CVE-2024-55354 – Lucee Code Execution and Resource Access

The following table lists the changes that have been made to the CVE-2024-55354 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Apr. 08, 2025 Action […]

Microsoft Drops Another Massive Patch Update

Microsoft Drops Another Massive Patch Update Source: MY STOCKERS via ShutterstockFor the second time in 2025, Microsoft has dropped a security update stuffed with fixes for more than 100 vulnerabilities, setting up Windows admins for yet another … Read more Published Date: Apr 08, 2025 (3 hours, 11 minutes ago) Vulnerabilities has been mentioned in this article.

Microsoft Patch Tuesday April 2025: One Zero-Day, 11 High-Risk Flaws

Microsoft Patch Tuesday April 2025: One Zero-Day, 11 High-Risk Flaws Microsoft Patch Tuesday for April 2025 included fixes for 135 vulnerabilities in all, including one actively exploited zero-day and an additional 11 high-risk vulnerabilities. In all, Patch Tuesday Ap … Read more Published Date: Apr 08, 2025 (3 hours, 20 minutes ago) Vulnerabilities has been mentioned in […]

CVE-2025-27192 – Adobe Commerce Insufficiently Protected Credentials Bypass

The following table lists the changes that have been made to the CVE-2025-27192 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Apr. 08, 2025 Action […]

CVE-2025-27191 – Adobe Commerce Improper Access Control Bypass

The following table lists the changes that have been made to the CVE-2025-27191 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Apr. 08, 2025 Action […]

CVE-2025-27190 – Adobe Commerce Improper Access Control Security Feature Bypass

The following table lists the changes that have been made to the CVE-2025-27190 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Apr. 08, 2025 Action […]

CVE-2025-27189 – Adobe Commerce CSRF Vulnerability

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to the vulnerable application, which may disrupt service availability. Exploitation of this issue requires user […]

CVE-2025-27188 – Adobe Commerce Privilege Escalation Improper Authorization

The following table lists the changes that have been made to the CVE-2025-27188 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Apr. 08, 2025 Action […]

April 2025 Patch Tuesday Analysis

April 2025 Patch Tuesday Analysis Today’s Patch Tuesday Alert addresses Microsoft’s April 2025 Security Updates. We are actively working on coverage for these vulnerabilities and expect to ship ASPL-1151 as soon as coverage is complet … Read more Published Date: Apr 08, 2025 (4 hours, 44 minutes ago) Vulnerabilities has been mentioned in this article.

Windows CLFS Zero-Day Vulnerability Actively Exploited by Ransomware Group

Windows CLFS Zero-Day Vulnerability Actively Exploited by Ransomware Group A critical zero-day vulnerability in the Windows Common Log File System (CLFS) has been uncovered and is being actively exploited by a ransomware group. The vulnerability Tracked as CVE-2025-29824, th … Read more Published Date: Apr 08, 2025 (2 hours, 28 minutes ago) Vulnerabilities has been mentioned in […]