Tag: Common Vulnerabilities and Exposures (CVE)

Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/ Source: Embrace The Red Title: Amazon Q Developer: Remote Code Execution with Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a popular coding agent, with over 1 million downloads. The extension is vulnerable to indirect prompt injection, and in this post we discuss a vulnerability that…

Bulletins: Vulnerability Summary for the Week of June 9, 2025

Jun 16, 2025

—

by

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-167 Source: Bulletins Title: Vulnerability Summary for the Week of June 9, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Acer–ControlCenter Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named…

The Register: Salesforce tags 5 CVEs after SaaS security probe uncovers misconfig risks

Jun 11, 2025

—

by

Source URL: https://www.theregister.com/2025/06/11/salesforce_cves_misconfigs/ Source: The Register Title: Salesforce tags 5 CVEs after SaaS security probe uncovers misconfig risks Feedly Summary: The 16 other flagged issues are on customers, says CRM giant Salesforce has assigned five CVE identifiers following a security report that uncovered more than 20 configuration weaknesses, some of which exposed customers to unauthorized…

Wired: ‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program

—

by

Source URL: https://www.wired.com/story/cve-program-cisa-funding-chaos/ Source: Wired Title: ‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program Feedly Summary: The CVE Program is the primary way software vulnerabilities are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it. AI Summary and Description: Yes Summary: The…

The Register: CVE program gets last-minute funding from CISA – and maybe a new home

—

by

Source URL: https://www.theregister.com/2025/04/16/cve_program_funding_save/ Source: The Register Title: CVE program gets last-minute funding from CISA – and maybe a new home Feedly Summary: Feds extend vulnerability nerve-center contract at 11th hour In an 11th-hour reprieve, the US government last night agreed to continue funding the globally used Common Vulnerabilities and Exposures (CVE) Program.… AI Summary and…

Schneier on Security: CVE Program Almost Unfunded

—

by

Source URL: https://www.schneier.com/blog/archives/2025/04/cve-program-almost-unfunded.html Source: Schneier on Security Title: CVE Program Almost Unfunded Feedly Summary: Mitre’s CVE’s program—which provides common naming and other informational resources about cybersecurity vulnerabilities—was about to be cancelled, as the US Department of Homeland Security failed to renew the contact. It was funded for eleven more months at the last minute. This…

Slashdot: CISA Extends Funding To Ensure ‘No Lapse in Critical CVE Services’

—

by

Source URL: https://it.slashdot.org/story/25/04/16/1441255/cisa-extends-funding-to-ensure-no-lapse-in-critical-cve-services?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: CISA Extends Funding To Ensure ‘No Lapse in Critical CVE Services’ Feedly Summary: AI Summary and Description: Yes Summary: The extension of funding for the Common Vulnerabilities and Exposures (CVE) program by CISA is crucial in maintaining continuity in cybersecurity operations. The importance of the CVE program is underscored…

Slashdot: Cybersecurity World On Edge As CVE Program Prepares To Go Dark

—

by

Source URL: https://it.slashdot.org/story/25/04/16/0050230/cybersecurity-world-on-edge-as-cve-program-prepares-to-go-dark?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Cybersecurity World On Edge As CVE Program Prepares To Go Dark Feedly Summary: AI Summary and Description: Yes Summary: The potential expiration of MITRE’s DHS contract on April 16, 2025, threatens the continuity of the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs, which are crucial…

Krebs on Security: Funding Expires for Key Cyber Vulnerability Database

—

by