CVEs begin when a security researcher discloses a vulnerability to a CVE Numbering Authority (CNA). The CNA – initially MITRE ...

Critical158Important2Moderate0LowMicrosoft addresses 167 CVEs in its largest Patch Tuesday to date, including three zero-day ...

Microsoft has patched CVE-2025-55315, a critical vulnerability in the ASP.NET Core open source web development framework.

CISA adds five exploited vulnerabilities, including Oracle, Microsoft, Kentico, and Apple flaws, requiring fixes by Nov 10, ...

CISA warned that recently disclosed vulnerabilities in Windows SMB Client and Kentico Xperience CMS have been exploited in the wild.

The cybersecurity industry has a major trust problem. While demanding visibility from customers about their networks, ...

Microsoft has acknowledged older versions of Windows 10, Windows 11 and Windows Server could be exploited due to a ...

On October 21, 2025, TP-Link issued a security advisory regarding multiple firmware versions of its Omada gateway devices to address two high-severity command injection flaws, CVE-2025-6542 and ...

E-commerce security company Sansec has warned that threat actors have begun to exploit a recently disclosed security vulnerability in Adobe Commerce and Magento Open Source platforms, with more than ...

Overview Recently, NSFOCUS CERT detected that Redis issued a security bulletin and fixed the Redis Lua code execution vulnerability (CVE-2025-49844); Because Redis’s Lua script engine has a ...

TP-Link has made firmware updates available for a broad range of Omada gateway models to address four vulnerabilities, among which a critical pre-auth OS command injection.