Jul 2, 2024
1 new incident, 1 with updates.
Started
- ClosedPatched
Twilio Authy Information Disclosure
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy. Added to the CISA KEV catalog on 2024-07-23.
Twilio AuthyClosed Jul 23, 2024
Updated
- ClosedPatched
Cisco NX-OS Command Injection
Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device. Added to the CISA KEV catalog on 2024-07-02.
Cisco NX-OSClosed Jul 2, 2024
