CISA KEV Update January 2024 – Part II

CISA KEV Update January 2024 – Part II

The U.S. CISA has added an Ivanti Connect Secure and Policy Secure flaws and Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog. Ivanti has reported that threat actors…
CISA KEV Update Part I – January 2024

CISA KEV Update Part I – January 2024

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability These…
CISA KEV Update Part I – December 2023

CISA KEV Update Part I – December 2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added ownCloud and Google Chrome vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2023-6345 is a high-severity integer overflow in Skia. Skia…
CISA KEV Update Part III – October 2023

CISA KEV Update Part III – October 2023

The US CISA has added two new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. These vulnerabilities are: CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway…
CISA KEV Update Part I – October 2023

CISA KEV Update Part I – October 2023

The U.S. CISA added the JetBrains TeamCity flaw  CVE-2023-42793  and Windows bug CVE-2023-28229 to its Known Exploited Vulnerabilities Catalog. Below are the descriptions of the two vulnerabilities: CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability. The vulnerability…