TheNewbie

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3865 IBM Db2 is vulnerable to information disclosure due to improper privilege management when certain federation features are used. (CVE-2023-29256) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Linux variants Windows Solaris HP-UX AIX Resolution: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3864 IBM Db2 has multiple denial of service vulnerablities with a specially crafted query 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Windows Linux variants AIX HP-UX Solaris Resolution: Patch/Upgrade CVE Names: CVE-2023-30449 CVE-2023-30448 CVE-2023-30447 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3863 IBM Db2 federated server is vulnerable to a denial of service when using a specially crafted wrapper using certain options. (CVE-2023-30442) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: HP-UX Windows AIX Linux variants … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3862 IBM Db2 db2set is vulnerable to arbitrary code execution. (CVE-2023-30431) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Windows HP-UX Solaris Linux variants AIX Resolution: Patch/Upgrade CVE Names: CVE-2023-30431 Original Bulletin: https://www.ibm.com/support/pages/node/7010565 Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3861 IBM Db2 JDBC driver is vulnerable to remote code execution. (CVE-2023-27869, CVE-2023-27867, CVE-2023-27868) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Windows Linux variants AIX HP-UX Solaris Resolution: Patch/Upgrade CVE Names: CVE-2023-27869 CVE-2023-27868 CVE-2023-27867 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3860 thunderbird security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: thunderbird Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00143.html Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3859 firefox-esr security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox-esr Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00142.html Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3858 webkit2gtk security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: webkit2gtk Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-32439 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00141.html Comment: CVSS (Max): 8.8 CVE-2023-32439 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3877 IBM Db2 with Federated configuration is vulnerable to arbitrary code execution. (CVE-2023-35012) 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Linux variants AIX Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-35012 Original Bulletin: https://www.ibm.com/support/pages/node/7010747 Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3878 Safari 16.5.2 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Safari Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213826 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – —–BEGIN PGP SIGNED MESSAGE—– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3876 USN-6213-1: Ghostscript vulnerability 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Ghostscript Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36664 Original Bulletin: https://ubuntu.com/security/notices/USN-6213-1 Comment: CVSS (Max): 9.8 CVE-2023-36664 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3875 MFSA 2023-25 Security Vulnerabilities fixed in Firefox for iOS 115 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox for iOS Publisher: Mozilla Operating System: Apple iOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37456 CVE-2023-37455 Original Bulletin: https://www.mozilla.org/en-US/security/advisories/mfsa2023-25/ Comment: CVSS (Max): None … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3874 mediawiki security update 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: mediawiki Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-47927 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00011.html Comment: CVSS (Max): 5.5 CVE-2022-47927 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3873 node-tough-cookie security update 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: node-tough-cookie Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-26136 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00010.html Comment: CVSS (Max): 9.8 CVE-2023-26136 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3872 python38:3.8 and python38-devel:3.8 security update 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python38:3.8 and python38-devel:3.8 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4008 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3890 ICS Advisory | ICSA-23-192-02 Sensormatic Electronics iSTAR 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Sensormatic Electronics iSTAR Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-3127 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-192-02 Comment: CVSS (Max): 7.5 CVE-2023-3127 (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) CVSS Source: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3889 ICS Advisory | ICSA-23-192-01 Rockwell Automation Enhanced HIM 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Rockwell Automation Enhanced HIM Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-2746 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-192-01 Comment: CVSS (Max): 9.6 CVE-2023-2746 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3888 kernel security and bug fix update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kernel Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2022-3564 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4020 Comment: CVSS (Max): 7.1 CVE-2022-3564 (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3887 kernel security and bug fix update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kernel Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2022-3564 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4021 Comment: CVSS (Max): 7.1 CVE-2022-3564 (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3886 kpatch-patch security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kpatch-patch Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2022-2588 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4023 Comment: CVSS (Max): 7.8 CVE-2022-2588 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3885 kernel security and bug fix update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kernel Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2022-2588 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4022 Comment: CVSS (Max): 7.8 CVE-2022-2588 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3884 K000135262 : Apache Tomcat vulnerability CVE-2023-28709 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: BIG-IP (all modules) Publisher: F5 Networks Operating System: Network Appliance Resolution: Mitigation CVE Names: CVE-2023-28709 CVE-2023-24998 Original Bulletin: https://my.f5.com/manage/s/article/K000135262 Comment: CVSS (Max): 5.3 CVE-2023-28709 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3883 K000135178 : OpenSSL vulnerability CVE-2023-2650 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: BIG-IP (all modules) BIG-IQ F5OS-A F5OS-C Traffix SDC Publisher: F5 Networks Operating System: Network Appliance Resolution: Mitigation CVE Names: CVE-2023-2650 Original Bulletin: https://my.f5.com/manage/s/article/K000135178 Comment: CVSS (Max): 5.9 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3882 K000135122 : Linux kernel vulnerability CVE-2023-0461 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Traffix SDC Publisher: F5 Networks Operating System: Network Appliance Resolution: Mitigation CVE Names: CVE-2023-0461 Original Bulletin: https://my.f5.com/manage/s/article/K000135122 Comment: CVSS (Max): 7.8 CVE-2023-0461 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3881 K000134942 : Intel CPU vulnerability CVE-2022-33972 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: F5OS-A Publisher: F5 Networks Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2022-33972 Original Bulletin: https://my.f5.com/manage/s/article/K000134942 Comment: CVSS (Max): 4.7 CVE-2022-33972 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N) CVSS Source: F5 Networks … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3901 Security update for the Linux Kernel 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-3389 CVE-2023-3358 CVE-2023-3357 CVE-2023-3212 CVE-2023-3111 CVE-2023-3090 CVE-2023-1829 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232803-1 Comment: CVSS (Max): 7.8 CVE-2023-3090 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3900 Security update for the Linux Kernel 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35824 CVE-2023-32269 CVE-2023-31436 CVE-2023-30772 CVE-2023-28772 CVE-2023-28464 CVE-2023-28328 CVE-2023-23455 CVE-2023-23454 CVE-2023-3161 CVE-2023-3159 CVE-2023-3141 CVE-2023-3090 CVE-2023-2513 CVE-2023-2194 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3899 Security update for python-tornado 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-tornado Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28370 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232807-1 Comment: CVSS (Max): 3.4 CVE-2023-28370 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3898 USN-6214-1: Thunderbird vulnerabilities 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Thunderbird Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 CVE-2023-34416 CVE-2023-34414 Original Bulletin: https://ubuntu.com/security/notices/USN-6214-1 Comment: CVSS (Max): 9.8 CVE-2023-34416 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3897 USN-6215-1: dwarves vulnerabilities 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dwarves Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2022-3606 CVE-2022-3534 Original Bulletin: https://ubuntu.com/security/notices/USN-6215-1 Comment: CVSS (Max): 8.0 CVE-2022-3534 (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3896 USN-6217-1: .NET vulnerability 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: .NET Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-33170 Original Bulletin: https://ubuntu.com/security/notices/USN-6217-1 Comment: CVSS (Max): 8.1 CVE-2020-27745 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Ubuntu Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3895 FortiExtender – Path Traversal vulnerability 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: FortiExtender Publisher: Fortinet Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2022-23447 Original Bulletin: https://fortiguard.fortinet.com/psirt/FG-IR-22-039 Comment: CVSS (Max): 7.3 CVE-2022-23447 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) CVSS Source: Fortinet Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3894 FortiOS – Existing websocket connection persists after deleting API admin 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: FortiOS Publisher: Fortinet Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-28001 Original Bulletin: https://fortiguard.fortinet.com/psirt/FG-IR-23-028 Comment: CVSS (Max): 4.1 CVE-2023-28001 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3893 FortiAnalyzer & FortiManager – Path traversal in history downloadzip 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: FortiAnalyzer FortiManager Publisher: Fortinet Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-25606 Original Bulletin: https://fortiguard.fortinet.com/psirt/FG-IR-22-471 Comment: CVSS (Max): 6.2 CVE-2023-25606 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3892 FortiOS/FortiProxy – Proxy mode with deep inspection – Stack-based buffer overflow 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: FortiOS FortiProxy Publisher: Fortinet Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-33308 Original Bulletin: https://fortiguard.fortinet.com/psirt/FG-IR-23-183 Comment: CVSS (Max): 9.8 CVE-2023-33308 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3891 ICS Advisory | ICSA-23-192-03 Panasonic Control FPWin Pro7 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Panasonic Control FPWin Pro7 Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-28730 CVE-2023-28729 CVE-2023-28728 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-192-03 Comment: CVSS (Max): 7.8 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3907 APSB23-40 : Security update available for Adobe ColdFusion 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Adobe ColdFusion Publisher: Adobe Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-29301 CVE-2023-29300 CVE-2023-29298 Original Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3906 MFSA 2023-26 Security Vulnerabilities fixed in Firefox 115.0.2 and Firefox ESR 115.0.2 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox 115.0.2 Firefox ESR 115.0.2 Publisher: Mozilla Operating System: UNIX variants (UNIX, Linux, OSX) Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3905 symfony security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: symfony Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-24895 CVE-2022-24894 CVE-2021-21424 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00014.html Comment: CVSS (Max): 8.8 CVE-2022-24895 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3904 yajl security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: yajl Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-20117-16516 CVE-2023-33460 CVE-2022-24795 CVE-2017-16516 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html Comment: CVSS (Max): 7.5* CVE-2022-24795 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3903 erlang security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: erlang Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-37026 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html Comment: CVSS (Max): 9.8 CVE-2022-37026 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0125 Microsoft Patch Tuesday update for Microsoft System Center for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft Malware Protection Engine Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-33156 Comment: CVSS (Max): 6.3 CVE-2023-33156 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0124 Microsoft Patch Tuesday update for Microsoft Dynamics for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft Dynamics Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-35335 CVE-2023-33171 CVE-2023-32052 Comment: CVSS (Max): 8.2 CVE-2023-33171 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N OVERVIEW … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0123 Microsoft Patch Tuesday update for Azure for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Azure Service Fabric Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36868 Comment: CVSS (Max): 6.5 CVE-2023-36868 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N OVERVIEW Microsoft has … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0122 Microsoft Patch Tuesday update for Microsoft Apps for JUly 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Paint 3D Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-35374 CVE-2023-32047 Comment: CVSS (Max): 7.8 CVE-2023-32047 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H OVERVIEW Microsoft … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0121.2 Microsoft Patch Tuesday update for Developer Tools for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: .NET 6.0 & 7.0 Microsoft Visual Studio Visual Studio Code Mono PandocUpload Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36867 CVE-2023-35373 CVE-2023-35333 CVE-2023-33170 CVE-2023-33127 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0120.2 Microsoft Patch Tuesday update for Microsoft ESU for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Windows Server Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36884 CVE-2023-36874 CVE-2023-35367 CVE-2023-35366 CVE-2023-35365 CVE-2023-35351 CVE-2023-35350 CVE-2023-35346 CVE-2023-35345 CVE-2023-35344 CVE-2023-35342 CVE-2023-35341 CVE-2023-35340 CVE-2023-35338 CVE-2023-35332 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0119.3 Microsoft Patch Tuesday update for Microsoft Office, Microsoft Office Services and Web Apps for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Outlook Microsoft SharePoint Microsoft Word Operating System: Windows macOS Resolution: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0118 Microsoft Patch Tuesday update for Microsoft Windows for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Windows Windows Admin Center Windows Server Raw Image Extension VP9 Video Extensions Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36884 CVE-2023-36874 CVE-2023-36872 CVE-2023-36871 CVE-2023-35367 … Read more