CND News and Blog

New Vulnerabilities Friday 22 September

michele654 Vulnerabilities Friday, 22 September 2023 401 Hits 0 Comments

New Alerts for Apple (Exploit), Real Time Automation (Exploit), D-Link (Exploit), QNAP, NetApp, and Linux.

Apple Exploit

Apple has updated iOS, iPadOS, watchOS, macOS, and Safari to fix Exploited, Critical vulnerabilities.
More info.

Real Time Automation Exploit

Real Time Automation 460MCBS contains a Cross-site Scripting vulnerability that could allow an attacker to run malicious JavaScript content. CVSSv3 score of 9.4
Public PoC exists.
More info.

D-Link Exploit

D-Link DIR-823G was discovered to contain stack overflow vulnerabilities. CVSSv3 score of 9.8
PoC exists.
More info. And here.

QNAP

Vulnerabilities in Apache, Legacy QTS, and Multimedia Console affect QNAP products. These are rated Medium and High.
More info.

NetApp

NetApp has published 7 new bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 7.8
No patches yet.
More info.

Linux

SUSE has updated the kernel. More info.