The Apache Software Foundation has patched a Tomcat HTTP/2 DoS vulnerability (CVE-2020-11996). A cyber attacker could exploit this vulnerability to cause a denial-of-service (DoS) condition.
Apache patches Tomcat HTTP/2 DoS vulnerability (CVE-2020-11996) Read More »
U.S. government cybersecurity experts are providing guidance on the “top 10” most commonly exploited vulnerabilites. The alert helps highlight the importance of patching and prioritizing vulnerabilities with known exploits.
Patch these 10 most commonly exploited vulnerabilities Read More »
Security researchers have discovered a serious vulnerability CVE-2020-1938 in Apache Tomcat. A bad actor could read or include any files in Tomcat webapp directories.
Ghostcat: Critical Tomcat vulnerability (CVE-2020-1938) Read More »
Security firm Verint analyzed the top 20 vulnerabilities to patch now that are under active attack and exploited by cyber attack groups worldwide. The report is aimed at assisting security teams in prioritizing and enhancing their organization’s patch management efforts.
The top 20 vulnerabilities to patch now (that are most under attack) Read More »
A security researcher has published proof of concept (PoC) for exploit code of an Apache Solr remote code execution vulnerability CVE-2019-12409.
Apache Solr Remote Code Execution vulnerability exploit code published Read More »
The Apache Software Foundation has released new Apache Tomcat security updates to address an HTTP/2 Denial of Service (DoS) vulnerability.
Apache patches Tomcat HTTP/2 DoS vulnerability (CVE-2019-10072) Read More »
The Apache Software Foundation has released new Apache Tomcat versions and mitigations to address a remote code execution (RCE) vulnerability.
Apache patches Tomcat RCE vulnerability Read More »
The Apache Foundation has patched a high severity privilege escalation vulnerability in Apache HTTP Server 2.4 (releases 2.4.17 to 2.4.38). Web servers should be patched as soon as possible since the bug could allow attackers a way to gain “root” or full admin access to server.
Apache Web Server “Carpe Diem” vulnerability update Read More »
A security researcher has disclosed a severe remote code execution bug in open source software versions of LibreOffice and Apache OpenOffice. One of the two have been patched, the other still vulnerable.
Severe vulnerability found in LibreOffice and Apache OpenOffice Read More »
Cisco released four critical security advisories on Wednesday for multiple Cisco products.
Cisco patches critical vulnerabilities Read More »
