CISA’s Known Exploited Vulnerabilities (KEV) catalog includes four weaknesses found in the product in recent years, including ...

Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

Singapore’s CSA warns of a CVSS 10.0 SmarterMail vulnerability allowing unauthenticated remote code execution via file upload ...

Apache has fixed a critical security vulnerability in its open-source OFBiz (Open For Business) software, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers.

Veeam released security updates to patch multiple security flaws in its Backup & Replication software, including a critical ...

The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...

A critical vulnerability in OCI’s Code Editor exposed enterprise environments to RCE and privilege escalation risks, highlighting the dangers of implicit trust in integrated cloud tools. A now-patched ...

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...