CISA has added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a critical AMI MegaRAC authentication bypass (CVE-2024-54085) enabling complete system control, an unpatched D-Link DIR-859 router path traversal flaw (CVE-2024-0769) used for credential...
CISA has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, including two in Advantive VeraCore (unrestricted file upload and SQL injection) and three path traversal flaws in Ivanti Endpoint Manager. The VeraCore exploits are linked to Vietnam's X...
CISA adds four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Apache OFBiz, Microsoft .NET Framework, and Paessler PRTG Network Monitor. Federal agencies must patch by February 2025 to address these actively exploited security risks that could l...
CISA adds three actively exploited vulnerabilities to its KEV catalog, affecting Mitel MiCollab and Oracle WebLogic Server. Two critical Mitel vulnerabilities can be combined for unauthorized file access, while the Oracle flaw enables system compromise. Federal agencies must patch by Janua...
