Cloud - CVE CyberSecurity Database News (Page 11)

Jul 16, 2024 Exploit Oracle

CVE-2024-21141 - How a Simple Bug in Oracle VM VirtualBox Can Compromise Your Entire Infrastructure

Oracle VM VirtualBox is a powerhouse in the world of virtualization, allowing users to run multiple operating systems on the same physical hardware. But with

Jul 15, 2024 Exploit

CVE-2024-6345 - How a Dangerous Bug in PyPA/setuptools’ package_index Module Could Let Attackers Run Code on Your Server

Summary: In June 2024, a remote code execution vulnerability — CVE-2024-6345 — was disclosed in the popular Python packaging tool setuptools. The issue was buried in the

Jul 9, 2024 RCE Microsoft SQL

CVE-2024-35272 - SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Explained

In early June 2024, Microsoft disclosed a new high-severity vulnerability involving the SQL Server Native Client OLE DB Provider, tracked as CVE-2024-35272. This post lays

Jul 3, 2024 API Exploit

CVE-2024-37082 - How Custom HAProxy Config Can Let Attackers Bypass mTLS in Cloud Foundry – Analysis, PoC, and Fix

In 2024, a tricky vulnerability (now logged as CVE-2024-37082) was discovered in deployments of Cloud Foundry using the haproxy-boshrelease. This security issue isn’t just

CVE-2024-36991 - Path Traversal Vulnerability in Splunk Enterprise on Windows

Jul 1, 2024 Windows Exploit

CVE-2024-36991 - Path Traversal Vulnerability in Splunk Enterprise on Windows

Splunk is one of the most popular platforms for searching, monitoring, and analyzing machine-generated big data. If you’re running Splunk Enterprise on Windows, there’