Critical flaws in Palo Alto GlobalProtect and SonicWall NetExtender VPNs enable remote code execution. Patch now!

A critical security vulnerability has been disclosed in SailPoint's IdentityIQ identity and access management (IAM) software ...

A proof-of-concept (PoC) exploit for a critical-severity remote code execution flaw in Progress WhatsUp Gold has been ...

Get an overview of the major challenges that the Common Vulnerabilities and Exposures (CVE) program faces in today’s ...

CVSS scoring helps organizations make informed decisions about vulnerability management by enabling them to prioritize remediation efforts according to the risk associated with each vulnerability. For ...

A qualitative public framework for rating the severity of security vulnerabilities in software. The acronym CVSS is commonly used. "Common Vulnerability Scoring System" on the Word Notes podcast.

A critical-severity vulnerability in open source enterprise network monitoring tool Zabbix could lead to full system compromise.

Threat actors are using a well-known modular malware loader, SmokeLoader, to exploit known Microsoft Office vulnerabilities ...

The authority classifies the vulnerability as particularly critical with a CVSS score of 9.3 out of 10 possible points. The vulnerability affects all versions of Expedition prior to version 1.2.92, ...