Vulnerability Summary for the Week of May 19, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info AutomationDirect--MB-Gateway The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration…

Comments Off on Vulnerability Summary for the Week of May 19, 2025

Advisory Update on Cyber Threat Activity Targeting Commvault’s SaaS Cloud Application (Metallic)

Commvault is monitoring cyber threat activity targeting their applications hosted in their Microsoft Azure cloud environment. Threat actors may have accessed client secrets for Commvault’s (Metallic) Microsoft 365 (M365) backup software-as-a-service…

Comments Off on Advisory Update on Cyber Threat Activity Targeting Commvault’s SaaS Cloud Application (Metallic)

Russian GRU Targeting Western Logistics Entities and Technology Companies

Executive Summary This joint cybersecurity advisory (CSA) highlights a Russian state-sponsored cyber campaign targeting Western logistics entities and technology companies. This includes those involved in the coordination, transport, and delivery…

Comments Off on Russian GRU Targeting Western Logistics Entities and Technology Companies

Vulnerability Summary for the Week of May 12, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info admintwentytwenty--UiPress lite | Effortless custom dashboards, admin themes and pages The UiPress lite | Effortless custom dashboards, admin themes…

Comments Off on Vulnerability Summary for the Week of May 12, 2025

Vulnerability Summary for the Week of May 5, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1clickmigration--1 Click WordPress Migration Plugin 100% FREE for a limited time The 1 Click WordPress Migration Plugin - 100%…

Comments Off on Vulnerability Summary for the Week of May 5, 2025

Vulnerability Summary for the Week of April 28, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Novel-Plus--Novel-Plus A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the…

Comments Off on Vulnerability Summary for the Week of April 28, 2025