In-Depth Look Into Data-Driven Science Behind Qualys TruRisk

Vulnerability Management is a foundational component of any cybersecurity program for the implementation of appropriate security controls and the management of cyber risk. Earlier this year Qualys int ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Researchers Detail Malicious Tools Used by Cyberespionage Group Earth Aughisky

[![Cyberespionage Group Earth Aughisky](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEh2oCJyA4hqYgoIYo5sLDo6zyST7yixChzpN19weBowzU3D8upgHXF8UHl5AlzpEahQqhyg6HMVjJ3MetZFZnbURWCW9FhJNdlELhwE ...

Continue Reading
CVE-2022-39289

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, mo ...

Continue Reading
EulerOS Virtualization 3.0.6.6 : libvirt (EulerOS-SA-2022-2515)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libvirt w ...

Continue Reading
GitLab 9.3 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 RCE

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15 ...

Continue Reading
Cisco Expressway Series and Cisco TelePresence Video Communication Server CSRF (cisco-sa-expressway-csrf-sqpsSfY6)

According to its self-reported version, Cisco Expressway-C and Cisco TelePresence VCS devices are affected by a vulnerability in their REST API that could allow an unauthenticated, remote attacker to ...

Continue Reading
GitLab 12.8 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 Access Control Bypass

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A ...

Continue Reading
EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2022-2414)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - containerd is an open source container ...

Continue Reading

Back to Main

Subscribe for the latest news: