October 18, 2024 – TheCyberThrone

Spring framework fixes a High severity vulnerability CVE-2024-38819

Spring Framework has been identified with a new path traversal vulnerability, poses a significant risk to applications serving static resources via WebMvc.fn or WebFlux.fn functional web frameworks. The vulnerability tracked…

PravinKarthik October 18, 2024

Solarwinds fixes Critical vulnerability CVE-2024-28988 in WHD Product

SolarWinds, has issued a patch for addressing a severe vulnerability in its Web Help Desk (WHD) platform. If exploited, could allow remote attackers to execute arbitrary commands on the host…

PravinKarthik October 18, 2024

Apache Solr fixes Critical Vulnerability CVE-2024-45216

Apache Solr, has been affected by two security vulnerabilities that could present serious risks for organizations running affected Solr instances, potentially exposing them to authentication bypasses and unauthorized code execution.…

PravinKarthik October 18, 2024

CISA added Veeam Backup CVE-2024-40711 to its KEV Catalog

The US CISA has added Veeam Backup flaw to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. CVE-2024-40711 Veeam Backup and Replication contains a deserialization vulnerability…

PravinKarthik October 18, 2024