By michele654 on Thursday, 15 June 2023
Category: Vulnerabilities

New Vulnerabilities Thursday 15 June


Monthly Patches are out for Palo Alto Networks. New Alerts for Hikvision, Microsoft (Edge), QNAP, Lenovo, Riello UPS, and Linux.

Palo Alto Networks 

Palo Alto Networks Monthly Patches include 2 bulletins, both rated Medium. Highest CVSSv3 score of 6.7
More info.

Hikvision 

Some of Hikvision's access control/intercom products contain two security vulnerabilities, including session hijacking and unauthorized configuration changes. Highest CVSSv3 score of 7.5
More info.

Microsoft 

Microsoft has updated Edge with the security fix for a chromium vulnerability having an active exploit in the wild.
More info.

QNAP 

QTS, QuTS hero, QuTScloud, QVP contain a vulnerability in Samba that would allow an attacker to take control of an affected system.
More info.

Lenovo 

Lenovo has published two security bulletins identifying vulnerabilities in XClarity Administrator and SMM/FPC.
More info.

Riello UPS 

Riello UPS Netman-204, a network adapter, contains a vulnerability that could allow a remote attacker to change the administrator passwords and access the administrator panel. CVSSv3 score of 8.8
More info.

Linux 

Alpine Linux has published release 3.18.2. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details