Vulnerabilities & Exploits Archives - Page 12 of 106

CISA adds Questions for Confluence App Hard-coded Credentials Vulnerability (CVE-2022-26138) to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 30, 2022 / Atlassian, CISA, Confluence, CVE-2022-26138, Cybersecurity Threat Center

The Cybersecurity and Infrastructure Security Agency (CISA) has added a Critical Questions for Confluence App Hard-coded Credentials Vulnerability (CVE-2022-26138) to its Known Exploited Vulnerabilities Catalog.

CISA adds Questions for Confluence App Hard-coded Credentials Vulnerability (CVE-2022-26138) to Known Exploited Vulnerabilities Catalog Read More »

Samba patches 5 vulnerabilities, 1 rated High severity (CVE-2022-32744)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 30, 2022 / Active Directory, CIFS, CVE-2022-32744, LDAP, Samba, SMB

Samba has released software updates to fix five vulnerabilities in multiple Samba software products. One of the fixed issues could allow Samba AD users to forge password change requests for any user.

Samba patches 5 vulnerabilities, 1 rated High severity (CVE-2022-32744) Read More »

PrestaShop websites vulnerable to major SQL Injection attacks

Cybersecurity Attacks, Malware, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 26, 2022 / CVE-2022-36408, Cybersecurity Threat Center, MySQL, PrestaShop, SQL injection, SQLi

PrestaShop websites are reported vulnerable to a major SQL Injection vulnerability (tracked as CVE-2022-36408) and have been exploited in the wild since July 2022.

PrestaShop websites vulnerable to major SQL Injection attacks Read More »

Cisco patched 3 Nexus Dashboard Unauthorized Access Vulnerabilities

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 25, 2022 / Cisco, CVE-2022-20857, CVE-2022-20858, CVE-2022-20861, Nexus

Cisco has released a Critical severity security advisory for three Nexus Dashboard unauthorized access vulnerabilities.

Cisco patched 3 Nexus Dashboard Unauthorized Access Vulnerabilities Read More »

Oracle Critical Patch Update for July 2022

Database Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 25, 2022 / CVE-2021-31805, CVE-2022-1292, CVE-2022-22721, CVE-2022-23305, CVE-2022-23632, CVE-2022-34169, Database, Log4j, MySQL, Oracle, Spring Framework

Oracle has released its Critical Patch Update for July 2022 to include 349 vulnerability fixes across multiple products. The updates also include fixes for Log4j and Spring Framework vulnerabilities.

Oracle Critical Patch Update for July 2022 Read More »

Drupal patches Moderately Critical vulnerability (CVE-2022-25276)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 25, 2022 / CVE-2022-25276, Drupal, Drupal9, iframe

Drupal has patched one Moderately Critical vulnerability (CVE-2022-25276) that affect multiple versions of Drupal Core.

Drupal patches Moderately Critical vulnerability (CVE-2022-25276) Read More »

Apple patches vulnerabilities in iOS 15.6, macOS Monterey 12.5, and other products

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 25, 2022 / Apple, Big Sur, iOS, iOS156, iPad, macOS, Monterey, tvOS, watchOS

Apple has released security updates for Apple iOS 15.6, iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8, macOS Catalina, tvOS 15.6, watchOS 8.7, and Safari 15.6.

Apple patches vulnerabilities in iOS 15.6, macOS Monterey 12.5, and other products Read More »

Google releases Chrome 103 (103.0.5060.134) security updates with fixes for 5 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 22, 2022 / Android, Chrome, ChromeOS, CVE-2022-2477, CVE-2022-2478, CVE-2022-2479, CVE-2022-2480, CVE-2022-2481

Google has released Chrome version 103.0.5060.134 for Windows, Mac and Linux, with fixes for five High severity vulnerabilities. Additionally, Google also published new security updates for ChromeOS and Android.

Google releases Chrome 103 (103.0.5060.134) security updates with fixes for 5 High severity vulnerabilities Read More »

Cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems (updated)

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / July 20, 2022 / APT, Aquatic Panda, CGCYBER, CISA, CVE-2021-44228, Cybersecurity Threat Center, Deep Panda, Log4j, log4Shell, UAG

The Cybersecurity and Infrastructure Security Agency (CISA) warns cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems.

Cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems (updated) Read More »

Cyberattacks on WordPress plugin Modern WPBakery Page Builder Addons

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / July 17, 2022 / AJAX, CVE-2021-24284, Kaswara, PHP, Wordfence, WPBakery

Researchers from Wordfence have spotted scans against 1.6 million WordPress sites looking for vulnerable Kaswara Modern WPBakery Page Builder Addons plugin.

Cyberattacks on WordPress plugin Modern WPBakery Page Builder Addons Read More »