Monthly Patches are out for Microsoft, Adobe, and Fortinet. New Alerts for Google Chrome, Bosch, Citrix, Hitachi, IBM, Intel, and Linux. Tomorrow may be Palo Alto Monthly Patches.
Microsoft
Microsoft Monthly Patches include 61 vulnerabilities. Two are rated Critical. Highest CVSSv3 score of 9.8
More info. And here.
Adobe Monthly Patches include updates for Experience Manager, Premier Pro, ColdFusion, Bridge, Lightroom, and Animate. Highest CVSSv3 score of 8.6
More info.
Fortinet Monthly Patches include 8 bulletins for FortiOS and FortiProxy, FortiPortal, FortiWLM MEA for FortiManager, and FortiClientEMS. Highest CVSSv3 score of 9.3
More info.
OoB write and Stack-based Buffer Overflow vulnerabilities in FortiOS & FortiProxy captive portal may allow an attacker who has access to captive portal to execute arbitrary code or commands via specially crafted HTTP requests. CVSSv3 score of 9.3
More info.
An improper neutralization of formula elements in a CSV File vulnerability in FortiClientEMS may allow a remote attacker to execute arbitrary commands on the admin workstation via creating malicious log entries with crafted requests to the server. CVSSv3 score of 8.7
More info.
An improper access control vulnerability in FortiWLM MEA for FortiManager may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests. CVSSv3 score of 7.7
More info.
A SQL Injection vulnerability in FortiClientEMS may allow a remote attacker to execute unauthorized code or commands via specifically crafted requests. CVSSv3 score of 9.3
More info.
Google has updated Chrome for Desktop to fix 3 security vulnerabilities.
More info.
RPS and RPS-LITE operator and communication process contain several vulnerabilities, included hardcoded credentials. Highest CVSSv3 score of 7.3
More info.
SD-WAN contains a vulnerability that allows a remote attacker to disclose limited information from the appliance. CVSSv3 score of 6.5
This requires access to the management interface.
More info.
Several vulnerabilities affect Cosminexus products.
More info.
IBM QRadar SIEM includes vulnerable components. Highest CVSSv3 score of 9.1
More info.
Vulnerabilities were addressed in IBM Observability with Instana. CVSSv3 score of 9.8
More info. And here.
A security vulnerability in the bus lock regulator mechanism for some processors may allow DoS. CVSSv3 score of 6.5
More info.
HPE ProLiant DL/ML and MicroServer are affected. More info.
HP is affected as well. More info.
SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Comments