New Alerts for Johnson Controls, Carlo Gavazzi (exploit), Apple (exploit), Microsoft Edge, WithSecure, and Linux.
Johnson Controls
A vulnerability impacting OpenBlue Enterprise Manager Data Collector allows a remote attacker to expose sensitive information. CVSSv3 score of 10
More info. And here.
Carlo Gavazzi Powersoft have a directory traversal vulnerability that can allow a remote attacker to access and retrieve any file through specially crafted GET requests to the server. Product is EoL, no fixes will be available. Proof of Concept exists. CVSSv3 score of 7.5
More info.
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Updates are available for Safari, iOS, iPadOS, watchOS, tvOS, and macOS. At least one vulnerability is being actively exploited.
More info. And here.
Microsoft has updated Edge to include the latest chromium security updates.
More info.
A DoS vulnerability was discovered in WithSecure products whereby possible scanning engine crashes when unpack PE file. The exploit can be triggered remotely by an attacker.
More info.
Ubuntu has updated the kernel. More info.
Mageia has updated the kernel. More info.
Comments