Cyber alerts

2,875 results

December 2024

Published Thursday 19 December 2024 (01:14) (updated 19 December 2024)

Foxit Releases Security Updates Affecting Foxit PDF Reader and Foxit PDF Editor

Security updates address multiple vulnerabilities that could lead to remote code execution, information disclosure, privilege escalation, or DoS

CC-4591 Medium

Published Tuesday 17 December 2024 (03:16) (updated 15 January 2025)

BeyondTrust Releases Security Advisory for Remote Support & Privileged Remote Access

A critical vulnerability in BeyondTrust remote access tools could lead to code injection

CC-4592 Medium

Published Tuesday 17 December 2024 (02:31) (updated 17 December 2024)

Proof-of-Concept Released for Critical Apache Struts Vulnerability

CVE-2024-53677 could allow unauthenticated remote code execution, path traversal or upload of malicious files

CC-4590 Medium

Published Wednesday 11 December 2024 (04:57) (updated 18 December 2024)

Cleo Releases Security Advisory for Harmony, VLTrader, and LexiCom

Exploitation in the wild reported for two vulnerabilities potentially leading to RCE

CC-4589 Medium

Published Wednesday 11 December 2024 (04:45) (updated 11 December 2024)

Microsoft Releases December 2024 Security Updates

Scheduled updates for Microsoft products, including security updates for 72 vulnerabilities, with 1 reported as actively exploited

CC-4588 High

Published Wednesday 11 December 2024 (04:09) (updated 12 December 2024)

Exploitation of critical path traversal vulnerability (CVE-2024-41713) and 0-day path traversal vulnerability (CVE-2024-55550) in Mitel MiCollab

Evidence of chained exploitation of path traversal vulnerabilities affecting Mitel MiCollab following public release of proof-of-concept code

CC-4587 Medium

Published Wednesday 11 December 2024 (02:59) (updated 11 December 2024)

Ivanti Releases Security Updates for Multiple Products

Updates address critical vulnerabilities in Cloud Services Application, Connect Secure, and Policy Secure

CC-4586 Medium

Published Tuesday 10 December 2024 (02:05) (updated 10 December 2024)

QNAP Fixes Several Vulnerabilities Affecting High-End NAS Devices

QNAP has released a security update addressing several vulnerabilities in their QTS and QuTS NAS operating systems

CC-4585 Medium

Published Thursday 5 December 2024 (03:41) (updated 2 May 2025)

SonicWall Releases Security Updates for SMA100 SSL-VPN Products

Three buffer overflow vulnerabilities could lead to code execution and three others concern path traversal, authentication bypass, and insecure randomness

CC-4584 Medium

Published Wednesday 4 December 2024 (03:30) (updated 4 December 2024)

Veeam Releases Updates for Service Provider Console and Backup & Replication

The security updates address one critical and ten high severity vulnerabilities