#critical vulnerability

Multiple vulnerabilities have been discovered in Progress’s WS_FTP, which include .NET deserialization, directory traversal, reflected cross-site scripting (XSS), SQL injection, stored cross-site scripting, cross-site request forgery, and unauthenticated user enumeration vulnerability. These vulnerabilities’ severities range from 5.3 (Medium) to 10.0 (Critical). However, Progress has released…

Anxiously Awaited OpenSSL Vulnerability’s Severity Downgraded From Critical to High

Home › Vulnerabilities Anxiously Awaited OpenSSL Vulnerability’s Severity Downgraded From Critical to High By Eduard Kovacs on November 01, 2022 Tweet The OpenSSL Project on Tuesday announced the release of OpenSSL 3.0.7. Everyone was anxiously awaiting to learn the details of the first critical vulnerability discovered since 2016, but the project’s developers decided to downgrade the flaw’s…

Home › Virus & Threats Critical ConnectWise Vulnerability Affects Thousands of Internet-Exposed Servers By Eduard Kovacs on October 31, 2022 Tweet IT management software provider ConnectWise on Friday announced updates that patch a critical vulnerability which, according to cybersecurity professionals, exposes thousands of servers to attacks. The flaw, described as “improper neutralization of…

Water Tank Management System Used Worldwide Has Unpatched Security Hole

Home › ICS/OT Water Tank Management System Used Worldwide Has Unpatched Security Hole By Eduard Kovacs on September 16, 2022 Tweet A water tank management system used by organizations worldwide is affected by a critical vulnerability that can be exploited remotely and the vendor does not appear to want to patch it. The affected product is made by the water and energy unit of Irish building…

SonicWall Warns of Critical GMS SQL Injection Vulnerability

Home › Endpoint Security SonicWall Warns of Critical GMS SQL Injection Vulnerability By Ryan Naraine on July 22, 2022 Tweet Network security appliance vendor SonicWall late Thursday shipped urgent patches for a critical flaw in its Global Management System (GMS) software, warning that the issue exposes businesses to remote hacker attacks. The vulnerability, which carries a critical-severity…

Netwrix Auditor Vulnerability Can Facilitate Attacks on Enterprises

Home › Vulnerabilities Netwrix Auditor Vulnerability Can Facilitate Attacks on Enterprises By Eduard Kovacs on July 20, 2022 Tweet Data security company Netwrix recently patched a vulnerability in its Auditor product that could allow attackers to execute arbitrary code and possibly compromise an organization’s Active Directory domain. The flaw in the IT auditing software was discovered by…