2 results for “sova”
Next.js released an out-of-band security update fixing two remote code execution flaws and a denial-of-service bug.
The RCE issues involve React Server Components in version 16 apps and a memory bug in librsvg via the sharp package on Linux.
Vercel rated both RCE issues with a CVSS score of 9.5.
Fixes are available in versions 16.4.1 and 15.5.28.
No public reports of active exploitation have been confirmed so far.
Palo Alto Networks has released security updates for a significant vulnerability in its PAN-OS software, affecting PA-Series, VM-Series firewalls, and Panorama.
The issue enables remote code execution with root privileges for authenticated users on the management interface.
Palo Alto Networks confirmed limited exploitation attempts in the wild.
The US CISA has added this to its Known Exploited Vulnerabilities c…