New Alerts for GE Digital, IBM, D-Link, Mozilla, Git, and Apache.
GE Digital
GE Digital Proficy Historian contains multiple vulnerabilities, including Authentication Bypass using an Alternate Path or Channel, Unrestricted Upload of File with Dangerous Type, Improper Access Control, and Weak Encoding for Password. Successful exploitation of these vulnerabilities could crash the device after access, cause a buffer overflow condition, and allow remote code execution. Highest CVSSv3 score of 9.8
More info.
There is a vulnerability in min-dash that could allow a remote attacker to execute arbitrary code on the system. The code is used by IBM Process Mining. CVSSv3 score of 9.8
More info.
Mutliple vulnerabilities have been corrected in DIR-1360 hardware.
More info.
Security updates have been published for Firefox and Firefox ESR.
More info.
Two vulnerabilities in Git could allow a remote attacker to execute arbitrary code on the system. By sending specially-crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system. CVSSv3 score of 9.8
More info. And here.
Three moderate vulnerabilities have been patched in Apache HTTP Server.
More info.