Skip to main content

CND News and Blog

New Vulnerabilities Friday 01 July


New Alerts for Exemys, GitLab, IBM, Tenable, Microsoft Edge, and Dell.

Exemys 

Exemys RME1 contains an Improper Authentication vulnerability that allows a remote attacker to use a specific credential string to bypass authentication on the web interface and perform administrative operations. CVSSv3 score of 9.8
This module is EOL and will not be patched.
More info.

GitLab 

GitLab has released Critical security fixes, allowing a remote attacker to disclose information, bypass security settings, cause a DoS, and execute code. Highest CVSSv3 score of 10.
More info. And here.

IBM 

PostgreSQL could allow a remote attacker to gain unauthorized access to the system which may affect IBM Spectrum Protect Plus. CVSSv3 score of 9.8
More info.

Tenable 

Tenable.sc includes Apache as third-party software and has been updated with the latest Apache fixes. Highest CVSSv3 score of 9.8
More info.

Microsoft 

Microsoft has patched a vulnerability in Edge. CVSSv3 score of 8.3
More info.

Dell 

Dell PowerScale OneFS contains an unprotected primary channel. A remote attacker can cause a denial of filesystem services. CVSSv3 score of 5.3
More info.



Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

A mobile version of our Security Wizardry Radar Page, providing vulnerability details and visibility for a variety of software and industries.

SecurityWizardry.com - Vulnerability Details

Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.

Report Print
×
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Friday, 19 April 2024

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/