New Alerts for Apple (Exploit), Ivanti (Exploit), Belden, Hitachi Energy, IBM, NetApp, PaperCut, WIBU, and Linux.
Apple Exploit
Apple has published updates for Safari, iOS, iPadOS, macOS, tvOS, and watchOS. Highest CVSSv3 score of 9.8
At least two vulnerabilities have been exploited.
More info. And here.
An authentication bypass vulnerability in Ivanti EPMM allows remote attackers to access restricted functionality or resources of the application without proper authentication. CVSSv3 score of 10. Exploits have been seen in the wild.
More info. And here.
Belden has published bulletins for HiSecOS products identifying vulnerabilities in NTP, net-snmp, and DNS in libc. Highest CVSSv3 score of 9.6
None of these bulletins have 2023 bulletin numbers.
More info. And here. And here.
Multiple vulnerabilities exist in the OEM AFF series products, allowing a remote attacker to compromise the targeted devices availability, integrity, and confidentiality. Highest CVSSv3 score of 9.8
More info.
Vulnerabilities exist in the IEC 60870-5-104 stack with enabled support for IEC 62351-5, that affects the RTU500 series. Highest CVSSv3 score of 7.5
More info.
Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data. Highest CVSSv3 score of 9.8
More info.
There are a number of vulnerabilities in Golang Go used by IBM Event Streams. Highest CVSSv3 score of 9.8
More info.
Vulnerabilities in Python, OpenSSH, Golang Go, Minio and Redis affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift. Highest CVSSv3 score of 9.8
More info.
IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to arbitrary code execution due to Lua. CVSSv3 score of 9.8
More info.
NetApp has published 6 new bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 7.5 No patches yet.
More info.
Two vulnerabilities have been patched in PaperCut that would allow a remote attacker to upload, read, and write arbitrary files. Highest CVSSv3 score of 8.4
More info. And here.
WIBU has patched Apache Tomcat in CodeMeter License Central. CVSSv3 score of 7.5
More info.
Oracle Linux has updated the kernel. More info.
Comments