Alerts

Linux has released security updates on multiple distributions. Linux Kernel 5.1 through 5.19.x before 5.19.16 is vulnerable to various remote code execution vulnerabilities, allowing the attacker to execute arbitrary code on the system and cause a denial of service. Sample of the addressed vulnerabilities: 1- Linux Kernel Code Execution (CVE-2022-42719):  CVSS: 8  Attack Vector: Adjacent […]

Juniper Networks has released multiple security updates to address many vulnerabilities affecting multiple products. The remote attacker could exploit some of these vulnerabilities to take control of the affected system, and cause a denial of service. The most severe of the addressed vulnerabilities could allow the remote authenticated attacker with ‘WRITE’ permissions to store one

Palo Alto has released a security update to address a vulnerability in Palo Alto Networks PAN-OS. The remote attacker could exploit this vulnerability to take control of the affected system. Palo Alto Networks PAN-OS is vulnerable to authentication bypass vulnerability in the PAN-OS 8.1 web interface that could allow the network-based attacker with specific knowledge

Google has released an updated Chrome version 106.0.5249.119 for Windows, Mac, and Linux to fix multiple vulnerabilities. The remote attacker could exploit some of these vulnerabilities to take control of the affected system or cause a denial of service. The severity of the addressed vulnerabilities could allow the remote attacker to execute arbitrary code or

VMware has released a security advisory to address several vulnerabilities which affect multiple VMware products. The remote attacker could exploit some of these vulnerabilities to take control of the affected system.  The addressed vulnerabilities could allow the attackers to perform several attacks, like executing arbitrary code on the underlying operating system that hosts the vCenter

Cisco has released security updates to address several vulnerabilities in multiple Cisco products The severity of the addressed vulnerabilities could allow the attacker to fully compromise the Cisco NFVIS system and cause a denial of service. Samples of the addressed vulnerabilities: 1. Cisco Enterprise NFV Infrastructure Software (NFVIS) code execution (CVE 2022-20929): • CVSS: 7.8 •

Microsoft has released an updated version of Microsoft Edge (Version 106.0.1370.34) to fix a vulnerability in Microsoft Edge. The remote attacker could exploit this vulnerability to take control of the affected system. The severity of the addressed vulnerability could allow the remote attacker to exploit this vulnerability by persuading a victim to visit a specially crafted Web

The Twig third-party library for content templating and sanitization has released a security update that affects Drupal versions (8.0.0 to 9.3.22, 9.4.0 to 9.4.7). The severity of the addressed vulnerability could allow an untrusted user to access private files, the contents of other files on the server, or database credentials.The remote attacker could exploit this vulnerability

Google has released an updated Chrome version (106.0.5249.91) for Windows, Mac, and Linux to fix multiple vulnerabilities. The remote attacker could exploit these vulnerabilities to take control of the affected system. The severity of the addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the affected system by persuading the victim to

Redhat, Ubuntu, SUSE, and Debian released security updates to address multiple vulnerabilities. The attacker could exploit some of these vulnerabilities to take control of the affected system. The most severe vulnerability in the Linux kernel could allow the attacker to execute arbitrary code on the system caused by sending a specially-crafted request. Sample of the

SolarWinds has released security updates to address multiple vulnerabilities in SolarWinds Orion Platform “2022.2 and earlier”, and Hybrid Cloud Observability NCM “2020.2.5 and previous versions”. The addressed vulnerabilities could be exploited to allow the remote attacker to perform SQL injection or stored and DOM-based cross-site scripting attacks. Sample of the addressed vulnerabilities: 1. SQL Injection

Google has released an updated Chrome version (106.0.5249.61/62) for Windows and (106.0.5249.61) for Mac and Linux to fix multiple vulnerabilities. The remote attacker could exploit some of these vulnerabilities to take control of the affected system. The severity of the addressed vulnerabilities could allow the remote attacker to execute arbitrary code, bypass security restrictions by