarheid in de Python interpreter maakt het mogelijk voor een geauthenticeerde lokale aanvaller met lage privileges om de Python sandbox te ontsnappen en willekeurige commando's op het onderliggende besturingssysteem uit te voeren. - Een andere kwetsbaarheid in de NX-API feature laat ongeauthenticeerde externe aanvallers toe om via…
Rilasciati aggiornamenti di sicurezza per sanare una nuova vulnerabilità con gravità "alta" in Progress Telerik Document Processing Libraries. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilità del servizio sui sistemi interessati.
[VDE-2026-105] The Docker-based COMBIVIS Control Runtime service is affected by several vulnerabilities in CODESYS Runtime Toolkit 3.5.21.10. These vulnerabilities are resolved in COMBIVIS Control Runtime 2.1.0.
SQL injection in the NetBoard CRM demo platform Thu, 10/08/2026 - 09:19 Aviso Affected Resources NetBoard CRM Demo Platform. Latest demo version (November 2025). Description INCIBE has coordinated the disclosure of a critical severity vulnerability affecting the NetBoard CRM demonstration platform, an interactive testing environment for business software. The vulnerability was discovered by Gonzalo Aguilar García (6h4ack). This vulnerability has been assigned the following code, CVSS v4.0 base…
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3, CVEs: CVE-2026-96408, CVE-2026-103668, Summary: Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below: Code Injection in the Upgrade Script (CWE-94) - CVE-2026-96408 SQL Injection in the Site Search function (CWE-89) - CVE-2026-103668 In addition, multiple vulnerabilities have been addressed. For details, refer to the information provided by the developer.
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-8065, CVE-2026-8066, CVE-2026-8067, CVE-2010-2965, CVE-2014-9195, CVE-2023-46143, CVE-2024-8176, CVE-2025-59375, CVE-2026-34197, CVE-2026-7395, CVE-2026-11796, CVE-2026-15340, CVE-2026-27872, CVE-2026-27873, Summary: CISA has released six Industrial Control Systems (ICS) Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits…
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Une vulnérabilité a été découverte dans Ceph. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos…
Serial number: AV26-1017 Date: October 7, 2026 As of October 6, 2026, SonicWall is affected by vulnerabilities in the following product: SMA1000 Models - 6210, 7210, 8200v Version 12.4.3-03670 (platform-hotfix) and prior Version 12.5.0-03082 (platform-hotfix) and prior The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities SonicWall…
Serial number: AV26-1016 Date: October 7, 2026 As of October 7, 2026, wolfSSL is affected by vulnerabilities in the following product: wolfSSH Prior to 1.6.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. wolfSSH Release 1.6.0 (October 6, 2026) WolfSSH Release list
Serial number: AV26-1015 Date: October 7, 2026 As of October 6, 2026, Arista Networks is affected by vulnerabilities in the following product: CloudVision CUE Version 2026.2.0 and prior Version 2021.2.0 and prior Version 2022.2.0 and prior Version 2022.3.0 and prior The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory 0190 Arista Networks Advisories & Notices
Serial number: AV26-1014 Date: October 7, 2026 As of October 6, 2026, AMD is affected by a vulnerability in the following products: AMD Instinct MI210 Versions prior to ROCm 7.14 AMD Instinct MI250 Versions prior to ROCm 7.14 AMD Instinct MI250X Versions prior to ROCm 7.14 AMD Instinct MI300A Versions prior to ROCm 7.14 AMD Instinct MI300X Versions prior to ROCm 7.14 AMD Instinct MI308X Versions prior to ROCm 7.14 AMD Instinct MI325X Versions prior to ROCm 7.14 AMD Instinct MI350X Versions…
Serial number: AV26-1013 Date: octobre 7, 2026 As of October 5, 2026, Qualcomm published a security bulletin to address vulnerabilities affecting Qualcomm products The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. October 2026 Security Bulletin
Serial number: AV26-1012 Date: October 7, 2026 As of October 6, 2026, JetBrains is affected by vulnerabilities in the following product: TeamCity Prior to 2026.1.32025.11.7 Prior to 2026.2.1 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. JetBrains Fixed security issues
Cisco ha rilasciato aggiornamenti di sicurezza per risolvere 35 vulnerabilità nei propri prodotti, di cui 15 con gravità “critica” e 13 con gravità “alta”.
Disponibile una Proof of Concept (PoC) per lo sfruttamento della CVE-2026-107181 - già sanata dal vendor - presente in Telegram Desktop, client desktop dell'omonima piattaforma di messaggistica.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by…
Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service (DoS) condition, or elevate privileges. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no…
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane…
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process…
Multiple vulnerabilities in the Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as Next Generation OAM (NGOAM), could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to improper input validation of IP traffic when NGOAM is enabled. An attacker could exploit these vulnerabilities by sending crafted packets to an IP…
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying…