Skip to main content

CND News and Blog

New Vulnerabilities Wednesday 10 January


Monthly Patches are out for Microsoft, Adobe, and Fortinet. Quarterly Patches are out for Splunk. New Alerts for Google Chrome, HPE, IBM, and Linux.

Microsoft 

Microsoft Monthly Patches are out with 48 patched vulnerabilities plus chromium updates for Edge. Of the Microsoft vulnerabilities, 2 are rated Critical. Highest CVSSv3 score of 9.1
More info. And here.

Adobe 

Adobe Monthly Patches include an update for Substance 3D Stager. Highest CVSSv3 score of 5.5
More info.

Fortinet 

Fortinet Monthly Patches are out, with 6 new bulletins, 1 rated High and 5 rated Medium. Highest CVSSv3 score of 8.3
More info.

Splunk 

Splunk Quarterly Patches are out with 4 bulletins, 2 of which are for third-party software. One bulletin is rated Critical, 1 is High, and 2 are Medium. Of the 2 Splunk specific bulletins, highest CVSSv3 score of 6.5
More info.

Google 

Google has updated Chrome for Desktop to fix 1 security vulnerability rated High. CVSSv3 score of 8.8
More info.

HPE 

Security vulnerabilities have been identified in Hewlett Packard Enterprise OneView Software. Highest CVSSv3 score of 9
More info.

IBM 

IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities. Highest CVSSv3 score of 9.8
More info.

Multiple Security Vulnerabilities were identified in IBM Security Verify Access. Highest CVSSv3 score of 9.8
More info.

Vulnerabilities in VMware and Groovy affect IBM Cloud Pak System. Highest CVSSv3 score of 9.8
The Groovy vulnerabilities are from 2015 and 2016.
More info. And here.

IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source packages. Highest CVSSv3 score of 9.8
More info.

Linux 

Red Hat has updated the kernel-rt. More info.
Ubuntu has updated the kernel. More info.
Amazon Linux 2 has updated the kernel. More info.



Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

A mobile version of our Security Wizardry Radar Page, providing vulnerability details and visibility for a variety of software and industries.

SecurityWizardry.com - Vulnerability Details

Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.

Report Print
×
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Sunday, 05 May 2024

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/