By michele654 on Tuesday, 23 January 2024
Category: Vulnerabilities

New Vulnerabilities Tuesday 23 January


New Alerts for Apple (Exploit), Splunk, TRUMPF, HPE, Mozilla, and Linux.

Apple Exploit

Apple has published updates for Safari, iOS, iPadOS, macOS, watchOS, and tvOS to fix 29 vulnerabilities among them, 3 of which are being exploited. Highest CVSSv3 score of 9.8
More info. And here.

Splunk 

Splunk has published 4 new security bulletins covering Splunk and third-party software.
More info.

TRUMPF 

Updates for TRUMPF products fix vulnerabilities in several third-party software packages included in the products. Highest CVSSv3 score of 9.8
More info.

HPE 

Potential security vulnerabilities have been identified in HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 server platforms firmware. These vulnerabilities could be exploited to allow RCE, DoS, information disclosure, DNS cache poisoning and network session hijacking. Highest CVSSv3 score of 8.3
More info.

Potential security vulnerabilities have been identified in HPE Unified Mediation Bus (UMB). Highest CVSSv3 score of 9.8
More info.

Mozilla 

Mozilla has published updates for Firefox, Firefox ESR, and Thunderbird, all rated High.
More info.

Linux 

Red Hat has updated kpatch. More info.
Amazon Linux 2 has updated the kernel. More info.
Amazon Linux 2023 has updated the kernel. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments