Page 3 - Vulnerability Database News Today

Apple’s Security Engineering and Architecture team found a high-severity security vulnerability in Google Chrome. Time to update your browsers again.

The ML-based Exploit Prediction Scoring System overcomes limitations of legacy vulnerability scoring systems, helping security teams identify systems at greatest risk of attack.

A Redis server malware, that has been built on Rust, is infecting servers based on both Windows as well as Linux. Dubbed the "P2PInfect", this worm is able to exploit the Lua vulnerability.

IT administrators with the open-source Redis database in their environments are being warned of a new peer-to-peer (P2P) worm targeting Windows and Linux servers running the application. Researchers at Palo Alto Networks have dubbed the malware, which they found last week, P2PInfect, saying 934 unpatched Redis instances open to the internet may be vulnerable. It

A federal appeals court affirmed that Synopsys didn't steal trade secrets from Risk Based Security by creating its own database of open-source code vulnerabilities.

Help AG report report dives deep into the top threats over the past 12 months

A record high of more than 26,000 vulnerabilities were reported in 2022 identified as per the NIST National Vulnerability Database (NVD)...

Android security updates patch over 40 vulnerabilities, including CVE-2023-0266, a kernel flaw exploited as a zero-day by a spyware vendor.

The Ribose CNA issues authoritative CVE information for Ribose products and services Ribose has been authorized by the Common Vulnerabilities and Exposures (CVE) Program as a CVE Numbering Authority

Google patched its second zero-day in its popular web browser in less than a week, as reports that its GC2 red-teaming tool was used in malware attacks.