Author: Vishvendra
-
CVE-2024-0132: Critical Vulnerability in NVIDIA Container Toolkit
Overview: A critical security vulnerability has been disclosed in NVIDIA Container Toolkit v1.16.2 and NVIDIA GPU Operator v24.6.2. The critical security flaw, if exploited could allow threat actors to break out of the confines of a container and gain full access to the host machine. CVE CVE-2024-0132CVE-2024-0133 CVSS v3 Highest 9.0 Publish Date 09-Sep-2024 Impacted…
-
US Gov. Releases Roadmap to Enhance Internet Routing Security (BGP)
The internet relies on a system called BGP to route traffic. This system can be vulnerable to attacks that can redirect traffic or disrupt service. To address this, the US government has released a roadmap to improve the security of this system. The roadmap includes recommendations for network operators to implement security measures like Route…
-
CVE-2024-7969: Multiple vulnerabilities in Google Chrome
Overview: Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the targeted system. CVE CVE-2024-7969CVE-2024-8193CVE-2024-8194CVE-2024-8198 CVSS v3 Highest 8.8 Publish Date 21-Aug-2024 Impacted Software <=128.0.6613.113/.114 for Windows<=128.0.6613.113/.114 for Mac<=128.0.6613.113 for Linux Exploit availability NO as on post date…
-
CVE-2024-3400 PAN-OS: Command Injection Vulnerability in GlobalProtect
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by…
-
CVE-2024-7550: Type Confusion in V8 in Google Chrome prior to 127.0.6533.99
Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Reference: https://issues.chromium.org/issues/355256380 https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html