Recently, researchers from AMD and the Graz University of Technology in Austria disclosed a new vulnerability named “CacheWarp,” tracked under the identifier “CVE-2023-20592”. This vulnerability affects the first three generations of AMD’s EPYC server...
Microsoft has released its November 2023 Patch Tuesday updates, addressing a total of 58 vulnerabilities, including five zero-day flaws that have been actively exploited by attackers. This month’s update highlights the importance of staying...
A critical authentication bypass vulnerability has been discovered in VMware Cloud Director Appliance (VCD Appliance) that affects version 10.5 which was upgraded from an older version. This vulnerability, CVE-2023-34060, allows a malicious actor with...
SAP, a leading enterprise software maker, has once again underscored its commitment to these principles with the release of its November 2023 Security Patch Day advisories. This month, the spotlight falls on a series...
In the realm of website performance optimization, the WP Fastest Cache plugin has emerged as a trusted ally for over a million WordPress websites, promising enhanced speed through efficient caching of static HTML files....
PostgreSQL, a beacon of reliability and performance in the realm of open-source relational database management systems (RDBMS), recently encountered turbulent waters. Despite its reputation for robustness and SQL compliance, three new vulnerabilities have emerged,...
VideoLAN has released VLC Media Player 3.0.20, which includes fixes for two critical security vulnerabilities. These vulnerabilities could have allowed attackers to take control of affected systems. CVE-2023-47359 The first vulnerability, CVE-2023-47359, is a...
With more and more Chinese brand operators adopting a simplified hinge design on their foldable screens, greatly reducing the weight of the devices while ensuring durability, Samsung is clearly also planning to further improve...
A Chrome 107 update released by Google on Thursday patches an actively exploited Chrome vulnerability. Tracked as CVE-2022-4135 and considered “high severity,” the exploited security flaw is described as a heap buffer overflow in GPU....
The Apache Software Foundation on Monday addressed two [1,2] vulnerabilities in Apache Airflow that a remote attacker to execute arbitrary commands and sensitive values in the rendered template. Apache Airflow is a platform to...
Recently, Linux officially issued a risk notice for remote code execution of Linux Kernel TIPC, the vulnerability number is CVE-2021-43267, the vulnerability level is serious. TIPC (Transparent Inter Process Communication) is a protocol designed...
Cisco issued a security bulletin explaining the recently discovered and fixed security vulnerabilities. According to the bulletin, Cisco used hard-coded debugging accounts in some devices. The so-called hard-coded debugging account refers to the account...
