Monthly Patches are out for Palo Alto Networks and Juniper Networks. New Alerts for Google Chrome, Languages, Spring, IBM, and Linux.
Google has updated Chrome for Desktop to fix 3 security vulnerabilities.
More info.
Microsoft is aware. More info.
Monthly Patches are out for Palo Alto Networks with 8 bulletins, 4 rated High, 3 Medium, and 1 Informational. Highest CVSSv3 score of 8.3
More info.
A packet processing mechanism in PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. CVSSv3 score of 8.2
More info.
A vulnerability in PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving NTLM packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.
More info.
A memory leak exists in PAN-OS software that enables a remote attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. CVSSv3 score of 8.2
More info.
A vulnerability was discovered in the way multiple programming languages fail to properly escape the arguments in a Microsoft Windows command execution environment. Successful exploitation of this vulnerability permits an attacker to execute arbitrary commands.
This affects Haskell, Node.js, Rust (reported yesterday), PHP, yt-dlp, and perhaps others.
More info.
Node.js has updated. More info.
Juniper Networks April Patches include 36 bulletins, 3 rated Critical, 10 rated High, and 23 rated Medium. Highest CVSSv3 score of 9.8
More info.
Multiple vulnerabilities have been resolved in Juniper Networks Junos cRPD and Juniper Cloud Native Router by updating third party software. Some CVEs date back to 2011. Highest CVSSv3 score of 9.8
More info. And here.
Multiple vulnerabilities have been resolved in Juniper Networks Junos OS and Junos OS Evolved by updating cURL libraries. Highest CVSSv3 score of 9.8
More info.
Spring Framework has been patched to fix a URL Parsing vulnerability. CVSSv3 score of 8.1
More info.
QRadar Suite Software includes components with known vulnerabilities. Highest CVSSv3 score of 10.
More info.
IBM Sterling B2B Integrator uses Apache CXF. Highest CVSSv3 score of 9.8
More info.
IBM Maximo Application Suite - Monitor Component uses Node.js IP which is vulnerable. CVSSv3 score of 9.8
More info.
A vulnerable version of the Postgresql JDBC driver is shipped with IBM Tivoli Netcool Impact. CVSSv3 score of 10.
More info.
Vulnerabilities have been identified with the DS8900F Hardware Management Console (HMC). Highest CVSSv3 score of 9.8
More info.
SUSE has updated the kernel. More info.
Red Hat has updated the kernel. More info.
Comments