Rocky Linux 8 : openssl (RLSA-2023:1405)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1405 advisory. - A timing based side channel exists in the OpenSSL R ...

Continue Reading

CVSS3 - HIGH

CVE-2023-25722

A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java A ...

Continue Reading
Hashicorp Consul v1.0 – Remote Command Execution Exploit

Post ContentRead More ...

Continue Reading
Label Studio 1.5.0 – Authenticated Server Side Request Forgery Vulnerability

Post ContentRead More ...

Continue Reading

CVSS3 - MEDIUM

Introducing self-service SBOMs

Following the precedent set by [Executive Order 14028](), security and compliance teams increasingly request software bills of materials (SBOMs) to identify the open source components of their softwar ...

Continue Reading
Microsoft Secure: Explore innovations transforming the future of security

Building a more secure future requires an end-to-end approach. There is no question that technology plays an essential role, but security will always be human-centered. That’s what Microsoft Secu ...

Continue Reading
Two-Week ATO Attack Mitigated by Imperva

Beginning on February 7, an Imperva-protected account was targeted by an ongoing account takeover (ATO) attack that lasted for two weeks. On average, attacks last a few hours or a couple days at most, ...

Continue Reading
Label Studio 1.5.0 Server-Side Request Forgery

Post ContentRead More ...

Continue Reading

CVSS3 - MEDIUM

Back to Main

Subscribe for the latest news: