Browsing: Alerts

<p>The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker…

Serial number: AV26-492Date: May 20, 2026 On May 20, 2026, Drupal published a security advisory to address a critical vulnerability in the…

HomeDescriptionA missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring…

HomeDescriptionauthentik is an open-source identity provider. Versions 2025.12.4 and prior, and versions 2026.2.0-rc1 through 2026.2.2 were vulnerable to Authentication Bypass…

Serial number: AV26-493Date: May 20, 2026 On May 20, 2026, Splunk published security advisories to address vulnerabilities in the following…

Overview A privilege escalation vulnerability, nicknamed “Dirty Frag,” has been discovered in the Linux kernel versions 4.10 and later. This…

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to take control of the victim’s browser. The…

Synopsis SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters (‘model_name’, ‘model_id’, ‘integration_id’, ‘provider’) on…

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2008-4250…

<p>TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to…