By michele654 on Friday, 28 October 2022
Category: Vulnerabilities

New Vulnerabilities Friday 28 October


New Alerts for Trihedral, Rockwell Automation, Google Chrome (Exploit), Microsoft Edge, Apple iOS (Exploit), Dell, and IBM.

Trihedral 

Trihedral VTScada contains an Improper Input Validation vulnerability that allows a remote attacker to cause a DoS. CVSSv3 score of 7.5.
More info.

Rockwell Automation 

A vulnerability in FactoryTalk Alarms and Events servers may result in a DoS. CVSSv3 score of 7.5
More info.

Google Exploit

Google has updated Chrome for Desktop to fix 1 actively exploited security vulnerability.
More info.

Microsoft 

Microsoft has updated Edge with the (nearly) latest chromium updates. This does not have the fix for the actively exploited chromium bug reported yesterday.
More info.

Apple Exploit

Apple has updated iOS 15 for several vulnerabilities, including the currently exploited kernel vulnerability.
More info.

Dell 

Dell VxRail Appliance contains several vulnerabiltiies in SUSE and VMware. Dell rates this Critical.
More info.

IBM 

Multiple vulnerabilities affect IBM Db2 On Openshift, IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data. Highest CVSSv3 score of 9.8
More info.

Multiple vulnerabilities are present in IBM Answer Retrieval for Watson Discovery. Highest CVSSv3 score of 9.8
More info.

Multiple vulnerabilities in base image packages affect IBM Voice Gateway. Highest CVSSv3 score of 9.8
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments