Cyber alerts

187 results

September 2023

Published Monday 11 September 2023 (12:46) (updated 11 September 2023)

Cisco Releases Security Update for Actively Exploited Vulnerability CVE-2023-20269

The exploited zero-day vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could lead to unauthorised access

CC-4374 Medium

Published Friday 8 September 2023 (02:32) (updated 13 September 2023)

Apple Releases Security Updates for Multiple Products

The released security updates include two exploited zero-day vulnerabilities in iOS, iPadOS, macOS and watchOS

CC-4373 Medium

Published Thursday 7 September 2023 (02:22) (updated 7 September 2023)

Multiple Vulnerabilities in Softneta MedDream PACS

The critical vulnerability could allow an unauthenticated attacker to remotely execute arbitrary code

August 2023

CC-4372 Medium

Published Wednesday 30 August 2023 (04:36) (updated 4 September 2023)

VMware Releases Critical Security Update for VMware Aria Operations for Networks

Security update addresses an authentication bypass vulnerability and an arbitrary file write vulnerability

CC-4371 Medium

Published Wednesday 30 August 2023 (04:31) (updated 8 December 2023)

Critical Security Updates Released for Qlik Sense Enterprise for Windows

The vulnerabilities known as CVE-2023-41265, CVE-2023-41266, and CVE-2023-48365 could be used together to achieve unauthenticated RCE

CC-4370 Medium

Published Friday 25 August 2023 (10:29) (updated 20 November 2023)

Exploitation of CVE-2023-38831 in WinRAR

RARLabs WinRAR file extension spoofing exploit seen in the wild

CC-4369 Medium

Published Tuesday 22 August 2023 (12:59) (updated 22 August 2023)

Ivanti Releases Security Updates for Authentication Bypass Vulnerability Affecting Sentry

Ivanti customers have seen exploitation of CVE-2023-38035 in Sentry when port 8443 is exposed to the internet

CC-4368 Medium

Published Monday 21 August 2023 (04:23) (updated 14 November 2023)

Multiple Vulnerabilities in Juniper Networks Junos OS

Critical out-of-band security updates highlight five vulnerabilities that can be chained to achieve pre-authentication remote code execution

CC-4367 Medium

Published Thursday 17 August 2023 (11:53) (updated 17 August 2023)

Unauthenticated Stack-based Buffer Overflow Vulnerability in Ivanti Avalanche

High severity vulnerability could allow attackers to cause service disruption or perform arbitrary code execution on Ivanti Avalanche

CC-4366 Medium

Published Wednesday 9 August 2023 (11:57) (updated 9 August 2023)

Microsoft Releases August 2023 Security Updates

Scheduled updates for Microsoft products, including security updates for 2 zero-day vulnerabilities