- Vulnerebility -

Last update 09.10.2017 13:51:50

HOME  2020  2019  2018  1  2  3  4  5  6


Date

Name

Category

Web

31.3.20

Vulnerabilities Expose Lexus, Toyota Cars to Hacker Attacks

Vulnerebility

Securityweek
30.3.20 Vulnerabilities in DrayTek Enterprise Routers Exploited in Attacks Vulnerebility Securityweek
30.3.20

Debunking vulnerability management myths for a safer enterprise

Vulnerebility

Net-security

29.3.20

Hackers target zero-day flaws in enterprise Draytek network devices Vulnerebility Securityaffairs

29.3.20

HPE Warns of New Bug That Kills SSD Drives After 40,000 Hours Vulnerebility

Bleepingcomputer

29.3.20

Tor Browser 9.0.7 Patches Bug That Could Deanonymize Users Vulnerebility

Bleepingcomputer

28.3.20

Adobe Fixes Critical Vulnerability in Creative Cloud Application Vulnerebility

Bleepingcomputer

27.3.20

Critical CODESYS Bug Allows Remote Code Execution

Vulnerebility

Threatpost
26.3.20 Remote Code Execution Vulnerability Patched in OpenWrt Vulnerebility Securityweek
26.3.20

Organizations struggle with patching endpoints against critical vulnerabilities

Vulnerebility

Net-security

25.3.20

Password vulnerability at Fortune 1000 companies

Vulnerebility

Net-security
25.3.20 Tor Browser 9.0.7 addresses a flaw that could allow unmasking Tor users Vulnerebility Securityaffairs
25.3.20 Critical RCE Bug Affects Millions of OpenWrt-based Network Devices Vulnerebility Securityaffairs
25.3.20

Critical Adobe Flaw Fixed in Out-of-Band Security Update

Vulnerebility

Threatpost

25.3.20

Videolabs Patches Code Execution, DoS Vulnerabilities in libmicrodns Library

Vulnerebility

Securityweek
25.3.20

VMware Again Fails to Patch Privilege Escalation Vulnerability in Fusion

Vulnerebility

Securityweek
25.3.20

Critical RCE Bug Affects Millions of OpenWrt-based Network Devices

Vulnerebility

Thehackernews
24.3.20 Adobe addressed a critical vulnerability in Adobe Creative Cloud App that allows deleting files Vulnerebility Securityaffairs
24.3.20 Critical Flaw in Adobe Creative Cloud App Allows Hackers to Delete Files Vulnerebility Securityweek
24.3.20

Microsoft Warns of Critical Windows Zero-Day Flaws

Vulnerebility

Threatpost

24.3.20

Microsoft warns of targeted attacks exploiting Windows zero-day flaws

Vulnerebility

Securityaffairs
24.3.20

Hackers Target Two Unpatched Flaws in Windows Adobe Type Manager Library

Vulnerebility

Securityweek

24.3.20

Warning — Two Unpatched Critical 0-Day RCE Flaws Affect All Windows Versions

OS  Vulnerebility

Thehackernews

24.3.20

Windows users under attack via two new RCE zero-days

Vulnerebility

Net-security

23.3.20

Vulnerability Exposed Tesla Central Touchscreen to DoS Attacks

Attack  Vulnerebility Securityweek

23.3.20

Flaw in Password Managers Allowed Apps to Steal Credentials

Vulnerebility Securityweek
23.3.20 Botnet operators target multiple zero-day flaws in LILIN DVRs BotNet  Exploit  Vulnerebility Securityaffairs

23.3.20

Zero-Day Vulnerabilities in LILIN DVRs Exploited by Several Botnets BotNet  Exploit  Vulnerebility Securityweek
23.3.20

Google addresses high severity bugs in Chrome

Vulnerebility

Securityaffairs

22.3.20

Adobe Fixes Nine Critical Vulnerabilities in Reader, Acrobat Vulnerebility

Bleepingcomputer

22.3.20

VMware Fixes High Severity Privilege Escalation Bug in Fusion Vulnerebility

Bleepingcomputer

21.3.20

New Mirai Variant ‘Mukashi’ Targets Zyxel NAS Devices

BotNet  Vulnerebility

Threatpost

21.3.20

New Mirai Variant Delivered to Zyxel NAS Devices Via Recently Patched Flaw

BotNet  Vulnerebility

Securityweek

20.3.20

Drupal addresses two XSS flaws by updating the CKEditor Vulnerebility Securityaffairs

20.3.20

Cisco fixes root privilege, command injection vulnerabilities in Cisco SD-WAN solution

Vulnerebility

Net-security

20.3.20

Cisco Warns of High-Severity SD-WAN Flaws

Vulnerebility

Threatpost

20.3.20

Drupal Updates CKEditor to Patch XSS Vulnerabilities Vulnerebility Securityweek

20.3.20

Google Patches High-Risk Chrome Flaws, Halts Upcoming Releases Vulnerebility Securityweek

20.3.20

Patch for Recently Disclosed VMware Fusion Vulnerability Incomplete Vulnerebility Securityweek

19.3.20

Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaw

Vulnerebility

Threatpost

19.3.20

Azure Red Flag: Microsoft Accidentally Fixes Cloud Config ‘Bug’

Vulnerebility

Threatpost

19.3.20

Trend Micro Fixes Critical Flaws Under Attack

Attack  Vulnerebility

Threatpost

19.3.20

Cisco Patches Several Vulnerabilities in SD-WAN Solution

Vulnerebility

Securityweek

19.3.20

A week after Patch Tuesday, Adobe drops security fixes for six offerings

Vulnerebility

Net-security

18.3.20

VMware fixes high severity privilege escalation and DoS in its products Vulnerebility Securityaffairs

18.3.20

Adobe releases out-of-band patches for critical issues in Acrobat Reader, Photoshop, Bridge, ColdFusion Vulnerebility Securityaffairs

18.3.20

Adobe Patches Critical Flaws in Reader, ColdFusion, Other Products Vulnerebility Securityweek

18.3.20

VMware Fixes Privilege Escalation Vulnerability in Fusion for Mac Vulnerebility Securityweek

18.3.20

Adobe Releases Critical Patches for Acrobat Reader, Photoshop, Bridge, ColdFusion

Vulnerebility

Thehackernews

18.3.20

Trend Micro Patches Two Vulnerabilities Exploited in the Wild Exploit  Vulnerebility Securityweek

17.3.20

Users Complain About Windows Update That Patches SMBGhost Vulnerability

Vulnerebility

Securityweek

17.3.20

Most organizations have yet to fix CVE-2020-0688 Microsoft Exchange flaw Vulnerebility Securityaffairs

17.3.20

Organizations Slow to Patch Targeted Microsoft Exchange Vulnerability Vulnerebility Securityweek

17.3.20

Slack Vulnerability Allowed Hackers to Hijack Accounts Vulnerebility Securityweek

17.3.20

WordPress and Apache Struts weaponized vulnerabilities on the rise

Vulnerebility

Net-security

16.3.20

ProtonMail, ProtonVPN Will Use Alternative Routing to Bypass Censorship Vulnerebility Securityweek

15.3.20

Slack Bug Allowed Automating Account Takeover Attacks Vulnerebility

Bleepingcomputer

15.3.20

VMWare Releases Fix for Critical Guest-to-Host Vulnerability Vulnerebility

Bleepingcomputer

15.3.20 48K Windows Hosts Vulnerable to SMBGhost CVE-2020-0796 RCE Attacks Vulnerebility

Bleepingcomputer

15.3.20 Slack bugs allowed take over victims’ accounts Vulnerebility Securityaffairs
15.3.20 A bug in Tor Browser allows execution of JavaScript even in Safest security level Vulnerebility Securityaffairs
14.3.20 Firefox 74 Released: Security Fixes, Improvements, and Fixes Vulnerebility

Bleepingcomputer

14.3.20 New LVI Intel CPU Data Theft Vulnerability Requires Hardware Fix Vulnerebility

Bleepingcomputer

14.3.20 WordPress Plugin Bug in Popup Builder Threatens 100K Websites Vulnerebility

Threatpost

14.3.20 VMware fixes a critical bug in Workstation, Fusion that allows code execution on host From guest Vulnerebility Securityaffairs
14.3.20 Flaws in Popup Builder Plugin Impacted Over 100,000 WordPress Sites Vulnerebility Securityweek
14.3.20 Critical Flaw in VMware Workstation, Fusion Allows Code Execution on Host From Guest Vulnerebility Securityweek
13.3.20 Flaws in the Popup Builder WordPress plugin expose 100K+ websites to hack Vulnerebility Securityaffairs
13.3.20

VMware Patches for Bugs in DHCP Service (Workstation, Fusion, Horizon, VMRC)

Vulnerebility

SANS

13.3.20

Number of open source vulnerabilities surged in 2019

Vulnerebility

Net-security

13.3.20 Microsoft fixes CVE-2020-0796, the SMBv3 wormable bug recently leaked Vulnerebility Securityaffairs
13.3.20 Out-of-Band Windows Updates Patch Wormable SMB Vulnerability Vulnerebility Securityweek
13.3.20 Several Vulnerabilities Expose Phoenix Contact Industrial 4G Routers to Attacks Attack  Mobil  Vulnerebility Securityweek
13.3.20 Critical Patch Released for 'Wormable' SMBv3 Vulnerability — Install It ASAP! Vulnerebility Thehackernews
13.3.20

The human element in security is still needed to combat application vulnerabilities

Vulnerebility

Net-security

13.3.20

Most computers easy to hack due to vulnerability in memory chips

Vulnerebility

Net-security
12.3.20 Experts disclose tens of flaws in Zyxel Cloud CNM SecuManager, includes dangerous backdoors Vulnerebility Securityaffairs
12.3.20 Vulnerability Prompts Avast to Disable Emulator Used by Antivirus Vulnerebility Securityweek
12.3.20 Google Offering Higher Bonuses for Cloud Platform Vulnerabilities Vulnerebility Securityweek
12.3.20 Wormable, Unpatched Microsoft Bug Threatens Corporate LANs Virus  Vulnerebility

Threatpost

12.3.20 Flaws Riddle Zyxel’s Network Management Software Vulnerebility

Threatpost

12.3.20 Avast disables the JavaScript engine component due to a severe issue Vulnerebility Securityaffairs
12.3.20

Scientists expose another security flaw in Intel processors

Vulnerebility

Net-security

11.3.20

Bugs in Avast AntiTrack expose users to cyber attacks

Vulnerebility

Securityaffairs
11.3.20

Microsoft’s Patch Tuesday updates for March 2020 fix 115 issues

Vulnerebility

Securityaffairs
11.3.20

Microsoft accidentally reveals Wormable Win SMBv3 CVE-2020-0796 Flaw

Vulnerebility

Securityaffairs
11.3.20

Microsoft disrupted US-Based Infrastructure of the Necurs botnet

Vulnerebility

Securityaffairs
11.3.20

Critical Vulnerabilities in SAP Solution Manager Expose Companies to Attacks

Vulnerebility

Securityweek
11.3.20

Tens of Vulnerabilities Expose WAGO Controllers, HMI Panels to Attacks

Vulnerebility

Securityweek
11.3.20

Firefox 74 Patches Vulnerabilities, Disables TLS 1.0 and 1.1

Vulnerebility

Securityweek
11.3.20

Avast AntiTrack Flaw Allows MitM Attacks on HTTPS Traffic

Vulnerebility

Securityweek
11.3.20

Microsoft Working on Patches for Wormable SMB Vulnerability

Vulnerebility

Securityweek
11.3.20

Microsoft Patches 115 Vulnerabilities in Windows, Other Products

Vulnerebility

Securityweek
11.3.20

Warning — Unpatched Critical 'Wormable' Windows SMBv3 Flaw Disclosed

Vulnerebility

Thehackernews
11.3.20

Microsoft Issues March 2020 Updates to Patch 115 Security Flaws

Vulnerebility

Thehackernews
11.3.20

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Vulnerebility

Thehackernews
11.3.20

LVI Attacks: New Intel CPU Vulnerability Puts Data Centers At Risk

Vulnerebility

Thehackernews
11.3.20

Critical SMBv3 Vulnerability: Remote Code Executio

Vulnerebility

SANS
11.3.20

Wormable Windows SMBv3 RCE flaw leaked, but not patched

Vulnerebility

Net-security
10.3.20

Microsoft Exchange Server Flaw Exploited in APT Attacks

Attack  Vulnerebility

Threatpost

10.3.20

PPP Daemon flaw opens Linux distros, networking devices to takeover attacks

Vulnerebility

Net-security
9.3.20 Nation-state actors are exploiting CVE-2020-0688 Microsoft Exchange server flaw Vulnerebility Securityaffairs
9.3.20 Netgear fixes a critical RCE that could allow to takeover Flagship Nighthawk routers Vulnerebility Securityaffairs
8.3.20 Zoho Fixes No-Auth RCE Zero-Day in ManageEngine Desktop Central Vulnerebility

Bleepingcomputer

8.3.20 YouTube Web Site Subscriptions are Broken, Videos Not Displayed [Fixed] Vulnerebility

Bleepingcomputer

8.3.20 Zero-Day Bug Allowed Attackers to Register Malicious Domains Vulnerebility  Virus

Bleepingcomputer

8.3.20 Let's Encrypt to Revoke 3 Million TLS Certificates Due to Bug Vulnerebility

Bleepingcomputer

8.3.20 Microsoft Releases March 2020 Office Updates With Fixes, Improvements Vulnerebility

Bleepingcomputer

7.3.20

Active Scans for Apache Tomcat Ghostcat Vulnerability Detected, Patch Now Vulnerebility

Bleepingcomputer

7.3.20

CVE-2019-0090 flaw affects Intel Chips released in the last 5 years Vulnerebility Securityaffairs

7.3.20

Critical Zoho Zero-Day Flaw Disclosed Vulnerebility

Threatpost

7.3.20

This Unpatchable Flaw Affects All Intel CPUs Released in Last 5 Years

Vulnerebility

Thehackernews
6.3.20 Most of Linux distros affected by a critical RCE in PPP Daemon flaw Vulnerebility Securityaffairs

6.3.20

Let's Encrypt Will Not Replace 1 Million Bug-Affected Certificates Vulnerebility Securityweek
6.3.20 Zoho Working on Patch for Zero-Day Vulnerability in ManageEngine Product Vulnerebility Securityweek

6.3.20

High-Severity Cisco Webex Flaws Fixed Vulnerebility

Threatpost

6.3.20 Chris Eng: Patch Management Challenges Drive ‘Security Debt’ Vulnerebility

Threatpost

6.3.20 Critical PPP Daemon Flaw Opens Most Linux Systems to Remote Hackers Vulnerebility Thehackernews
5.3.20 Cisco addresses high severity RCE flaws in Webex Player Vulnerebility Securityaffairs
5.3.20 Critical Netgear Bug Impacts Flagship Nighthawk Router Vulnerebility

Threatpost

5.3.20

Vulnerability allows attackers to register malicious lookalikes of legitimate web domains

Vulnerebility  Virus

Net-security

4.3.20

A Zero-Day Homograph Domain Name Attack

Attack  Vulnerebility

Securityweek
4.3.20

Bug Forces Let's Encrypt to Revoke 3 Million Certificates

Vulnerebility

Securityweek
4.3.20 Let’s Encrypt CA is revoking over 3 Million TLS certificates due to a bug Vulnerebility Securityaffairs
4.3.20 Let's Encrypt Revoking 3 Million TLS Certificates Issued Incorrectly Due to a Bug Vulnerebility Thehackernews
3.3.20 Cisco offers free 90-day Webex Licenses due to coronavirus outbreak Vulnerebility Securityaffairs
3.3.20 A bug in the Walgreens mobile app leaked customers’ messages Vulnerebility

Securityaffairs

3.3.20 Experts warn of mass scans for Apache Tomcat Ghostcat flaw Vulnerebility Securityaffairs
3.3.20 Patches Released for WordPress Plugin Vulnerabilities Exploited in Attacks Vulnerebility Securityweek
3.3.20 Gamer Alert: Serious Nvidia Flaw Plagues Graphics Driver Vulnerebility

Threatpost

2.3.20 NVIDIA Patches DoS Flaws in GPU Driver and vGPU Software Vulnerebility Securityweek
2.3.20

You are focusing too much on vulnerabilities that pose little danger

Vulnerebility

Net-security

1.3.20 NVIDIA Fixes High Severity Flaw in Windows GPU Display Driver Vulnerebility

Bleepingcomputer

1.3.20 Critical Bugs in WordPress Plugins Let Hackers Take Over Sites Vulnerebility

Bleepingcomputer

1.3.20

Cisco Working on Patches for New Kr00k WiFi Vulnerability Vulnerebility

Bleepingcomputer

1.3.20

Cisco Working on Patches for New Kr00k WiFi Vulnerability Vulnerebility

Bleepingcomputer

1.3.20

Hackers Scanning for Vulnerable Microsoft Exchange Servers, Patch Now! Vulnerebility

Bleepingcomputer

1.3.20 DoppelPaymer Hacked Bretagne Télécom Using the Citrix ADC Flaw Vulnerebility

Bleepingcomputer

1.3.20 Kr00k Bug in Broadcom, Cypress WiFi Chips Leaks Sensitive Info Vulnerebility

Bleepingcomputer

1.3.20 Multiple WordPress Plugin Vulnerabilities Actively Being Attacked Vulnerebility

Bleepingcomputer

29.2.20

New Critical RCE Bug in OpenBSD SMTP Server Threatens Linux Distros Vulnerebility

Bleepingcomputer

29.2.20

All versions of Apache Tomcat are affected by the Ghostcat flaw

Vulnerebility

Securityaffairs

29.2.20

Apache Tomcat Affected by Serious 'Ghostcat' Vulnerability Vulnerebility Securityweek

29.2.20

GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat Vulnerebility Thehackernews

28.2.20

Cisco addresses vulnerabilities in FXOS, UCS Manager and NX-OS Software Vulnerebility Securityaffairs

28.2.20

Intel Patched Over 230 Vulnerabilities in Its Products in 2019 Vulnerebility Securityweek

28.2.20

Cisco to Release Updates for Wireless Products Affected by Kr00k Vulnerability Vulnerebility Securityweek

27.2.20

Threat actors scan Internet for Vulnerable Microsoft Exchange Servers Vulnerebility Securityaffairs

27.2.20

Cisco Patches Flaws in FXOS, UCS Manager and NX-OS Software Vulnerebility Securityweek

27.2.20

Hackers Looking for Exchange Servers Affected by Recently Patched Flaw Vulnerebility Securityweek

27.2.20

Less Than Half of Vulnerabilities in Popular Docker Images Pose Risk: Study Vulnerebility Securityweek

27.2.20

CWE list now includes hardware security weaknesses

Vulnerebility

Net-security

27.2.20

Unpatched Security Flaws Open Connected Vacuum to Takeover

Vulnerebility

Threatpost

27.2.20

Kr00k Wi-Fi Encryption flaw affects more than a billion devices Vulnerebility Securityaffairs

27.2.20

Over 20 Zyxel Firewalls Impacted by Recent Zero-Day Vulnerability Vulnerebility Securityweek

27.2.20

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices Vulnerebility Thehackernews

27.2.20

Flaw affecting 1B+ Wi-Fi-enabled devices allows attackers to decrypt wireless network packets

Vulnerebility

Net-security

27.2.20

Attackers probing for vulnerable Microsoft Exchange Servers, is yours one of them?

Vulnerebility

Net-security

26.2.20

Kr00k Vulnerability Exposed Data From Over a Billion Wi-Fi Devices Vulnerebility Securityweek

26.2.20

New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users Mobil  Vulnerebility Thehackernews

26.2.20

OpenSMTPD Vulnerability Leads to Command Injection

Vulnerebility

Securityweek

26.2.20

Zyxel addresses Zero-Day vulnerability in NAS devices Vulnerebility Securityaffairs

26.2.20

Over 100 Vulnerabilities Patched in MyBB in Past 5 Years Vulnerebility Securityweek

25.2.20

State-Sponsored Cyberspies Use Sophisticated Server Firewall Bypass Technique Vulnerebility Securityweek

25.2.20

Zyxel Patches Zero-Day Vulnerability in Network Storage Products Vulnerebility Securityweek

25.2.20

Google Patches Chrome Vulnerability Exploited in the Wild Vulnerebility Securityweek

25.2.20

New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers Vulnerebility Thehackernews

25.2.20

A new RCE in OpenSMTPD’s default install, patch available

Vulnerebility

Net-security

25.2.20

Vulnerabilities in Moxa Networking Device Expose Industrial Environments to Attacks

Vulnerebility

Securityweek

25.2.20

Vulnerabilities Allow Hackers to Access Honeywell Fire Alarm Systems

Vulnerebility

Securityweek

23.2.20

Zero-Day in WordPress Plugin Exploited to Create Admin Accounts Exploit  Vulnerebility

Bleepingcomputer

22.2.20 Firefox 73.0.1 Released With Fixes for Linux, Windows Crashes Vulnerebility

Bleepingcomputer

22.2.20

Unsafe WordPress Plugin Installed on Nearly 200,000 Sites Vulnerebility

Bleepingcomputer

22.2.20

VMware addresses serious flaws in vRealize Operations for Horizon Adapter Vulnerebility Securityaffairs
21.2.20 VMware Patches Serious Flaws in vRealize Operations for Horizon Adapter Vulnerebility Securityweek
21.2.20

Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

Attack  Vulnerebility

Threatpost

21.2.20

Critical Adobe Flaws Fixed in Out-of-Band Update

Vulnerebility

Threatpost

21.2.20 Adobe released out-of-band updates for After Effects and Media Encoder apps Vulnerebility Securityaffairs

21.2.20

Cisco fixes a static default credential issue in Smart Software Manager tool Vulnerebility Securityaffairs
21.2.20

High-risk vulnerabilities and public cloud-based attacks on the rise

Vulnerebility

Net-security

20.2.20

BlueKeep Flaw Plagues Outdated Connected Medical Devices

Vulnerebility

Threatpost

20.2.20

Hackers are actively exploiting a Zero-Day in WordPress ThemeREX Plugin to create Admin Accounts Vulnerebility Securityaffairs

20.2.20

Vulnerable Out of Band Consoles Put Industrial Assets at Risk Vulnerebility Securityweek
19.2.20 WordPress Websites Hacked via Vulnerabilities in Two Themes Plugins Vulnerebility Securityweek
19.2.20 Lenovo, HP, Dell Peripherals Face Unpatched Firmware Bugs Vulnerebility

Threatpost

19.2.20 Over 22,000 Vulnerabilities Disclosed in 2019: Report Vulnerebility Securityweek
19.2.20

A third of all vulnerabilities in 2019 had a CVSS v2 score of 7.0 and above

Vulnerebility

Net-security
18.2.20

Unsigned Firmware running on peripherals could expose Windows, Linux systems to hack

Hacking  Vulnerebility

Securityaffairs
18.2.20

F-Secure Patches Old AV Bypass Vulnerability

Vulnerebility

Securityweek
18.2.20

Serious Vulnerabilities Expose SonicWall SMA Appliances to Remote Attacks

Vulnerebility

Securityweek
18.2.20

Peripherals With Unsigned Firmware Expose Windows, Linux Computers to Attacks

Attack  Vulnerebility

Securityweek
18.2.20 CVE-2019-0604 SharePoint Remote code execution (RCE) vulnerability Vulnerebility Securityaffairs
18.2.20 Flaw in WordPress ThemeGrill Demo Importer WordPress theme plugin expose 200K+ sites to hack Vulnerebility Securityaffairs
18.2.20 Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers Vulnerebility Thehackernews
17.2.20 Flaw in WordPress Themes Plugin Allowed Hackers to Become Site Admin Vulnerebility Securityweek
17.2.20 Microsoft Pulls UEFI-Related Windows Update After Users Report Problems Vulnerebility Securityweek
17.2.20 A Dozen Vulnerabilities Affect Millions of Bluetooth LE Powered Devices Vulnerebility Thehackernews
16.2.20 SweynTooth Bug Collection Affects Hundreds of Bluetooth Products Vulnerebility

Bleepingcomputer

16.2.20 WordPress Cookie Consent Plugin Fixes Critical Flaw for 700K Users Vulnerebility

Bleepingcomputer

16.2.20

Microsoft Releases February 2020 Office Updates With Security Fixes Vulnerebility

Bleepingcomputer

16.2.20 Microsoft Patches Actively Exploited Internet Explorer Zero-Day Vulnerebility

Bleepingcomputer

16.2.20

Microsoft's February 2020 Patch Tuesday Fixes 99 Flaws, IE 0day Vulnerebility

Bleepingcomputer

16.2.20 Windows 10 Cumulative Updates KB4532693 & KB4532691 Released Vulnerebility

Bleepingcomputer

16.2.20 Adobe Releases the February 2020 Security Updates Vulnerebility

Bleepingcomputer

16.2.20 SweynTooth Bluetooth flaws affect devices from major system-on-a-chip (SoC) vendors Vulnerebility Securityaffairs
15.2.20 Firefox 73 Released With Security Fixes, New DoH Provider, More Vulnerebility

Bleepingcomputer

15.2.20 SoundCloud Fixed API Flaws That Could Lead to Account Takeover Vulnerebility

Bleepingcomputer

15.2.20

Dell SupportAssist Bug Exposes Business, Home PCs to Attacks Vulnerebility

Bleepingcomputer

15.2.20

SweynTooth: Bluetooth Vulnerabilities Expose Many Devices to Attacks

Attack  Vulnerebility

Securityweek

14.2.20

MIT Researchers Find Vulnerabilities in Voatz Voting App Vulnerebility Securityweek
14.2.20 Critical WordPress Plugin Bug Afflicts 700K Sites Vulnerebility

Threatpost

14.2.20 Profinet Vulnerability Exposes Siemens, Moxa Devices to DoS Attacks Attack  Vulnerebility Securityweek

13.2.20

600+ installs of WordPress Cookie Consent Plugin vulnerable to hack. Fix it now! Vulnerebility Securityaffairs

13.2.20

Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs

Vulnerebility

Threatpost

13.2.20

Intel Patches High-Severity Flaw in Security Engine

Vulnerebility

Threatpost

13.2.20

Adobe Addresses Critical Flash, Framemaker Flaws

Vulnerebility

Threatpost

13.2.20

Dell Patches SupportAssist Flaw That Allows Arbitrary Code Execution

Vulnerebility

Threatpost

13.2.20

SAP Releases 13 Security Notes on February 2020 Patch Day Vulnerebility Securityweek

13.2.20

March Patch Tuesday is Coming - the LDAP Changes will Change Your Life!

Vulnerebility

SANS

12.2.20

Microsoft Patch Tuesday updates for February 2020 fix IE 0day flaw Vulnerebility Securityaffairs
12.2.20 Adobe addresses 42 flaws in its five products Vulnerebility Securityaffairs

12.2.20

Microsoft Patches IE Zero-Day, 98 Other Vulnerabilities Vulnerebility Securityweek

12.2.20

Adobe Patches 42 Vulnerabilities Across Five Products Vulnerebility Securityweek

12.2.20

Update Microsoft Windows Systems to Patch 99 New Security Flaws Vulnerebility Thehackernews

12.2.20

Adobe Releases Patches for Dozens of Critical Flaws in 5 Software Vulnerebility Thehackernews

12.2.20

February 2020 Patch Tuesday: Microsoft fixes 99 vulnerabilities, Adobe 42

Vulnerebility

Net-security
11.2.20 Dell SupportAssist flaw exposes computers to hack, patch it asap! Vulnerebility Securityaffairs
11.2.20 Flaws in Accusoft ImageGear Expose Users to Remote Attacks Vulnerebility Securityweek
11.2.20 Another Flaw in Dell SupportAssist Allows Code Execution With Elevated Privileges Vulnerebility Securityweek
9.2.20 Bug in Philips Smart Light Allows Hopping to Devices on the Network Vulnerebility

Bleepingcomputer

9.2.20 Cisco Patches Critical CDP Flaws Affecting Millions of Devices Vulnerebility

Bleepingcomputer

9.2.20 Realtek Fixes DLL Hijacking Flaw in HD Audio Driver for Windows Hacking  Vulnerebility

Bleepingcomputer

9.2.20 Chrome 80 Released With 56 Security Fixes, Cookie Changes, More Vulnerebility

Bleepingcomputer

9.2.20 WhatsApp Bug Allowed Attackers to Access the Local File System Social  Vulnerebility

Bleepingcomputer

9.2.20 Google Bug Sent Private Google Photos Videos to Other Users Vulnerebility

Bleepingcomputer

8.2.20 Critical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs Vulnerebility

Threatpost

8.2.20 Organizations Quick to Patch Critical Citrix ADC Vulnerability Vulnerebility Securityweek
7.2.20 Critical Bluetooth Vulnerability Exposes Android Devices to Attacks Attack  Vulnerebility Securityweek
7.2.20

February 2020 Patch Tuesday forecast: A lot of love coming our way

Vulnerebility

Net-security

6.2.20

cdpwn – Millions of devices at risk due to flaws in implementations of Cisco Discovery Protocol (CDP) Vulnerebility Securityaffairs

6.2.20

DLL Hijacking Vulnerability Found in Realtek HD Audio Driver Hacking  Vulnerebility Securityweek

6.2.20

Critical Cisco ‘CDPwn’ Flaws Break Network Segmentation

Vulnerebility

Threatpost

6.2.20

Critical Cisco ‘CDPwn’ Protocol Flaws Explained: Podcast

Vulnerebility

Threatpost

6.2.20

Chrome 80 Released With 56 Security Fixes

Security  Vulnerebility

Securityweek

6.2.20

5 High Impact Flaws Affect Cisco Routers, Switches, IP Phones and Cameras

Vulnerebility

Thehackernews

6.2.20

CDPwn vulnerabilities open millions of Cisco enterprise devices to attack

Vulnerebility

Net-security

5.2.20 Cisco Discovery Protocol Flaws Expose Tens of Millions of Devices to Attacks Vulnerebility Securityweek
5.2.20 Vulnerability in WhatsApp Desktop Exposed User Files Social  Vulnerebility Securityweek
5.2.20 Sudo Vulnerability Allows Privilege Escalation to Root Vulnerebility Securityweek
5.2.20 Flaw in Philips Smart Light Bulbs Exposes Your WiFi Network to Hackers Vulnerebility Thehackernews
5.2.20

Touch panels deployed in critical infrastructure vulnerable to remote attacks

Attack  Vulnerebility

Net-security
5.2.20 Medtronic Patches Implanted Device, CareLink Programmer Bugs Vulnerebility Threatpost
4.2.20 Vulnerabilities in Mini-SNMPD Lead to DoS, Information Disclosure Attack  Vulnerebility Securityweek
4.2.20

Sudo CVE-2019-18634 flaw allows Non-Privileged Linux and macOS Users run commands as Root

Vulnerebility

Securityaffairs
4.2.20

Vulnerability in Linear eMerge Access Controllers Exploited in the Wild

Vulnerebility

Securityweek
4.2.20

Medtronic Releases Patches for Cardiac Device Flaws Disclosed in 2018, 2019

Vulnerebility

Securityweek
3.2.20 Microsoft announces the launch of a bug bounty program for Xbox Vulnerebility Securityaffairs
3.2.20 Trend Micro Patches More Vulnerabilities in Anti-Threat Toolkit Vulnerebility Securityweek
3.2.20 Sudo Bug Lets Non-Privileged Linux and macOS Users Run Commands as Root Vulnerebility Thehackernews
2.2.20 200K WordPress Sites Exposed to Takeover Attacks by Plugin Bug Vulnerebility

Bleepingcomputer

2.2.20 Critical Remote Code Execution Bug Fixed in OpenBSD SMTP Server Vulnerebility

Bleepingcomputer

2.2.20 Magento 2.3.4 Fixes Critical Code Execution Vulnerabilities Vulnerebility

Bleepingcomputer

1.2.20

Windows 7 To Get Post End of Life Update to Fix Wallpaper Bug Vulnerebility

Bleepingcomputer

1.2.20

Microsoft's IE Zero-day Fix is Breaking Windows Printing Vulnerebility Bleepingcomputer

31.1.20

Researcher Finds Over 60 Vulnerabilities in Physical Security Systems Vulnerebility Securityweek

31.1.20

200K WordPress Sites Vulnerable to Plugin Flaw

Vulnerebility

Threatpost

31.1.20

Cisco Patches Two High-Severity Bugs in its Small Business Switch Lineup

Vulnerebility

Threatpost

31.1.20

U.N. Hack Stemmed From Microsoft SharePoint Flaw

BigBrothers  Vulnerebility

Threatpost

31.1.20

Check Point detailed two flaws in Microsoft Azure that could have allowed taking over cloud servers Vulnerebility Securityaffairs

31.1.20

Hackers Can Earn $20,000 for Xbox Vulnerabilities Vulnerebility Securityweek

30.1.20

Cisco Small Business Switches affected by DoS and information disclosure flaws Vulnerebility

Securityaffairs

30.1.20

Over 200K WordPress sites potentially exposed to hack due to Code Snippets flaw Vulnerebility

Securityaffairs

30.1.20

Flaw in 'Code Snippets' Plugin Exposed Many WordPress Sites to Attacks Vulnerebility Securityweek

30.1.20

Cisco Patches DoS, Information Disclosure Flaws in Small Business Switches Vulnerebility Securityweek

30.1.20

Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges

Vulnerebility

Threatpost

30.1.20

Critical Flaws in Magento e-Commerce Platform Allow Code-Execution

Vulnerebility

Threatpost

30.1.20

Serious Vulnerability Discovered in OpenSMTPD

Vulnerebility

Securityweek

30.1.20

Magento 2.3.4 Patches Critical Code Execution Vulnerabilities

Vulnerebility

Securityweek

30.1.20

CVE-2020-7247 RCE flaw in OpenSMTPD library affects many BSD and Linux distros Vulnerebility

Securityaffairs

30.1.20

Microsoft Azure Flaws Could Have Let Hackers Take Over Cloud Servers Hacking  Vulnerebility Thehackernews

30.1.20

Critical OpenSMTPD Bug Opens Linux and OpenBSD Mail Servers to Hackers Vulnerebility Thehackernews

30.1.20

UN hacked: Attackers got in via SharePoint vulnerability

BigBrothers  Vulnerebility

Net-security

30.1.20

Magento patches critical code execution vulnerabilities, upgrade ASAP!

Vulnerebility

Net-security

29.1.20

Critical RCE flaw in OpenSMTPD, patch available

Vulnerebility

Net-security

29.1.20

Zoom Fixes Flaw Opening Meetings to Hackers Vulnerebility Threatpost

29.1.20

Magento 2.3.4 addresses three critical Code execution flaws Vulnerebility

Securityaffairs

29.1.20 A vulnerability in Zoom platform allowed miscreants to join Zoom meetings Vulnerebility

Securityaffairs

29.1.20 Vulnerability Allowed Attackers to Join Zoom Meetings Vulnerebility Securityweek
28.1.20 CacheOut/L1DES: New Speculative Execution Attack Affecting Intel CPUs Attack  Vulnerebility Securityweek
28.1.20 Zoom Bug Could Have Let Uninvited People Join Private Meetings Vulnerebility Thehackernews
28.1.20 PoC Exploits Created for Recently Patched 'BlueGate' Windows Server Flaws Exploit  Vulnerebility Securityweek

26.1.20

Patching the Citrix ADC Bug Doesn't Mean You Weren't Hacked Vulnerebility

Bleepingcomputer

26.1.20 Critical MDhex Vulnerabilities Shake the Healthcare Sector Vulnerebility Bleepingcomputer

26.1.20

Cisco Webex flaw allows unauthenticated remote attackers to join private meetings

Vulnerebility

Securityaffairs

26.1.20 Chinese hackers exploited a Trend Micro antivirus zero-day used in Mitsubishi Electric hack Exploit  Hacking  Vulnerebility Securityaffairs
26.1.20 Cisco Webex Vulnerability Exploited to Join Meetings Without a Password Vulnerebility Securityweek
25.1.20 Citrix Patches CVE-2019-19781 Flaw in Citrix ADC 11.1 and 12.0 Vulnerebility

Bleepingcomputer

25.1.20 Expert released DOS Exploit PoC for Critical Windows RDP Gateway flaws Exploit  Vulnerebility Securityaffairs
25.1.20 Citrix Releases More Patches for Exploited Flaw, Tool to Detect Compromise Vulnerebility Securityweek
25.1.20

Cisco Webex Flaw Lets Unauthenticated Users Join Private Online Meetings

Vulnerebility

Threatpost

24.1.20

MDhex vulnerabilities open GE Healthcare patient monitoring devices to attackers

Vulnerebility

Net-security

24.1.20 Cisco fixes critical issue in Cisco Firepower Management Center Vulnerebility Securityaffairs
24.1.20

Cisco Warns of Critical Network Security Tool Flaw

Vulnerebility

Threatpost

24.1.20

Critical, Unpatched ‘MDhex’ Bugs Threaten Hospital Devices

Vulnerebility

Threatpost

24.1.20 Cisco Patches Critical Vulnerability in Network Security Tool Vulnerebility Securityweek
24.1.20 Vulnerabilities Found in GE Healthcare Patient Monitoring Products Vulnerebility Securityweek
23.1.20

IoC Scanner shows if Citrix appliances have been compromised via CVE-2019-19781

Vulnerebility

Net-security

23.1.20

It’s time to patch your Cisco security solutions again

Vulnerebility

Net-security

23.1.20 Serious Vulnerabilities Expose Honeywell Surveillance Systems to Attacks Vulnerebility Securityweek
23.1.20 Multiple Vulnerabilities Found in AMD ATI Radeon Graphics Cards Vulnerebility Securityweek
22.1.20 Unofficial Patch Released for Recently Disclosed Internet Explorer Zero-Day Vulnerebility Securityweek
22.1.20

Honeywell Maxpro VMS/NVR systems vulnerable to hijacking

Vulnerebility

Net-security
22.1.20 Citrix Accelerates Patch Rollout For Critical RCE Flaw Vulnerebility

Threatpost

21.1.20

Micropatch simulates workaround for recent zero-day IE flaw, removes negative side effects

Vulnerebility

Net-security

21.1.20

First patches for the Citrix ADC, Gateway RCE flaw released

Vulnerebility

Net-security

20.1.20 Citrix Releases First Patches for Critical ADC Vulnerability Vulnerebility Securityweek
20.1.20 Citrix Releases Patches for Critical ADC Vulnerability Under Active Attack Vulnerebility Thehackernews
20.1.20 Citrix releases permanent fixes for CVE-2019-19781 flaw in ADC 11.1 and 12.0 Vulnerebility Securityaffairs
20.1.20 WP Database Reset WordPress plugin flaws allow website takeover Vulnerebility Securityaffairs
19.1.20 How Malware Gains Trust by Abusing the Windows CryptoAPI Flaw Vulnerebility  Virus

Bleepingcomputer

19.1.20

Hackers Are Securing Citrix Servers, Backdoor Them for Access Hacking  Vulnerebility

Bleepingcomputer

19.1.20 Dutch Govt Suggests Turning Off Citrix ADC Devices, Mitigations May Fail BigBrothers  Vulnerebility

Bleepingcomputer

19.1.20 Intel Patches High Severity Flaw in VTune Performance Profiler Vulnerebility

Bleepingcomputer

19.1.20

Windows 7 Gets Final Monthly Rollup Update Before End Of Life Vulnerebility

Bleepingcomputer

19.1.20 Microsoft's January 2020 Patch Tuesday Fixes 49 Vulnerabilities Vulnerebility

Bleepingcomputer

19.1.20 Windows 10 Cumulative Updates KB4528760 & KB4534273 Released Vulnerebility

Bleepingcomputer

19.1.20 Microsoft Fixes Windows CryptoAPI Spoofing Flaw Reported by NSA Vulnerebility

Bleepingcomputer

19.1.20 Critical WordPress Plugin Bug Allows Admin Logins Without Password Vulnerebility

Bleepingcomputer

19.1.20 Adobe Releases Their January 2020 Security Updates Vulnerebility

Bleepingcomputer

19.1.20 CISA Releases Test Tool for Citrix ADC CVE-2019-19781 Vulnerability Vulnerebility

Bleepingcomputer

18.1.20

Microsoft Warns of Unpatched IE Browser Zero-Day That's Under Active Attacks Vulnerebility Thehackernews

18.1.20

Attacker Installs Backdoor, Blocks Others From Exploiting Citrix ADC Vulnerability Exploit  Vulnerebility Securityweek
17.1.20 Critical Cisco Flaws Now Have PoC Exploit Exploit  Vulnerebility

Threatpost

17.1.20 Expert released PoC exploits for recently disclosed Cisco DCNM flaws Exploit  Vulnerebility Securityaffairs
17.1.20 PoC Exploits Released for Cisco DCNM Vulnerabilities Exploit  Vulnerebility Securityweek
17.1.20

Summing up CVE-2020-0601, or the Let?s Decrypt vulnerability

Vulnerebility

SANS

16.1.20 Critical WordPress Bug Leaves 320,000 Sites Open to Attack Vulnerebility

Threatpost

16.1.20

Critical auth bypass issues affect InfiniteWP Client and WP Time Capsule WordPress plugins Vulnerebility Securityaffairs
16.1.20 VMware addresses flaws in VMware Tools and Workspace ONE SDK Vulnerebility Securityaffairs
15.1.20 Microsoft addresses CVE-2020-0601 flaw, the first issue ever reported by NSA Vulnerebility Securityaffairs

15.1.20

Vulnerabilities Found in VMware Tools, Workspace ONE SDK Vulnerebility Securityweek

15.1.20

Oracle's January 2020 CPU Delivers 334 New Patches Vulnerebility Securityweek
15.1.20 Adobe Patches Five Critical Illustrator CC Flaws Vulnerebility

Threatpost

15.1.20

Microsoft Patches Major Crypto Spoofing Bug Vulnerebility

Threatpost

15.1.20

Oracle Ties Previous All-Time Patch High with January Updates Vulnerebility

Threatpost

15.1.20

Intel Fixes High-Severity Flaw in Performance Analysis Tool Vulnerebility

Threatpost

15.1.20 January 2020 Adobe Patch Tuesday updates fix issues in Illustrator, Experience Manager Vulnerebility Securityaffairs

15.1.20

SAP Releases 6 Security Notes on January 2020 Patch Day Vulnerebility Securityweek

15.1.20

NSA Discloses Serious Windows Vulnerability to Microsoft BigBrothers  Vulnerebility Securityweek

15.1.20

Microsoft Patch Tuesday for January 2020

Vulnerebility

SANS

15.1.20

January 2020 Patch Tuesday: Microsoft nukes Windows crypto flaw flagged by the NSA

Vulnerebility

Net-security

14.1.20

Google Researchers Detail Critical iMessage Vulnerability Vulnerebility Securityweek
14.1.20 Adobe Patches Vulnerabilities in Illustrator, Experience Manager Vulnerebility Securityweek

14.1.20

Hundreds of Millions of PCs Remain Vulnerable as Windows 7 Reaches End of Life Vulnerebility Securityweek

14.1.20

Update Windows 10 Immediately to Patch a Flaw Discovered by the NSA Vulnerebility Thehackernews

14.1.20

Adobe Releases First 2020 Patch Tuesday Software Updates Vulnerebility Thehackernews

14.1.20

Cisco addressed a high-severity bug in Webex that could allow Remote Code Execution Vulnerebility Securityaffairs

14.1.20

Unpatched Citrix Flaw Now Has PoC Exploits Vulnerebility

Threatpost

14.1.20 ‘Cable Haunt’ Bug Plagues Millions of Home Modems Vulnerebility

Threatpost

12.1.20 Mozilla Firefox 72.0.1 Patches Actively Exploited Zero-Day Exploit  Vulnerebility

Bleepingcomputer

12.1.20 Attackers Are Scanning for Vulnerable Citrix Servers, Secure Now Vulnerebility

Bleepingcomputer

12.1.20 TikTok Flaws Allowed Hackers to Delete Videos, Steal User Info Vulnerebility

Bleepingcomputer

12.1.20 Microsoft Releases January 2020 Office Updates With Crash Fixes OS  Vulnerebility

Bleepingcomputer

11.1.20 PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability Exploit  Vulnerebility Thehackernews

11.1.20

Pulse Secure VPN Vulnerability Still Widely Exploited, CISA Warns Vulnerebility Securityweek

11.1.20

Remote Code Execution Flaw Impacts E2fsprogs Filesystem Utility Vulnerebility Securityweek

11.1.20

Cable Haunt: Millions of Cable Modems With Broadcom Chips Vulnerable to Attacks Attack  Vulnerebility Securityweek

11.1.20

CISA warns that Pulse Secure VPN issue CVE-2019-11510 is still exploited Exploit  Vulnerebility Securityaffairs

11.1.20

Cisco Webex Bug Allows Remote Code Execution

Vulnerebility

Threatpost

10.1.20

Experts warn of ongoing scans for Citrix servers affected by CVE-2019-19781 Vulnerebility Securityaffairs
10.1.20 Hackers Scan for Vulnerable Citrix ADC Systems Vulnerebility Securityweek
10.1.20 PayPal Patches Vulnerability That Exposed User Passwords Vulnerebility Securityweek

10.1.20

January 2020 Patch Tuesday forecast: Let’s start the new decade right

Vulnerebility

Net-security

9.1.20 Critical Firefox 0-Day Under Active Attacks – Update Your Browser Now! Vulnerebility Thehackernews

9.1.20

Attackers exploiting critical Citrix ADC, Gateway flaw, company yet to release fixes

Vulnerebility

Net-security

9.1.20

Mozilla patches actively exploited Firefox zero-day

Exploit  Vulnerebility

Net-security

9.1.20

Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy

Vulnerebility

Threatpost

9.1.20

TikTok Riddled With Security Flaws

Vulnerebility

Threatpost

9.1.20

Mozilla Releases Firefox 72: High-Severity Bugs Patched, Fingerpinting Nixed

Vulnerebility

Threatpost

9.1.20 Mozilla addresses CVE-2019-17026 Firefox Zero-Day exploited in targeted attacks Exploit  Vulnerebility Securityaffairs

9.1.20

Mozilla Patches Firefox Zero-Day Exploited in Targeted Attacks Exploit  Vulnerebility Securityweek

9.1.20

Google Project Zero Updates Vulnerability Disclosure Policy Vulnerebility Securityweek

8.1.20

Security flaws allowed hijacking any TikTok account

Vulnerebility

Securityaffairs

7.1.20

A Quick Update on Scanning for CVE-2019-19781 (Citrix ADC / Gateway Vulnerability)

Vulnerebility

SANS
7.1.20 Antivirus Vendors Patch Bug First Discovered 10 Years Ago Vulnerebility Securityweek
7.1.20 Pulse Secure VPN Vulnerability Exploited to Deliver Ransomware Exploit  Ransomware  Vulnerebility Securityweek
4.1.20 Cisco Talos discovered 2 critical flaws in the popular OpenCV library Vulnerebility Securityaffairs
4.1.20 Serious Vulnerabilities Patched in OpenCV Computer Vision Library Vulnerebility Securityweek
4.1.20

3 Critical Bugs Allow Remote Attacks on Cisco NX-OS and Switches

Vulnerebility

Threatpost

3.1.20 Cisco addresses several flaws in its DCNM product Vulnerebility Securityaffairs
3.1.20 Remote Command Execution and Information disclosure flaws affect dozens of D-Link routers Vulnerebility Securityaffairs
3.1.20 Cisco DCNM Users Warned of Serious Vulnerabilities Vulnerebility Securityweek
3.1.20 Critical Vulnerabilities Impact Ruckus Wi-Fi Routers Vulnerebility Securityweek
3.1.20 Remote Command Execution Vulnerability Affects Many D-Link Routers Vulnerebility Securityweek

2.1.20

High Risk Vulnerabilities Addressed in Big Monitoring Fabric Vulnerebility Securityweek

2.1.20

Citrix Vulnerability Leaves 80,000 Companies at Risk Vulnerebility Securityweek