New Alerts for Sophos (Exploit), Synology, Phoenix Contact, Mozilla, WithSecure, and Linux.
Sophos Exploit
Sophos Web Appliance has been updated to fix several vulnerabilities that could allow a remote attacker to execute arbitrary code. Highest CVSSv3 score of 9.8
Exploits have been seen in the wild.
More info.
Synology Router Manager contains vulnerabilities that allow a MitM attacker to execute arbitrary code and access intranet resources.
More info.
Phoenix Contact products use WIBU CodeMeter Runtime which has several vulnerabilities. Manual update of the CodeMeter software is required. CVSSv3 score of 9.8
More info. And here.
Mozilla has published bulletins rated High for Firefox, Firefox ESR, Firefox for iOS, and Thunderbird.
More info.
A DoS vulnerability was discovered in WithSecure products that allows a remote attacker to trigger an issue where fuzzed file takes longer to scan, which eventually may cause the scanner to hang.
More info.
SUSE has updated the microcode. More info.
Red Hat has updated the kernel. More info.
Ubuntu has updated the kernel. More info.
Comments