Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD…
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Apply mitigations in accordance…
Linux Kernel Missing Initialization of a Variable Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…
Broadcom VMWare ESX Insufficient Logging Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
Google Brotli Unchecked Return Value Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with…
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the…
danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is…