Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Arm: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2022-46395 | 8,8 Visoko | 2,7 % | – | Arm | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 |
Naši članki: Arm
Obvestilo RPKI: 53 varnostnih ran odkritih v alarmantnem novem poročilu. Cybersecurity, BGP security, RPKI security.
## Varnost BGP: Kako RPKI Prispeva k Cybersecurity BGP (Protokol Border Gateway) se pogosto uporablja za usmerjanje podatkov na internetu. Kljub njegovi široki uporabi pa je...
Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw
Active Exploitation Attempts Targeting CVE-2024-45519 in Synacor's Zimbra Collaboration Cybersecurity researchers are raising alarms about active exploitation attempts targeting a newly disclosed security flaw in Synacor's...
Hackerji izvajajo velikanske napade na Docker Swarm, Kubernetes in strežnike SSH. Odstranitev zlonamerne kode in zaščita pred napadi v kibernetskem varnosti.
## Nova kampanja zlonamerne programske opreme, ki cilja na Docker Raziskovalci so odkrili novo kampanjo zlonamerne programske opreme, ki cilja na tehnologije mikrostoritev. Ta kampanja izkorišča...
SolarWinds Releases Patch for Critical ARM Vulnerability: Guard Against RCE Threats
SolarWinds Access Rights Manager Security Fixes It seems like SolarWinds isn’t catching a break in the security realm. The recent release by SolarWinds to address two...
Breaking Down the Security Flaws in Solarman and Deye Solar Systems
Critical Security Flaws Discovered in Chinese Solar Management Platforms In a concerning revelation, cybersecurity researchers have uncovered critical security vulnerabilities in the photovoltaic system management platforms...
Kritična ranljivost v Google Cloud: Alarm za varnostne strokovnjake
Kaj se je zgodilo? Google Cloud je objavil zaskrbljujočo novico, ki je vznemirila mnogo strokovnjakov za računalniško varnost in številne uporabnike ter podjetja, ki zaupajo tej...
Cybersecurity Agencies Sound the Alarm on APT40’s Swift Exploit Evolution
Global Cybersecurity Agencies Warn of China-linked APT40 Threat In a collaborative move, cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the United Kingdom,...
Summary of Vulnerability and Protection Measures against AutomationDirect C-more EA9 HMI Vulnerabilities
CVE-2025-0960 is a critical vulnerability impacting the AutomationDirect C-more EA9 HMI. Identified on January 31, 2025, this vulnerability represents a “Classic Buffer Overflow” (CWE-120) and can...
Summary of Vulnerability CVE-2025-24964: Remote Code Execution in Vitest API Server
CVE-2025-24964 is a critical vulnerability that affects the popular Vitest testing framework. This vulnerability enables attackers to execute remote code through a Cross-Site WebSocket Hijacking (CSWSH)...