API - API Security Blog

CVE-2025-49825

creation_timestamp| type| source ---|---|--- 2025-06-17 11:32:23+00:00| seen|...Read More ...

June 17, 2025

CVE-2025-3515

creation_timestamp| type| source ---|---|--- 2025-06-17 11:03:08+00:00| seen|...Read More ...

June 17, 2025

CVE-2023-35092

creation_timestamp| type| source ---|---|--- 2025-06-17 11:30:50+00:00| seen|...Read More ...

June 17, 2025

CVE-2025-27587

OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using ...

June 17, 2025

Hard-Coded ‘b’ Password in Sitecore XP Sparks Major RCE Risk in Enterprise Deployments

Cybersecurity researchers have disclosed three security flaws in the popular Sitecore Experience Platform (XP) that could be chained to achieve pre-authenticated remote code execution. Sitecore Experi ...

June 17, 2025

Backups Are Under Attack: How to Protect Your Backups

Ransomware has become a highly coordinated and pervasive threat, and traditional defenses are increasingly struggling to neutralize it. Today's ransomware attacks initially target your last line ...

June 17, 2025

Security Bulletin: IBM Cloud Pak for Data is vulnerable to Improper Restriction of Recursive Entity References due to rexml package ( CVE-2024-43398 )

Summary Potential vulnerabilities in rexml package ( CVE-2024-43398 ) has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-43398 DESCRIPTION: REXML is an X ...

June 17, 2025

Security Bulletin: IBM Cloud Pak for Data is vulnerable to authorization bypass due to golang/crypto ( CVE-2024-45337 )

Summary Potential vulnerabilities in golang/crypto module ( CVE-2024-45337 ) has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-45337 DESCRIPTION: Applic ...

June 17, 2025