CVE-2024-20953 is a vulnerability in Oracle Agile PLM, a product lifecycle management tool. With a CVSS score of 8.8, it allows low-privileged attackers with HTTP network access to exploit systems running version 9.3.6. This could result in complete system takeover, risking sensitive supply chain data and business operations.
The vulnerability in Oracle Agile PLM is a major concern for organizations due to its easy exploitation and potential for widespread impact.
By infosecbulletin
/ Wednesday , November 11 2026
Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
Apple, SAP, and Ivanti have published security updates that fix several flaws with messaging, Bluetooth, enterprise servers, and endpoint management...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
A jailbroken AI has been attacking a European telecom company and 13 companies using its data center and cloud for...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
IBM patched 208 security flaws in its API Connect platform. The CVE records released out on November 7, 2026. Among...
Read More
By infosecbulletin
/ Sunday , November 8 2026
New ransomware actions in 2026 show more variety in cybercrime, with some groups claimed over 100 victims. The ransomware attack...
Read More
By infosecbulletin
/ Sunday , November 8 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
By infosecbulletin
/ Saturday , November 7 2026
A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving...
Read More
By infosecbulletin
/ Friday , November 6 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
By infosecbulletin
/ Friday , November 6 2026
French lender Credit Mutuel Arkea said on Thursday hackers had stolen around €100 million ($112.61 million) in a cyber heist...
Read More
CISA has added certain vulnerabilities to the KEV catalog, signifying a serious ongoing threat, even though details about the attacks are unclear. They have instructed Federal Civilian Executive Branch agencies to patch their systems by March 17, 2025. However, all organizations using the affected software are urged to prioritize patching right away.
CISA has identified another critical vulnerability, CVE-2017-3066, affecting older versions of Adobe ColdFusion. This flaw has a CVSS score of 9.8 and arises from a Java deserialization issue in the Apache BlazeDS library. Exploiting this vulnerability allows attackers to execute arbitrary code, gaining full access to affected systems. A publicly available proof-of-concept exploit increases the risk of widespread attacks.
ColdFusion 2016 Update 3 and earlier, ColdFusion 11 Update 11 and earlier, and ColdFusion 10 Update 22 and earlier are especially vulnerable.
Stablecoin Bank Hacked – Hackers Stolen $49.5M