[UPDATE] [medium] OpenCTI: Vulnerability allows bypassing security measures
A remote, authenticated attacker can exploit a vulnerability in OpenCTI to bypass security measures.
Advisories tracked
9,155
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,706
Sources online
24
Last sync
4H AGO
[UPDATE] [high] Fluentd: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Fluentd to execute arbitrary code, disclose information, or cause a Denial of Service.
[NEW] [high] Microsoft Edge: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft Edge to gain elevated privileges, execute arbitrary code, bypass security measures, conduct spoofing and cross-site scripting attacks, disclose sensitive information, or trigger a denial-of-service condition.
[UPDATE] [medium] Joomla: Multiple vulnerabilities
A remote, anonymous or authenticated attacker can exploit multiple vulnerabilities in Joomla to present false information, launch a Cross-Site Scripting attack, and modify data.
[UPDATE] [medium] Joomla: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Joomla to conduct attacks such as Cross-Site Scripting (XSS), SQL injection, privilege escalation, authentication bypass, path traversal, local file inclusion (LFI), and unauthorized access.
[UPDATE] [high] NATS Server: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in NATS Server to execute arbitrary code, gain elevated permissions, bypass security measures, manipulate or disclose data, or cause a Denial-of-Service condition.
[UPDATE] [critical] Wazuh Manager: Vulnerability allows privilege escalation
A remote, anonymous attacker can exploit a vulnerability in Wazuh Manager to escalate their privileges.
[NEW] [high] IBM Operational Decision Manager: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in IBM Operational Decision Manager to bypass security restrictions, cause a denial of service, and execute code.
[UPDATE] [high] PostgreSQL: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in PostgreSQL to execute arbitrary program code, carry out a denial-of-service attack, disclose information, manipulate files, conduct an SQL injection attack, and bypass security measures.
[NEW] [high] Joomla: Multiple vulnerabilities
A remote attacker can exploit multiple vulnerabilities in Joomla to perform a cross-site scripting attack and bypass security mechanisms.
[NEW] [high] ESRI ArcGIS: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in ESRI ArcGIS to bypass security measures or gain user rights.
[NEW] [medium] wget: Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in wget to conduct a denial of service attack.
[NEW] [medium] IBM WebSphere Application Server: Vulnerability allows execution of actions
A remote, authenticated attacker can exploit a vulnerability in IBM WebSphere Application Server to execute arbitrary actions on the server.
[NEW] [medium] IBM WebSphere Application Server Liberty: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in IBM WebSphere Application Server Liberty to conduct a denial of service attack.
[UPDATE] [high] dpkg: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in dpkg to disclose information.
[NEW] [high] ILIAS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in ILIAS to bypass security measures, disclose sensitive information, or conduct cross-site scripting attacks.
[NEW] [medium] Red Hat Enterprise Linux (freeipmi): Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a denial of service attack.
[NEW] [medium] Red Hat JBoss Enterprise Application Platform (io.undertow.jastow): Vulnerability allows cross-site scripting
A remote, anonymous attacker can exploit a vulnerability in Red Hat JBoss Enterprise Application Platform to conduct a cross-site scripting attack.
[UPDATE] [medium] ImageMagick: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in ImageMagick to cause a denial of service condition, disclose information, and bypass security mechanisms.
[UPDATE] [medium] OpenSC: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in OpenSC to execute arbitrary program code.
[UPDATE] [high] Fleet: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Fleet to bypass security mechanisms, disclose confidential information, cause a denial-of-service condition, or manipulate security configurations.
[UPDATE] [high] Samba: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Samba to execute arbitrary code, conduct a denial of service attack, manipulate files, and bypass security measures.
[UPDATE] [medium] jq: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in jq to conduct a Denial of Service attack.
[UPDATE] [high] ImageMagick: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in ImageMagick to conduct a Denial of Service attack or disclose information.
[UPDATE] [high] Kiali for Red Hat OpenShift Service Mesh (Axios, Go, Follow-redirects): Multiple vulnerabilities
A remote anonymous attacker can exploit multiple vulnerabilities in Kiali for Red Hat OpenShift Service Mesh to gain elevated privileges, bypass security measures, manipulate or disclose data, or cause a denial-of-service condition.
[UPDATE] [medium] jq: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in jq to conduct a denial of service attack.
[UPDATE] [medium] libxml2: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in libxml2 to conduct a denial of service attack.
[UPDATE] [medium] OpenSSH: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in OpenSSH to conduct a denial of service attack, bypass security measures, manipulate data, or disclose confidential information.
[UPDATE] [medium] expat: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in expat to conduct a denial of service attack or potentially execute code.
[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct unspecified attacks, potentially including code execution, denial-of-service attacks, bypassing security measures, or manipulating data.
[UPDATE] [medium] Gitea: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Gitea to bypass security measures, manipulate data, disclose confidential information, trigger a Denial-of-Service condition, or carry out other unspecified attacks.
[UPDATE] [medium] FreeType: Vulnerability allows unspecified attack
A remote, anonymous attacker can exploit a vulnerability in FreeType to conduct an unspecified attack.
[UPDATE] [medium] QEMU: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in QEMU to cause a denial-of-service state and potentially execute arbitrary code on the host.
[UPDATE] [low] ImageMagick: Vulnerability allows Denial of Service
A local attacker can exploit a vulnerability in ImageMagick to carry out a Denial of Service attack.
[UPDATE] [medium] libxml2: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in libxml2 to disclose information.
[UPDATE] [medium] MIT Kerberos: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in MIT Kerberos to carry out a Denial of Service attack.
[UPDATE] [critical] Apache log4j: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Apache log4j to execute arbitrary program code.
[UPDATE] [medium] Red Hat Enterprise Linux: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to carry out a Denial of Service attack.
[NEW] [medium] Apache Airflow: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Apache Airflow to execute arbitrary program code, bypass security measures, and disclose information.
[NEW] [medium] GIMP: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in GIMP to execute arbitrary program code and conduct a denial of service attack.
[NEW] [high] BeyondTrust Privileged Remote Access and Remote Support: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in BeyondTrust Privileged Remote Access and BeyondTrust Remote Support to conduct a denial of service attack, gain elevated privileges, bypass security measures, and disclose confidential information.
[UPDATE] [medium] Red Hat Enterprise Linux (rrdcached): Vulnerability allows code execution and DoS
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux to cause a denial-of-service attack or potentially execute arbitrary code.
[UPDATE] [medium] OpenSSL: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in OpenSSL to conduct a denial of service attack, disclose sensitive information, or perform other unspecified attacks.
[UPDATE] [high] Langflow: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Langflow to execute arbitrary program code, bypass security measures, manipulate data, disclose confidential information, or cause a Denial-of-Service condition.
[UPDATE] [medium] Tenable Security Nessus: Multiple vulnerabilities allow SQL injection
An attacker can exploit multiple vulnerabilities in Tenable Security Nessus to carry out an SQL injection attack.
[UPDATE] [medium] QNAP NAS: Multiple vulnerabilities
A remote, authenticated or anonymous attacker can exploit multiple vulnerabilities in QNAP NAS to gain elevated privileges, bypass security mechanisms, cause a Denial of Service condition, execute arbitrary commands, disclose information, or achieve unspecified impacts.
[NEW] [medium] xwiki: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in xwiki to disclose information.
[UPDATE] [high] HCL BigFix Compliance (Ruby): Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in HCL BigFix Compliance to execute arbitrary code, bypass security measures, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [medium] Linux Kernel: Vulnerability allows privilege escalation and denial of service
A local attacker can exploit a vulnerability in the Linux Kernel for privilege escalation, as well as to create a denial of service condition or other unspecified impacts.
[NEW] [high] DriveLock On-Premise and Cloud: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in DriveLock to disclose information, execute arbitrary code, and escalate privileges.