A security vulnerability has been identified in MariaDB, a popular open-source database system used by many websites to store site content and user data. If you run MariaDB versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, or 12.3.1 with the wsrep_notify_cmd setting enabled, malicious actors ...
Continue reading
A security flaw has been found in Metabase, a data analysis tool many websites use to view and report on stored information. This is a SQL injection vulnerability, which means an unauthenticated remote attacker (someone without a login to your system, accessing it from anywhere on the internet) can send harmful, unauthorized code directly to the ...
Continue reading
A security flaw has been identified in the Windows Ancillary Function Driver for WinSock, a core Windows component that manages networking functionality for Windows servers and devices. This is a type of memory error called a use-after-free vulnerability, which occurs when a system tries to access a section of memory that has already been freed up ...
Continue reading
A security vulnerability has been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) systems. The flaw is a heap inspection issue that could be exploited by an unauthenticated, remote attacker — meaning someone without valid login credentials for the device — to force the firewall to ...
Continue reading
