Category: CVSS2 - HIGH
2022’s most routinely exploited vulnerabilities—history repeats

The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), and international partners have released a joint Cybersecurity Advis ...

Continue Reading
Exploit for CVE-2023-2732

## CVE-2023-2732 - Mstore WordPress APIs Vulnerable Scanner is a...Read More ...

Continue Reading
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 24, 2023 to July 30, 2023)

Last week, there were 64 vulnerabilities disclosed in 66 WordPress Plugins and 3 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 32 Vulnerabi ...

Continue Reading
Exploit for Vulnerability in Metabase

# CVE-2023-38646 - Metabase Pre-auth RCE Metabase open source b...Read More ...

Continue Reading
Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities

## Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructi ...

Continue Reading
Preventing Web Application Access Control Abuse

### **SUMMARY** The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC), U.S. Cybersecurity and Infrastructure Security Agency (CISA), and U.S. National Security Agency (NSA) ...

Continue Reading
VMWare Aria Operations For Networks Remote Command Execution Exploit

VMWare Aria Operations for Networks (vRealize Network Insight) is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote ...

Continue Reading
VMWare Aria Operations For Networks Remote Command Execution Exploit

VMWare Aria Operations for Networks (vRealize Network Insight) is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote ...

Continue Reading
CVE-2023-3956

The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of data due to a missing capability check on the 'events_receiver' function in vers ...

Continue Reading
(RHSA-2023:4289) Important: OpenShift API for Data Protection (OADP) 1.0.11 security and bug fix update

OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both f ...

Continue Reading
Load more