Some time ago, the Surface Laptop 3 has a screen cracking problem, some Surface Book 3 users reported some problems with their device’s headphone jack. In many forums on the Internet, you can see...
Recently, Apache Guacamole officially released the risk notification for the remote code execution vulnerability in the Guacamole gateway. The vulnerability number is CVE-2020-9497/CVE-2020-9498, and the vulnerability level is medium. Apache Guacamole is a clientless remote...
On June 30, 2020, Microsoft officially released a risk notification for the Microsoft Windows Codecs library remote code execution Vulnerability The vulnerability numbers are CVE-2020-1457 [1] and CVE-2020-1425 [2], and the vulnerability level is...
Palo Alto officially issued a risk notification that bypassed the SAML authentication mechanism. The vulnerability number is CVE-2020-2021, and the vulnerability level is high risk. Security Assertion Markup Language (SAML) is a standard for logging...
Recently, Apache Tomcat issued a notice saying that an HTTP/2 Denial of Service vulnerability (CVE-2020-11996) exists on Apache Tomcat was fixed. “A specially crafted sequence of HTTP/2 requests could trigger high CPU usage for...
Recently, Apache Spark officially released the Apache Spark remote code execution risk notice. The vulnerability number is CVE-2020-9480, and the vulnerability level is high risk. Apache Spark is an open-source distributed general-purpose cluster-computing framework....
Recently, Apache Dubbo announced a remote code execution vulnerability (CVE-2020-1948). “An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is...
The well-known open-source media player VLC has recently released a security bulletin and released a new version. This security bulletin contains a high-risk level security vulnerability. This security vulnerability can trigger the remote execution...
Recently, VMware released a risk notification [1, 2] for multiple vulnerabilities in desktop virtualization products. This security update is aimed at multiple virtualization products under VMware, and local attackers can trigger vulnerabilities with low...
Today, Adobe officially released the June security update, which fixed multiple vulnerabilities in Adobe’s products, including Adobe Framemaker, Adobe Experience Manager, and Adobe Flash Player. Vulnerability Details Adobe Framemaker Adobe Framemaker security update released...
Today, Microsoft officially released the Microsoft June Patch Tuesday to fix multi security vulnerabilities in its product. This security update patched for 129 vulnerabilities, mainly covering the Windows operating system, Windows application store, IE/Edge...
RiskSense has released a new report that provides in-depth discovery of vulnerabilities in currently popular open-source software, including the number of vulnerabilities, which software is most vulnerable to threats, and the main types of...
Recently, Cisco officially released security advisories for multiple vulnerabilities in IOS (Cisco Internetworking Operating System) components, the vulnerability number is CVE-2020-3227/CVE-2020-3205/CVE-2020-3198/CVE-2020-3258 and vulnerability rating is high risk. Cisco Internetwork Operating System (IOS) is a...
Recently, IBM officially issued a notice to fix the remote code execution (CVE-2020-4450) vulnerability in WebSphere Application Server (WAS). This vulnerability was caused by the deserialization of the IIOP protocol. Attackers can remotely attack...
Recently, we have detected that researchers have published PoC for the remote code execution vulnerability of the SMBv3 protocol (CVE-2020-0796), which greatly increased the potential harm of the vulnerability. Users who have not fixed...
Recently, Spring Cloud Config officially released a new version to fix directory traversal vulnerability. The vulnerability number is CVE-2020-5410, and the vulnerability level is medium. Spring Cloud Config provides server-side and client-side support for...
