#cvss
-
Critical GitLab Flaw (CVSS 10.0) Threatens RCE Across 12 Years of Releases
On October 21 GitLab shipped fixes for a flaw that lets an attacker run code on a self-managed server without logging in. The weakness reaches back to version 7.0, released in 2014.
-
SAP Patches Critical OVERPASS Vulnerability Rated CVSS 10.0
SAP has released security updates, fixing a kernel vulnerability that allowed arbitrary commands to be executed on the server without authentication. Four critical flaws were patched in total.
-
Three ServiceNow Vulnerabilities Rated CVSS 10.0 Open the Door to Remote Code Execution
ServiceNow has released fixes for four vulnerabilities in its AI platform; three of them received the maximum severity score and, under certain conditions, allow an unauthenticated attacker to execute code or SQL queries.
-
Cisco Fixes Nine Vulnerabilities in Crosswork and Secure Workload, Five Rated 10.0
The company has released a fresh batch of patches for the Crosswork and Secure Workload platforms following an internal security audit. Five of the nine holes received the maximum CVSS score of 10.0.
-
Adobe Patches Maximum-Severity CVSS 10.0 Flaw in Campaign Classic
A defect in Adobe's Campaign Classic marketing platform allows arbitrary code execution without any user interaction. The updates also address a series of critical holes in Adobe Bridge.