Slándáil Research: Security Feeds

Feed

Link

Canada Cyber Centre

Ivanti security advisory (AV24-215)

Canada Cyber Centre

Microsoft Edge security advisory (AV24-214)

Finland NCSC-Fi

The National Cyber Security Centre Finland’s weekly review – 15/2024

Belgium CERT.BE

WARNING: RCE IN TIBCO JASPERREPORTS SERVER

Australia AusCERT

Migration Toolkit for Containers (MTC) 1.8.3: CVSS (Max): 6.5

Australia AusCERT

OpenShift Container Platform 4.14.21: CVSS (Max): 7.5

Australia AusCERT

Migration Toolkit for Runtimes: CVSS (Max): 5.9

Australia AusCERT

sssd: CVSS (Max): 7.1

Australia AusCERT

Red Hat Service Interconnect 1.5.3: CVSS (Max): 7.5

Australia AusCERT

OpenJDK 21.0.3: CVSS (Max): 3.7

Australia AusCERT

java-17-openjdk: CVSS (Max): 3.7

Australia AusCERT

OpenJDK 17.0.11: CVSS (Max): 3.7

Australia AusCERT

OpenJDK 11.0.23: CVSS (Max): 3.7

Australia AusCERT

OpenJDK 8: CVSS (Max): 3.7

Australia AusCERT

Red Hat Advanced Cluster Management 2.8.6: CVSS (Max): 5.9

Australia AusCERT

OpenShift Container Platform 4.14.19: CVSS (Max): 7.5

Australia AusCERT

Red Hat build of MicroShift 4.14.19: CVSS (Max): 7.5

Australia AusCERT

tzdata: CVSS (Max): None

Australia AusCERT

GNU C Library: CVSS (Max): 8.8

Australia AusCERT

pgadmin4: CVSS (Max): 8.8

Australia AusCERT

Unitronics Vision Series PLCs: CVSS (Max): 7.5

Australia AusCERT

kernel-rt: CVSS (Max): 6.7

Australia AusCERT

kernel: CVSS (Max): 6.7

Australia AusCERT

Red Hat Update Infrastructure (RHUI): CVSS (Max): 7.5

Australia AusCERT

kernel: CVSS (Max): 7.1

Australia AusCERT

rhc-worker-script: CVSS (Max): 5.9

Australia AusCERT

mod_http2: CVSS (Max): 7.5

UK NCSC

Cyber Assessment Framework 3.2

UK NCSC

'NCSC Cyber Series' podcast now available on Spotify

Australia AusCERT

Red Hat build of Keycloak: CVSS (Max): 8.1

Australia AusCERT

Red Hat build of Keycloak 22.0.10: CVSS (Max): 8.1

Australia AusCERT

Red Hat Single Sign-On: CVSS (Max): 8.1

Australia AusCERT

Red Hat Single Sign-On 7.6: CVSS (Max): 8.1

Australia AusCERT

java-1.8.0-openjdk: CVSS (Max): 3.7

Australia AusCERT

Cisco Integrated Management Controller (IMC): CVSS (Max): None

Australia AusCERT

Cisco IOS and IOS XE Software: CVSS (Max): None

Australia AusCERT

Cisco Integrated Management Controller (IMC): CVSS (Max): 8.7

Australia AusCERT

Linux Kernel: CVSS (Max): 7.8*

Australia AusCERT

Linux kernel (Xilinx ZynqMP): CVSS (Max): 7.8

Australia AusCERT

Jenkins (core): CVSS (Max): 5.9

Australia AusCERT

Xen: CVSS (Max): 4.7

Australia AusCERT

firefox-esr: CVSS (Max): 7.5*

Canada Cyber Centre

Vulnerability impacting PAN-OS GlobalProtect Gateway - Update 2

Canada Cyber Centre

Cisco security advisory (AV24-213)

Belgium CERT.BE

WARNING: CRITICAL VULNERABILITY IN ORACLE BI PUBLISHER V7.0.0.0.0/12.2.1.4.0 COULD LEAD TO APPLICATION TAKEOVER, PATCH IMMEDIATELY!

Belgium CERT.BE

WARNING: CRITICAL VULNERABILITIES IN IVANTI AVALANCHE <6.4.3 COULD LEAD TO RCE, PATCH IMMEDIATELY!

US-CERT Alerts

#StopRansomware: Akira Ransomware

Canada Cyber Centre

Google Chrome security advisory (AV24-212)

Canada Cyber Centre

Atlassian security advisory (AV24-211)

Canada Cyber Centre

Oracle security advisory – April 2024 quarterly rollup (AV24-210)

UK NCSC

Watch all the plenaries from CYBERUK 2024 live, and for free

Australia AusCERT

Oracle Hospitality Applications: CVSS (Max): 7.5

Australia AusCERT

Oracle HealthCare Applications: CVSS (Max): 9.8

Australia AusCERT

Oracle Health Sciences Applications: CVSS (Max): 6.5

Australia AusCERT

Oracle GoldenGate: CVSS (Max): 7.5

Australia AusCERT

Oracle Global Lifecycle Management: CVSS (Max): 5.9

Australia AusCERT

Oracle Fusion Middleware: CVSS (Max): 9.8

Australia AusCERT

Oracle Food and Beverage Applications: CVSS (Max): 9.9

Australia AusCERT

Oracle Financial Services Applications: CVSS (Max): 8.8

Australia AusCERT

Oracle Enterprise Manager: CVSS (Max): 9.8

Australia AusCERT

Oracle E-Business Suite: CVSS (Max): 9.1

Belgium CERT.BE

WARNING: THREE HIGH-SEVERITY DENIAL-OF-SERVICE VULNERABILITIES AFFECT PALO ALTO’S PAN-OS

Australia AusCERT

Atlassian Products: CVSS (Max): 8.2*

Australia AusCERT

Oracle Database Server: CVSS (Max): 5.9

Australia AusCERT

Oracle Construction and Engineering: CVSS (Max): 8.2

Australia AusCERT

Oracle Communications Applications: CVSS (Max): 9.8

Australia AusCERT

Oracle Hyperion: CVSS (Max): 7.8

Australia AusCERT

Oracle Insurance Applications: CVSS (Max): 9.8

Australia AusCERT

Oracle Virtualization: CVSS (Max): 8.8

Australia AusCERT

Oracle Systems: CVSS (Max): 9.8

Finland NCSC-Fi

The National Cyber Security Centre Finland’s weekly review – 14/2024

Australia AusCERT

Oracle Utilities Applications: CVSS (Max): 7.4

Australia AusCERT

Oracle Supply Chain: CVSS (Max): 8.1

Australia AusCERT

Oracle Support Tools: CVSS (Max): 7.5

Australia AusCERT

Oracle Communications: CVSS (Max): 9.8

Australia AusCERT

Oracle Commerce: CVSS (Max): 9.8

Australia AusCERT

Oracle Big Data Spatial and Graph: CVSS (Max): 7.5

Australia AusCERT

Oracle Autonomous Health Framework: CVSS (Max): 5.9

Australia AusCERT

Oracle Analytics: CVSS (Max): 9.8

Finland NCSC-Fi

Cyber weather for March 2024

Australia AusCERT

PuTTY: CVSS (Max): None

Australia AusCERT

Oracle Siebel CRM: CVSS (Max): 7.1

Australia AusCERT

Oracle PeopleSoft: CVSS (Max): 9.8

Australia AusCERT

Oracle Java SE: CVSS (Max): 7.5

Australia AusCERT

Measuresoft ScadaPro: CVSS (Max): 5.5

Australia AusCERT

Electrolink FM/DAB/TV Transmitter: CVSS (Max): 8.8

Australia AusCERT

Rockwell Automation ControlLogix and GuardLogix: CVSS (Max): 8.6

Australia AusCERT

RoboDK: CVSS (Max): 3.3

Australia AusCERT

Oracle Retail Applications: CVSS (Max): 9.8

Australia AusCERT

Oracle MySQL: CVSS (Max): 7.5

Australia AusCERT

Firefox ESR: CVSS (Max): 5.9*

Australia AusCERT

Firefox 125: CVSS (Max): None

Australia AusCERT

Red Hat Single Sign-On 7.6.8 Operator: CVSS (Max): 5.3

Australia AusCERT

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty: CVSS (Max): 7.0

Australia AusCERT

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty: CVSS (Max): 4.3

Australia AusCERT

klibc: CVSS (Max): 9.8

Australia AusCERT

Linux kernel (AWS): CVSS (Max): 9.8*

Australia AusCERT

shim: CVSS (Max): 8.3

Australia AusCERT

kernel-rt: CVSS (Max): 7.3

Australia AusCERT

Linux kernel (IoT): CVSS (Max): 7.8

Australia AusCERT

OpenShift API for Data Protection (OADP) 1.3.1: CVSS (Max): 7.5

Australia AusCERT

pcs: CVSS (Max): 5.3

Australia AusCERT

Linux Kernel: CVSS (Max): 7.3

Australia AusCERT

nodejs20: CVSS (Max): 7.5

Australia AusCERT

nodejs18: CVSS (Max): 7.5

Australia AusCERT

Suse Products: CVSS (Max): None

Australia AusCERT

eclipse, maven-surefire and tycho: CVSS (Max): 5.0

Australia AusCERT

MozillaFirefox: CVSS (Max): 5.9*

Australia AusCERT

apache2: CVSS (Max): 7.5

Australia AusCERT

cockpit: CVSS (Max): None

Canada Cyber Centre

Mozilla security advisory (AV24-209)

Canada Cyber Centre

PuTTY security advisory (AV24-208)

Canada Cyber Centre

Juniper security advisory (AV24-207)

Belgium CERT.BE

WARNING: A VULNERABILITY IS AFFECTING PUTTY CLIENT

Australia AusCERT

emacs: CVSS (Max): 2.8

Australia AusCERT

Linux Kernel (Live Patch 16 for SLE 15 SP4): CVSS (Max): 7.8

Australia AusCERT

libvirt: CVSS (Max): 6.2

Australia AusCERT

texlive: CVSS (Max): 3.3

Australia AusCERT

Linux Kernel (Live Patch 22 for SLE 15 SP4): CVSS (Max): 7.8

Australia AusCERT

Linux Kernel (Live Patch 11 for SLE 15 SP4): CVSS (Max): 7.8

Australia AusCERT

YARD: CVSS (Max): 7.5

Australia AusCERT

WebKitGTK: CVSS (Max): 8.8

Australia AusCERT

GnuTLS: CVSS (Max): 5.3

Australia AusCERT

Linux Kernel (Live Patch 19 for SLE 15 SP4): CVSS (Max): 7.8

Australia AusCERT

php7.4: CVSS (Max): 9.8

Australia AusCERT

Custom Metrics Autoscaler Operator for Red Hat OpenShift: CVSS (Max): 7.5

Australia AusCERT

php8.2: CVSS (Max): 9.8

Australia AusCERT

Linux Kernel (Live Patch 23 for SLE 15 SP4): CVSS (Max): 7.5

Australia AusCERT

bind and bind-dyndb-ldap: CVSS (Max): 7.5

Canada Cyber Centre

[Control systems] B&R security advisory (AV24-206)

Canada Cyber Centre

Dell security advisory (AV24-205)

Canada Cyber Centre

Vulnerability impacting PAN-OS GlobalProtect Gateway - Update 1

Canada Cyber Centre

HPE security advisory (AV24-204)

Canada Cyber Centre

Microsoft Edge security advisory (AV24-203)

Canada Cyber Centre

Ubuntu security advisory (AV24-202)

Canada Cyber Centre

Red Hat security advisory (AV24-201)

Canada Cyber Centre

[Control systems] CISA ICS security advisories (AV24-200)

Canada Cyber Centre

IBM security advisory (AV24-199)

Finland NCSC-Fi

Artificial intelligence is an increasingly central factor in future cybersecurity solutions

Australia AusCERT

UPDATE ALERT GlobalProtect feature of PAN-OS: CVSS (Max): 10.0

Australia AusCERT

linux: CVSS (Max): 8.0

Australia AusCERT

xorg-server: CVSS (Max): 7.8

Australia AusCERT

trafficserver: CVSS (Max): 7.5

HongKong HKCERT

Xen Denial of Service Vulnerability

Australia AusCERT

BIND and DHCP: CVSS (Max): 7.5

Australia AusCERT

VolSync: CVSS (Max): 5.9

Australia AusCERT

perl-Net-CIDR-Lite: CVSS (Max): 6.3

Australia AusCERT

xwayland: CVSS (Max): 7.8

HongKong HKCERT

Palo Alto Products Remote Code Execution Vulnerability

Australia AusCERT

Linux Kernel: CVSS (Max): 7.5

Canada Cyber Centre

AL24-005 - Vulnerability impacting PAN-OS GlobalProtect Gateway

Canada Cyber Centre

Vulnerability impacting PAN-OS GlobalProtect Gateway

Belgium CERT.BE

WARNING: MULTIPLE CRITICAL VULNERABILITIES FIXED IN JUNIPER DEVICES, PATCH IMMEDIATELY!

Belgium CERT.BE

WARNING: CVE-2024-3400 IN GLOBALPROTECT GATEWAY IS ACTIVELY EXPLOITED, PATCH IMMEDIATELY!

Australia AusCERT

ALERT GlobalProtect feature of PAN-OS: CVSS (Max): 10.0

Canada Cyber Centre

Palo Alto Networks security advisory (AV24-198)

Australia AusCERT

UPDATE GitLab Community Edition and Enterprise Edition: CVSS (Max): 8.7

Australia AusCERT

Apache Maven Shared Utils: CVSS (Max): 9.8

Australia AusCERT

httpd:2.4: CVSS (Max): 7.5

Australia AusCERT

X.Org server: CVSS (Max): 7.8

Australia AusCERT

gnutls: CVSS (Max): 5.3

Australia AusCERT

GitLab: CVSS (Max): 8.7

Australia AusCERT

XenServer and Citrix Hypervisor: CVSS (Max): 6.5

Australia AusCERT

Rockwell Automation 5015-AENFTXT: CVSS (Max): 7.5

Australia AusCERT

Siemens TeleControl Server Basic: CVSS (Max): 8.8

Australia AusCERT

Siemens SINEC NMS: CVSS (Max): 7.6

Australia AusCERT

Siemens Scalance W1750D: CVSS (Max): 9.8

Australia AusCERT

Siemens RUGGEDCOM APE1808: CVSS (Max): 7.8

Australia AusCERT

Siemens RUGGEDCOM APE1808: CVSS (Max): 8.6

Australia AusCERT

Siemens SIMATIC WinCC: CVSS (Max): 6.2

Australia AusCERT

Siemens SIMATIC S7-1500: CVSS (Max): 7.8

Australia AusCERT

Linux Kernel (Live Patch 41 for SLE 15 SP3): CVSS (Max): 7.5

Australia AusCERT

Linux Kernel (Live Patch 36 for SLE 15 SP3): CVSS (Max): 7.5

Australia AusCERT

Linux Kernel (Live Patch 3 for SLE 15 SP5): CVSS (Max): 7.8

Australia AusCERT

Linux Kernel (Live Patch 40 for SLE 15 SP3): CVSS (Max): 7.5

Australia AusCERT

tomcat10: CVSS (Max): 7.5

HongKong HKCERT

Palo Alto Products Multiple Vulnerabilities

Australia AusCERT

texlive-specs-k: CVSS (Max): 7.0

Australia AusCERT

IBM Security QRadar SIEM: CVSS (Max): 9.8

Australia AusCERT

Linux Kernel (Live Patch 35 for SLE 15 SP3): CVSS (Max): 7.5

Australia AusCERT

Linux Kernel (Live Patch 37 for SLE 15 SP3): CVSS (Max): 7.5

Canada Cyber Centre

[Control systems] B&R security advisory (AV24-197)

Canada Cyber Centre

Mitel security advisory (AV24-196)

Belgium CERT.BE

WARNING: GITLAB CE/EE PATCHED TWO CRITICAL XSS VULNERABILITIES, PATCH IMMEDIATELY!

Canada Cyber Centre

Citrix security advisory (AV24-195)

Belgium CERT.BE

WARNING: MICROSOFT PATCH TUESDAY APRIL 2024 PATCHES 147 VULNERABILITIES, INCLUDING 2 ACTIVELY EXPLOITED ZERO DAY VULNERABILITIES, PATCH IMMEDIATELY!

Australia AusCERT

Junos OS Evolved: CVSS (Max): 8.8

Australia AusCERT

Paragon Active Assurance: CVSS (Max): 8.4

Australia AusCERT

Junos OS and Junos OS Evolved: CVSS (Max): 5.9

Australia AusCERT

Junos OS: CVSS (Max): 4.8

Australia AusCERT

Junos OS: CVSS (Max): 5.3

Australia AusCERT

Junos OS and Junos OS Evolved: CVSS (Max): 9.8

Australia AusCERT

Junos OS: CVSS (Max): 5.8

Australia AusCERT

Junos OS: CVSS (Max): 5.5

Australia AusCERT

Junos OS Evolved: CVSS (Max): 6.5

Australia AusCERT

Junos OS Evolved: CVSS (Max): 5.3

Australia AusCERT

Junos OS Evolved: CVSS (Max): 7.1

Australia AusCERT

Juniper Cloud Native Router: CVSS (Max): 9.8

Australia AusCERT

cRPD: CVSS (Max): 9.8

Australia AusCERT

Junos OS and Junos OS Evolved: CVSS (Max): 5.3

Australia AusCERT

Junos OS: CVSS (Max): 6.5

Australia AusCERT

Junos OS: CVSS (Max): 7.5

Australia AusCERT

Junos OS: CVSS (Max): 5.9

Australia AusCERT

Junos OS and Junos OS Evolved: CVSS (Max): 5.0

Australia AusCERT

Junos OS and Junos OS Evolved: CVSS (Max): 7.5

Australia AusCERT

Junos OS and Junos OS Evolved: CVSS (Max): 6.5

Australia AusCERT

Junos OS Evolved: CVSS (Max): 5.5

Australia AusCERT

PAN-OS: CVSS (Max): 6.0

Australia AusCERT

PAN-OS: CVSS (Max): 8.3

HongKong HKCERT

Node.js Remote Code Execution Vulnerability

Australia AusCERT

PAN-OS: CVSS (Max): 8.2

Australia AusCERT

PAN-OS: CVSS (Max): 6.9

Australia AusCERT

IBM Security QRadar SIEM: CVSS (Max): 5.9

Australia AusCERT

unbound: CVSS (Max): 8.0

Australia AusCERT

GitOps 1.12.1 for Argo CD CLI and MicroShift GitOps: CVSS (Max): 7.5

Australia AusCERT

xorg-x11-server: CVSS (Max): 7.8

Australia AusCERT

apache2-mod_jk: CVSS (Max): 5.3

Australia AusCERT

NSS: CVSS (Max): 6.5

Australia AusCERT

nghttp2: CVSS (Max): None

Australia AusCERT

Squid: CVSS (Max): 8.6

Australia AusCERT

Linux Kernel RT (Live Patch 9 for SLE 15 SP5): CVSS (Max): 7.8

Australia AusCERT

Linux Kernel RT (Live Patch 5 for SLE 15 SP5): CVSS (Max): 7.8

Australia AusCERT

less: CVSS (Max): 7.8

Australia AusCERT

xfig: CVSS (Max): 4.2

Australia AusCERT

pillow: CVSS (Max): 6.7

Australia AusCERT

qt6-base: CVSS (Max): 6.5

Canada Cyber Centre

Google Chrome security advisory (AV24-194)

Canada Cyber Centre

Palo Alto Networks security advisory (AV24-193)

Belgium CERT.BE

WARNING: CRITICAL VULNERABILITIES IN LG WEBOS TELEVISION SOFTWARE, PATCH IMMEDIATELY!

Canada Cyber Centre

Microsoft security advisory – April 2024 monthly rollup (AV24-192)

Australia AusCERT

UPDATE Adobe Photoshop: CVSS (Max): 5.5

Australia AusCERT

WordPress: CVSS (Max): None

Australia AusCERT

FortiMail: CVSS (Max): 4.9

Australia AusCERT

FortiSandbox: CVSS (Max): 8.6

Australia AusCERT

FortiSandbox: CVSS (Max): 6.5

Australia AusCERT

FortiSandbox: CVSS (Max): 5.8

Australia AusCERT

FortiSandbox: CVSS (Max): 7.9

Australia AusCERT

FortiOS & FortiProxy: CVSS (Max): 7.5

Australia AusCERT

FortiOS: CVSS (Max): 5.0

Australia AusCERT

FortiOS: CVSS (Max): 6.1

Australia AusCERT

FortiNAC-F: CVSS (Max): 4.4

Australia AusCERT

FortiManager: CVSS (Max): 6.3

Australia AusCERT

FortiClientMac: CVSS (Max): 7.8

Australia AusCERT

FortiClientLinux: CVSS (Max): 9.4

Japan JPCERT

Security Alert: Microsoft Releases April 2024 Security Updates

Australia AusCERT

Illustrator: CVSS (Max): 5.5

Australia AusCERT

Adobe Bridge: CVSS (Max): 5.5

Australia AusCERT

Adobe Media Encoder: CVSS (Max): 7.8

Australia AusCERT

Red Hat Build of Apache Camel 4.0 for Quarkus 3.2: CVSS (Max): 6.5

Australia AusCERT

SUBNET PowerSYSTEM Server and Substation Server: CVSS (Max): 8.4