Vulnerability Summary for the Week of August 12, 2024

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info 10Web Form Builder Team--Form Maker by 10Web  Improper Neutralization of Input During Web Page Generation (XSS or…

Comments Off on Vulnerability Summary for the Week of August 12, 2024

CISA Releases Ten Industrial Control Systems Advisories

CISA released ten Industrial Control Systems (ICS) advisories on August 13, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-226-01 AVEVA SuiteLink Server…

Comments Off on CISA Releases Ten Industrial Control Systems Advisories

Microsoft Releases August 2024 Security Updates

Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users…

Comments Off on Microsoft Releases August 2024 Security Updates

Vulnerability Summary for the Week of August 5, 2024

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info 10web--Slider by 10Web Responsive Image Slider  The Slider by 10Web - Responsive Image Slider plugin for WordPress…

Comments Off on Vulnerability Summary for the Week of August 5, 2024

Best Practices for Cisco Device Configuration

In recent incidents, CISA has seen malicious cyber actors acquire system configuration files by leveraging available protocols or software on devices, such as abusing the legacy Cisco Smart Install feature.…

Comments Off on Best Practices for Cisco Device Configuration

Vulnerability Summary for the Week of July 29, 2024

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info Apache Software Foundation--Apache SeaTunnel Web  Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in…

Comments Off on Vulnerability Summary for the Week of July 29, 2024

Vulnerability Summary for the Week of July 22, 2024

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info 202ecommerce--paypal  In the module "PayPal Official" for PrestaShop 7+ releases prior to version 6.4.2 and for PrestaShop…

Comments Off on Vulnerability Summary for the Week of July 22, 2024