Skip to main content

CND News and Blog

New Vulnerabilities Tuesday 02 August


Monthly Patches are out for Qualcomm, Google Android, Google Pixel, and Samsung. New Alerts for Dell, Mitsubishi Electric, Meinberg, and Linux.                     

Splunk Quarterly Patches should come out today.

Dell 

Dell CloudLink remediation is available for AD users login without password that may be exploited by remote attackers to compromise the affected system, and other vulnerabilities. CVSSv3 score of 9.1
More info. And here.

Dell Cyber Recovery remediation is available for multiple security vulnerabilities that may potentially be exploited by remote attackers to compromise the affected system, including an authentication bypass vulnerability. CVSSv3 score of 9.8
More info. And here.

Mitsubishi Electric 

DoS and arbitrary command execution vulnerabilities due to OpenSSL exist in multiple Mitsubishi Electric FA Products. Highest CVSSv3 score of 9.8
More info.

Meinberg

The latest LANTIME Firmware includes security updates of the third-party programs curl and openssl. In addition, a vulnerability has been fixed that allowed local user names to be determined.
More info.

Qualcomm 

Qualcomm Monthly Patches are out, with 15 internal vulnerabilities and 1 Open Source software vulnerability. Highest CVSSv3 score of 8.4
More info.

Google 

Google has published the Android Monthly Patches, with 19 vulnerabilities plus Imagination Technologies, MediaTek, and Qualcomm patches. One vulnerability is rated Critical, the rest are rated High.
More info.

Google Pixel Monthly Patches are out, with 40 vulnerabilities, with 4 rated Critical, 3 rated High, and the rest Moderate.
More info.

Samsung 

Samsung Monthly Patches are out, with 31 Samsung vulnerabilities plus Google Android patches. At least 1 is rated Critical, and 3 rated High.
More info.

Linux 

SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Oracle Linux has updated microcode_ctl. More info.
Ubuntu has updated the kernel. More info.



Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

A mobile version of our Security Wizardry Radar Page, providing vulnerability details and visibility for a variety of software and industries.

SecurityWizardry.com - Vulnerability Details

Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.

Report Print
×
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Friday, 26 April 2024

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/