Vulnerabilities
Onapsis, a firm specializing in business-critical application security, has published a total of five advisories detailing vulnerabilities found in enterprise solutions developed by SAP.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Researchers who discovered and responsibly disclosed vulnerabilities in Facebook last year were awarded a total of $1.3 million, the social media giant said on...
Vulnerabilities
Lenovo is the latest high-profile victim of a DNS hijacking attack. Hackers managed to redirect website visitors to an arbitrary page and they intercepted...
Vulnerabilities
Google has decided to ditch single-day Pwnium competitions in favor of a year-round program that gives researchers the opportunity to get considerable rewards for...
Vulnerabilities
Hackers are exploiting a known vulnerability in a Google Maps plugin for Joomla to launch distributed denial-of-service attacks against enterprises. According to Akamai Technologies'...
Vulnerabilities
WordPress website administrators who use the WP Slimstat Web analytics plugin are advised to update the application as soon as possible. The plugin is...
Vulnerabilities
A vulnerability has been found in the Device Type Manager (DTM) component used by Schneider Electric in some of the company’s Invensys SRD Control...
Vulnerabilities
A total of 17 security holes have been addressed by Mozilla with the release of Firefox 36. The latest version of the Web browser...
Vulnerabilities
The developers of PrivDog released an update for the application on Monday after researchers discovered that it failed to validate SSL certificates.
Vulnerabilities
Samba, the Windows interoperability suite of programs for Linux and Unix, is plagued by a serious vulnerability that can be exploited for arbitrary code...
Vulnerabilities
What is old may not always be new, but when it comes to hacking, it's still effective.
Vulnerabilities
Cisco Fixes DoS Vulnerability in IOS XR SoftwareCisco has released software updates to address a denial-of-service (DoS) vulnerability in IOS XR Software, a self-healing...
Vulnerabilities
The Telegram messaging app has security holes that allows attackers to get a peak at users' messages by bypassing encryption, according mobile security firm Zimperium.
Vulnerabilities
The controversial SSL interception library used by the Superfish software installed recently on Lenovo laptops can be found in at least a dozen other...
Vulnerabilities
The Internet Systems Consortium (ISC) has released security updates to address a medium-severity vulnerability in BIND, the most widely used Domain Name System (DNS)...
Cybersecurity Funding
Synack, a startup that has built a platform for crowdsourced security testing, announced on Thursday that it has raised $25 million in Series B...
Vulnerabilities
Researchers at FireEye revealed more information about how attackers can compromise iOS devices.
Vulnerabilities
A combination of vulnerabilities could have allowed a malicious hacker to delete any comment on Facebook, according to a researcher.
Vulnerabilities
Some versions of the stock email app in Android are plagued by a vulnerability that can be exploited to cause the application to crash,...
Vulnerabilities
A security flaw affecting several Netgear Wi-Fi router models can be exploited to gain access to various pieces of information, including the administrator password,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)