By michele654 on Wednesday, 20 November 2024
Category: Vulnerabilities

New Vulnerabilities Wednesday 20 November


Monthly Patches are out for Atlassian. New Alerts for Google Chrome, Apple (Exploit), Spring, M-Files, Dell, and Linux.

Google 

Google has updated Chrome for Desktop to fix 3 security vulnerabilities.
More info.

Atlassian 

Monthly Patches include fixes for Bamboo, Bitbucket, Confluence, Crowd, Jira, Jira Service Management, Sourcetree for Mac, and Sourcetree for Windows. Highest CVSSv3 score of 8.8
More info.

Apple Exploit

Apple has published security updates for Safari, visionOS, iOS, iPadOS, and macOS. Some exploits are reported.
More info.

Spring 

Case Sensitive comparisons can result in authorization rules not working properly. CVSSv3 score of 4.8
More info.

M-Files 

Authentication bypass condition in M-Files allowed user authentication without a password when the LDAP server had the vulnerable configuration. CVSSv4 score of 9.2
More info.

Dell 

Dell has published a Critical bulletin for PowerProtect Data Manager DM5500 Appliance.
More info.

Linux 

Oracle Linux has updated the kernel. More info.
Ubuntu has updated the kernel. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details