Tag: CISA KEV
Check Point rushes a hotfix for a management server zero-day
A path traversal bug in Check Point's management plane was already being used against customers weeks before the vendor knew…
A heap overflow in BIG-IP APM lets outsiders run code
A heap overflow in BIG-IP APM hands unauthenticated attackers code execution on any appliance serving as an OAuth authorization server.
Arista tells customers to patch a VeloCloud orchestrator flaw now
A CVSS 10.0 input validation bug in on-premises VeloCloud Orchestrator is under active exploitation, and fixes cover only two of…
Linux kernel flaws pile up as root exploits land in public
CISA added three Linux kernel flaws to its exploited list while a researcher published working root exploits for four more.
Attackers breach Cisco ISE management interface through an API blind spot
Cisco's identity appliance is being hit through an API endpoint that never checked who was asking.
A logic error in Pixel modems lets attackers climb in silently
A logic error below Android's reach lets attackers escalate on Pixel handsets without any interaction.
Cisco patches a zero-day that turns one email into root
A crafted message can give an unauthenticated attacker root on Cisco's secure email gateway, and the flaw is already being…
Six exploited flaws land on CISA list as NetScaler attacks spread
CISA added six actively exploited flaws to KEV, including a Citrix NetScaler bug now under attack in the wild.