Skip to main content

CND News and Blog

New Vulnerabilities Wednesday 04 September


Monthly Patches are out for Google Android, Pixel, and AAOS, as well as Samsung. New Alerts for D-Link, Mozilla, Moxa, HPE, LOYTEC Electronics, OpenSSL, and HAProxy.

Google 

Google has published Monthly Patches for Android, with 12 vulnerabilities, all rated High, plus Arm, Imagination Technologies, Unisoc, and Qualcomm updates. Highest CVSSv3 score of 8.8
More info.

Pixel Monthly Patches are out with 6 vulnerabilities, 4 rated Critical and 2 rated High, plus Android patches.
More info.

Android Automotive OS Monthly Patches include 1 vulnerability rated High.
More info.

Samsung 

Samsung Monthly Patches include 23 vulnerabilities, 8 rated High and 14 rated Medium, plus Android patches.
More info.

D-Link 

D-Link is aware of critical vulnerabilities in DIR-846W router which is EOS. Highest CVSSv3 score of 9.8
No patches because it is EOS/EOL.
More info.

Mozilla 

Mozilla has updated Firefox, Firefox ESR, and Focus for iOS to fix High severity vulnerabilities.
More info.

Moxa 

OnCell 3120-LTE-1 Series are affected by multiple vulnerabilities in the old version of jQuery that can be exploited by a remote attacker. Highest CVSSv3 score of 6.1
More info.

HPE 

Security vulnerabilities have been identified in Unified OSS Console Assurance Monitoring (UOCAM). These vulnerabilities could be exploited to allow authentication bypass, DoS, and escalation of privilege. Highest CVSSv3 score of 7.5
More info.

LOYTEC Electronics

LINX series devices contain several vulnerabilities. Highest CVSSv4 score of 9.3
More info.

OpenSSL 

OpenSSL has been updated to fix a DoS in X.509 name checks.
More info.

HAProxy 

HAProxy has updated their products to fix a vulnerability related to a possible endless loop in the HTTP/2 multiplexer when combined with zero-copy forwarding system.
More info.



Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

A mobile version of our Security Wizardry Radar Page, providing vulnerability details and visibility for a variety of software and industries.

SecurityWizardry.com - Vulnerability Details

Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.

Report Print
×
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Sunday, 08 December 2024

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/