ESET Patches High-Severity Privilege Escalation Vulnerability

February 15, 2024 at 09:51AM ESET announced patches for a high-severity vulnerability in its consumer, business, and server security products for Windows, tracked as CVE-2024-0353. The flaw could allow an attacker to delete files with System privileges. Researchers with Trend Micro’s ZDI reported the security defect, and patches were released for affected products, with customers … Read more

Juniper Networks Patches Vulnerabilities in Switches, Firewalls

January 30, 2024 at 09:42AM Juniper Networks has released patches for multiple vulnerabilities in the J-Web component of Junos OS. The most severe issue is a cross-site scripting flaw (CVE-2024-21620), with a CVSS score of 8.8. Another defect (CVE-2024-21619) could allow an unauthenticated attacker to access sensitive information. Two missing authentication bugs were also resolved. … Read more