Aggregator

CVE-2023-20081 | Cisco ASA/Firepower Threat Defense/IOS/IOS XE IPv6 DHCP Client denial of service (cisco-sa-asaftdios-dhcpv6-cli-Zf3zTv / EUVD-2023-24260)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in Cisco ASA, Firepower Threat Defense, IOS and IOS XE and classified as problematic. Affected by this vulnerability is an unknown functionality of the component IPv6 DHCP Client. Executing manipulation can lead to denial of service. This vulnerability is handled as CVE-2023-20081. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

Staying Proactive in Managing Cloud Permissions?

Security Boulevard
1 month 1 week ago

Is Your Organization Fully Leveraging the Benefits of Proactive Cloud Permissions Management? Organizations today increasingly acknowledge the significance of robust cybersecurity strategies in safeguarding their invaluable assets. One aspect of such strategies that is nonetheless often overlooked is the management of Non-Human Identities (NHIs) and their secrets. NHIs, which are essential machine identities in cybersecurity, […]

The post Staying Proactive in Managing Cloud Permissions? appeared first on Entro.

The post Staying Proactive in Managing Cloud Permissions? appeared first on Security Boulevard.

Alison Mack

Pushing Innovation with Secure Machine Identities

Security Boulevard
1 month 1 week ago

Can We Truly Innovate Without Security? It’s an intriguing question, isn’t it? We’ve often seen technological leaps and bounds happening when there is a focus on innovation. Yet, without the underlying cradle of security, the innovative genius loses its strength. We delve into the strategic importance of secure machine identities, a crucial aspect that is […]

The post Pushing Innovation with Secure Machine Identities appeared first on Entro.

The post Pushing Innovation with Secure Machine Identities appeared first on Security Boulevard.

Alison Mack

CVE-2025-5514 | Mitsubishi Electric MELSEC iQ-F Web Server length parameter (icsa-25-233-01)

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as problematic, has been found in Mitsubishi Electric MELSEC iQ-F. Impacted is an unknown function of the component Web Server. This manipulation causes improper handling of length parameter inconsistency. This vulnerability is tracked as CVE-2025-5514. The attack is possible to be carried out remotely. No exploit exists. It is advisable to implement restrictive firewalling.
vuldb.com

CVE-2025-8678 | WP Crontrol Plugin up to 1.19.1 on WordPress wp_remote_request server-side request forgery (EUVD-2025-25506)

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as critical was found in WP Crontrol Plugin up to 1.19.1 on WordPress. This issue affects the function wp_remote_request. The manipulation results in server-side request forgery. This vulnerability is identified as CVE-2025-8678. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-55230 | Microsoft Windows up to Server 2025 MBT Transport Driver untrusted pointer dereference (EUVD-2025-25496)

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as critical has been found in Microsoft Windows. This vulnerability affects unknown code of the component MBT Transport Driver. The manipulation leads to untrusted pointer dereference. This vulnerability is referenced as CVE-2025-55230. The attack can only be performed from a local environment. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-24489 | INFINITT Healthcare PACS System Manager up to 3.0.11.5 BN9 unrestricted upload (icsma-25-100-01)

VulDB Recent Entries
1 month 1 week ago
A vulnerability described as critical has been identified in INFINITT Healthcare PACS System Manager up to 3.0.11.5 BN9. This affects an unknown part. Executing manipulation can lead to unrestricted upload. The identification of this vulnerability is CVE-2025-24489. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-55229 | Microsoft Windows up to Server 2025 Windows Certificates signature verification (EUVD-2025-25495)

VulDB Recent Entries
1 month 1 week ago
A vulnerability marked as problematic has been reported in Microsoft Windows. Affected by this issue is some unknown functionality of the component Windows Certificates. Performing manipulation results in improper verification of cryptographic signature. This vulnerability was named CVE-2025-55229. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-27714 | INFINITT Healthcare ACS System Manager up to 3.0.11.5 BN9 Endpoint unrestricted upload (icsma-25-100-01)

VulDB Recent Entries
1 month 1 week ago
A vulnerability labeled as critical has been found in INFINITT Healthcare ACS System Manager up to 3.0.11.5 BN9. Affected by this vulnerability is an unknown functionality of the component Endpoint. Such manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-27714. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.
vuldb.com

Managed ad