New Vulnerabilities Monday 06 June
michele654
Vulnerabilities
New Alerts for Atlassian and Dell.                   Tomorrow is Mobile Monthly Patch day. Atlassian  Atlassian has patched the critical severity unauthenticated remote code execution vulnerability in Confluence Data Center and Server.More info. Dell  Dell has published security updates for thi...
New Vulnerabilities Friday 03 June
michele654
Vulnerabilities
New Alerts for Confluence (Exploited 0-Day), Carrier LenelS2, Illumina, CODESYS, NetApp, and Linux. Atlassian 0-Day Atlassian has been made aware of current active exploitation of a critical severity unauthenticated remote code execution vulnerability in Confluence Data Center and Server. Patches are expected out today.More info. Carrier LenelS2&nb...
New Vulnerabilities Thursday 02 June
michele654
Vulnerabilities
New Alerts for Mitsubishi Electric, IBM, Dell, and Linux. Mitsubishi Electric  DoS and RCE vulnerabilities exist in the Web function on MELSEC-Q and MELSEC-L Ethernet Interface Modules, and in the REST Server function on MELSEC iQ-R MES Interface Module. A remote attacker may cause a DoS or execute malicious code on target products by sending ...
New Vulnerabilities Wednesday 01 June
michele654
Vulnerabilities
New Alerts for Microsoft, Mozilla, IBM, CODESYS, and Linux. Microsoft  Microsoft has updated chromium-based Edge to fix the latest security vulnerabilities.More info.Microsoft has published a bulletin with workarounds for the vulnerability in the Diagnostic Tool.More info. And here. Mozilla  Mozilla has published updates to fix security v...
New Vulnerabilities Tuesday May 31
michele654
Vulnerabilities
New Alert for Linux. Linux  Red Hat has updated the kernel. More info.Oracle Linux has updated rsyslog. More info. Security Wizardry Cyber Threat Intelligence - The Radar Page https://radar.securitywizardry.com/ Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page A mobile version of our Security Wizardry Radar Page, providing v...
New Vulnerabilities Monday 30 May
michele654
Vulnerabilities
New Alerts for Microsoft (Exploit), IBM, NetApp, and Linux. Microsoft -  Exploit A vulnerability in Microsoft Office enables an attacker to fetch malicious code without detection in a multi-stage attack.More info. IBM  IBM Security Guardium has fixed multiple vulnerabilities by updating the Apache Thrift component. Highest CVSSv3 score of...
New Vulnerabilities Friday 27 May
michele654
Vulnerabilities
New Alerts for Keysight Technologies, Tenable, Hitachi, and Citrix. Keysight Technologies  Keysight N6854A Geolocation and server and N6841A Sensor software, a spectrum monitoring platform, contains two security vulnerabilities. Successful exploitation of these vulnerabilities could allow a remote attacker to obtain arbitrary operating system ...
New Vulnerabilities Thursday 26 May
michele654
Vulnerabilities
New Alerts for Dell, QNAP, NetApp, and Linux. Dell  Dell VxRail remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system. Dell rates this High.More info. QNAP  A CSRF vulnerability has been reported to affect QNAP NAS running Proxy Server. This vulnerability ...
New Vulnerabilities Wednesday 25 May
michele654
Vulnerabilities
New Alerts for Google Chrome, HPE, and Linux. Google  Google has updated Chrome for Desktop to fix 32 security vulnerabilities, including at least 1 rated Critical.More info.Microsoft is aware and working. More info. HPE  A potential security vulnerability in the Oracle Java SE may impact HPE IceWall products. The vulnerability could be e...
New Vulnerabilities Tuesday 24 May
michele654
Vulnerabilities
New Alerts for Dell, Zyxel, and Linux. Dell  Dell has updated VxRail to fix multiple vulnerabilities in third-party software included in the product. Dell rates this Critical.More info. And here.Dell PowerEdge Server has been updated for several vulnerabilities in AMD server. Dell rates this High.More info. Zyxel  Zyxel has published a se...
New Vulnerabilities Monday 23 May
michele654
Vulnerabilities
New Alerts for Mozilla (Pwn2Own), IBM, Flexera, and Linux. Mozilla  Mozilla has published a security update for Firefox, Firefox for Android, and Firefox ESR to fix vulnerabilities identified in Pwn2Own. This is rated Critical.More info. IBM  Vulnerabilities in curl and Python affect IBM Cloud Private. CVSSv3 score of 9.1More info. And he...
New Vulnerabilities Friday 20 May
michele654
Vulnerabilities
New Alerts for IBM, Dell, F5, NetApp, and Linux. IBM  WebSphere Application Server used by Rational Asset Analyzer is vulnerable to several security issues. Highest CVSSv3 score of 10More info. And here. Dell  Dell EMC Elastic Cloud Storage contains remediation for multiple security vulnerabilities that may be exploited by remote attacker...
New Vulnerabilities Thursday 19 May
michele654
Vulnerabilities
New Alerts for VMware, OPC Foundation, Apple, Dell, F5, ISC, and Linux. VMware  VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authen...
New Vulnerabilities Wednesday 18 May
michele654
Vulnerabilities
New Alerts for Aruba, IBM, and Linux. Aruba  Several Aruba products use the Expat XML processing library, which contains several vulnerabilities. Highest CVSSv3 score of 9.8More info. And HPE's bulletin is here. IBM  IBM Spectrum Protect Plus is affected by a Mozilla NSS vulnerability. CVSSv3 score of 9.8.More info.IBM MQ Operator and MQ ...
New Vulnerabilities Tuesday 17 May
michele654
Vulnerabilities
New Alerts for Apple, Mitsubishi Electric, VMware, and Linux. Apple  Apple has patched Safari, tvOS, iOS, iPadOS, watchOS, Xcode, macOS Catalina, Big Sur, and Monterey. Several vulnerabilities allow arbitrary code execution.More info. And here. Mitsubishi Electric  Multiple DoS vulnerabilities exist in MELSEC iQ-F series CPU module. These...
New Vulnerabilities Monday 16 May
michele654
Vulnerabilities
New Alerts for SonicWall, Microsoft Edge, NetApp, and Linux. SonicWall  SonicWall SSLVPN SMA1000 series appliances are affected by multiple vulnerabilities, including an unauthenticated access control bypass, and a shared and hard-coded encryption key. Highest CVSSv3 score of 8.2.More info. Microsoft  Microsoft has updated chromium-based ...

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/

Find Out More

© Computer Network Defence Limited 2022