آسیبپذیریها و تهدیدات روز با رتبهبندی CVSS و شدت — مستقیم از تیم تحلیل تهدیدات سیاره فناوری اطلاعات.
VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is …
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An …
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code …
WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of …
WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability …
Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution. اقدام …
Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote …
Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. اقدام لازم: …
Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login …
Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability …