CVSS – Page 5 – Experimental News Clipping Site

The Register: February’s Patch Tuesday sees Microsoft offer just 63 fixes

Feb 12, 2025

—

by

Source URL: https://www.theregister.com/2025/02/12/patch_tuesday_february_2025/ Source: The Register Title: February’s Patch Tuesday sees Microsoft offer just 63 fixes Feedly Summary: Don’t relax just yet: Redmond has made some certificate-handling changes that could trip unprepared admins Patch Tuesday Microsoft’s February patch collection is mercifully smaller than January’s mega-dump. But don’t get too relaxed – some deserve close attention,…

Cisco Talos Blog: Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities

Feb 11, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/february-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities Feedly Summary: Microsoft has released its monthly security update for January of 2025 which includes 58 vulnerabilities, including 3 that Microsoft marked as “critical” and one marked as “moderate". The remaining vulnerabilities listed are classified…

Bulletins: Vulnerability Summary for the Week of February 3, 2025

Feb 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-041 Source: Bulletins Title: Vulnerability Summary for the Week of February 3, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info .TUBE gTLD–.TUBE Video Curator Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in .TUBE gTLD .TUBE Video Curator allows Reflected XSS. This issue affects…

The Register: DeepSeek’s iOS app is a security nightmare, and that’s before you consider its TikTok links

Feb 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/10/infosec_in_brief/ Source: The Register Title: DeepSeek’s iOS app is a security nightmare, and that’s before you consider its TikTok links Feedly Summary: PLUS: Spanish cops think they’ve bagged NATO hacker; HPE warns staff of data breach; Lazy Facebook phishing, and more! Infosec In Brief DeepSeek’s iOS app is a security nightmare that you…

Hacker News: Google Fixes Android Kernel Zero-Day Exploited in Attacks

Feb 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://thedefendopsdiaries.com/google-fixes-android-kernel-zero-day-exploited-in-attacks/ Source: Hacker News Title: Google Fixes Android Kernel Zero-Day Exploited in Attacks Feedly Summary: Comments AI Summary and Description: Yes Summary: CVE-2024-53104 has emerged as a significant zero-day vulnerability within the Linux kernel, particularly impacting the USB Video Class driver, and presents severe risks to Android devices. The exploration of this flaw…

The Register: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

Feb 5, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/05/netgear_fixes_critical_bugs_while/ Source: The Register Title: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge Feedly Summary: International security squads all focus on stopping baddies busting in through routers, IoT kit etc Netgear is advising customers to upgrade their firmware after it patched two critical vulnerabilities affecting multiple routers.… AI…

The Register: Google patches odd Android kernel security bug amid signs of targeted exploitation

Feb 4, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/04/google_android_patch_netgear/ Source: The Register Title: Google patches odd Android kernel security bug amid signs of targeted exploitation Feedly Summary: Also, Netgear fixes critical router, access point vulnerabilities Google has released its February Android security updates, including a fix for a high-severity kernel-level vulnerability, which is suspected to be in use by targeted exploits.……

Bulletins: Vulnerability Summary for the Week of January 27, 2025

Feb 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-034 Source: Bulletins Title: Vulnerability Summary for the Week of January 27, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 0xPolygonZero–plonky2 Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always…

The Register: Wacom says crooks probably swiped customer credit cards from its online checkout

Jan 30, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/01/30/wacom_data_loss/ Source: The Register Title: Wacom says crooks probably swiped customer credit cards from its online checkout Feedly Summary: Digital canvas slinger indicates dot-com was skimmed for over a month Graphics tablet maker Wacom has warned customers their credit card details may well have been stolen by miscreants while they were buying stuff…

Bulletins: Vulnerability Summary for the Week of December 16, 2024

Jan 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb24-358 Source: Bulletins Title: Vulnerability Summary for the Week of December 16, 2024 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1000 Projects–Attendance Tracking Management System A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is…

Tag: CVSS