Cyber alerts - NHS England Digital

Critical RCE Vulnerability in Jenkins Plugins

An unauthenticated arbitrary file read vulnerability through the CLI could lead to Remote Code Execution on Jenkins servers

Out-of-cycle security updates address multiple vulnerabilities in the J-Web component of Juniper Networks Junos OS

A critical vulnerability in J-Web of Junos OS SRX Series and EX Series could allow pre-authentication remote code execution

Public proof-of-concept exploit code available and exploitation of vulnerabilities has been reported

The security updates include an exploited vulnerability in iOS, iPadOS, Safari, tvOS, and macOS Ventura

The vulnerability could allow an unauthenticated, remote attacker to execute arbitrary code

Actively exploited vulnerabilities could allow an authenticated attacker to achieve operating system command injection on affected Hitron System DVRs

The vulnerability could allow an unauthenticated attacker to gain administrative control of a TeamCity server

Exploitation of this vulnerability, which affects multiple products, could lead to arbitrary code execution

This vulnerability could allow a remote unauthenticated attacker to execute arbitrary code or command in FortiOS and FortiProxy SSL-VPN devices