CND News and Blog

New Vulnerabilities Friday 28 October

michele654 Vulnerabilities Friday, 28 October 2022 772 Hits 0 Comments

New Alerts for Trihedral, Rockwell Automation, Google Chrome (Exploit), Microsoft Edge, Apple iOS (Exploit), Dell, and IBM.

Trihedral

Trihedral VTScada contains an Improper Input Validation vulnerability that allows a remote attacker to cause a DoS. CVSSv3 score of 7.5.
More info.

Rockwell Automation

A vulnerability in FactoryTalk Alarms and Events servers may result in a DoS. CVSSv3 score of 7.5
More info.

Google Exploit

Google has updated Chrome for Desktop to fix 1 actively exploited security vulnerability.
More info.

Microsoft

Microsoft has updated Edge with the (nearly) latest chromium updates. This does not have the fix for the actively exploited chromium bug reported yesterday.
More info.

Apple Exploit

Apple has updated iOS 15 for several vulnerabilities, including the currently exploited kernel vulnerability.
More info.

Dell

Dell VxRail Appliance contains several vulnerabiltiies in SUSE and VMware. Dell rates this Critical.
More info.

IBM

Multiple vulnerabilities affect IBM Db2 On Openshift, IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data. Highest CVSSv3 score of 9.8
More info.

Multiple vulnerabilities are present in IBM Answer Retrieval for Watson Discovery. Highest CVSSv3 score of 9.8
More info.

Multiple vulnerabilities in base image packages affect IBM Voice Gateway. Highest CVSSv3 score of 9.8
More info.