Jul 17, 2024
1 new incident, 2 with updates.
Started
- ClosedPatched
VMware vCenter Server Incorrect Default File Permissions
VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information. Added to the CISA KEV catalog on 2024-07-17. CVE-2022-22948 was assigned before 2024; the KEV listing came in 2024.
VMware vCenter ServerClosed Jul 17, 2024
Updated
- ClosedPatched
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-07-17.
Adobe Commerce and Magento Open SourceClosed Jul 17, 2024
- ClosedPatched
SolarWinds Serv-U Path Traversal
SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine. Added to the CISA KEV catalog on 2024-07-17.
SolarWinds Serv-UClosed Jul 17, 2024
