December 10, 2024
Tech Stack Date(s) Issued Criticality Overview CVE-2024-23897 is a critical vulnerability in Jenkins that stems from the misuse of the args4j library in its Command Line […]
December 10, 2024
Tech Stack Date(s) Issued Criticality Overview CVE-2016-8735 is a vulnerability in Apache Traffic Server that can be exploited to cause a Denial of Service (DoS) condition. […]
December 10, 2024
Tech Stack Date(s) Issued Criticality Overview CVE-2016-4437 is a critical vulnerability in Apache Shiro prior to version 1.2.5. If the cipher key for the “remember me” […]
November 29, 2024
SUBJECT: CVE-2021-41773 Apache HTTP Server Path Traversal Vulnerability TECH STACK: Apache HTTP Server versions 2.4.1 to 2.4.46. DATE(S) ISSUED: 10/05/2021 CRITICALITY: HIGH OVERVIEW: CVE-2021-41773 is a vulnerability in the Apache […]
November 29, 2024
Subject: Mitigating CVE-2024-28987: Hardcoded Credentials Vulnerability in SolarWinds Web Help Desk Tech Stack: SolarWinds Web Help Desk (WHD) Date(s) Issued: Criticality: Overview Vulnerability:The SolarWinds Web Help […]
November 29, 2024
SUBJECT: Apple Multiple Products Type Confusion Vulnerability (CVE-2024-23222) TECH STACK: Various Apple products (specific devices and software versions to be confirmed upon analysis completion) DATE(S) ISSUED: 01/22/2024 NVD Last […]
November 29, 2024
SUBJECT: Critical RCE Vulnerability (CVE-2024-0519) in Google Chrome – Update Immediately TECH STACK: Google Chrome versions prior to 120.0.6099.224 DATE(S) ISSUED: 01/16/2024 NVD Last Modified: 01/22/2024 CRITICALITY: HIGH (Base Score […]
November 29, 2024
SUBJECT: Mitigate Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21351) TECH STACK: Microsoft Windows (all supported versions) DATE(S) ISSUED: 02/13/2024 NVD Last Modified: 02/14/2024 CRITICALITY: 7.6 HIGH -Microsoft considers this […]
November 29, 2024
SUBJECT: Mitigating CVE-2023-38203: ColdFusion Deserialization of Untrusted Data Vulnerability TECH STACK: Adobe ColdFusion DATE(S) ISSUED: 07/20/2023 NVD Last Modified: 01/08/2024 CRITICALITY: 9.8 CRITICAL OVERVIEW: This document outlines the steps to […]
November 29, 2024
SUBJECT: CVE-2019-12815 ProFTPD Use-After-Free Vulnerability TECH STACK: ProFTPD versions 1.3.1 to 1.3.6 DATE(S) ISSUED: 06/19/2019 CRITICALITY: HIGH OVERVIEW: CVE-2019-12815 is a use-after-free vulnerability in ProFTPD, an FTP server software, that […]
November 29, 2024
Subject: End of Life for Apache Tomcat 7.0.x Tech Stack: Date Issued: Criticality: Overview: Attack Mechanisms: Affected Systems: Mitigation Solution: References:
November 29, 2024
SUBJECT: Critical Security Update Required for PHP 5.4.x Before 5.4.43 TECH STACK: PHP 5.4.x Web Servers ISSUE IDENTIFICATION: PHP Version < 5.4.43 NOTIFICATION DATE: 07/10/2015 LAST […]