Security Digest archive
October 2023
6 editorial briefs, 18 known exploited (cisa kev) additions and 40 critical advisories across 20 digest days.
Tuesday, October 31, 2023
- Act now Confluence CVE-2023-22518: Unauthenticated Reset to Admin
- KEV CVE-2023-46748 F5 BIG-IP Configuration Utility
- KEV CVE-2023-46747 F5 BIG-IP Configuration Utility
Monday, October 30, 2023
- Critical 1 advisory: org.opencrx:opencrx-client
Friday, October 27, 2023
- Critical 1 advisory: org.apache.activemq:activemq-client
Thursday, October 26, 2023
- KEV CVE-2023-5631 Roundcube Webmail
Wednesday, October 25, 2023
- Critical 10 advisories: crypto-js, org.xwiki.platform:xwiki-platform-offic…, org.xwiki.platform:xwiki-platform-web-t…, crypto-es, org.xwiki.platform:xwiki-platform-web-t…, org.xwiki.platform:xwiki-platform-web-t…, org.xwiki.platform:xwiki-platform-web-t…, org.xwiki.rendering:xwiki-rendering-xml, cn.dev33:sa-token-core, com.usthe.sureness:sureness-core
Monday, October 23, 2023
- KEV CVE-2023-20273 Cisco Cisco IOS XE Web UI
Friday, October 20, 2023
Thursday, October 19, 2023
- Critical 1 advisory: org.yamcs:yamcs
Wednesday, October 18, 2023
- KEV CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway
Tuesday, October 17, 2023
- Critical 11 advisories: com.liferay:com.liferay.translation.web, @seal-security/mongoose-fixed, com.liferay.commerce:com.liferay.commer…, com.liferay:com.liferay.fragment.entry.…, com.liferay:com.liferay.layout.impl, com.liferay:com.liferay.wiki.web, com.xwiki.identity-oauth:identity-oauth…, com.liferay:com.liferay.asset.categorie…, github.com/gofiber/fiber/v2, github.com/consensys/gnark, com.liferay:com.liferay.oauth2.provider…
Monday, October 16, 2023
- Act now Cisco IOS XE Web UI Zero-Day Chain Implants Devices
- KEV CVE-2023-20198 Cisco IOS XE Web UI
- Critical 4 advisories: org.apache.inlong:manager-pojo, cachethq/cachet, org.xwiki.contrib.changerequest:applica…, @babel/traverse
Friday, October 13, 2023
- Critical 2 advisories: @vrite/sdk, pyminizip
Wednesday, October 11, 2023
- Most can relax curl SOCKS5 Heap Overflow: Hyped, but Narrow in Practice
- Critical 1 advisory: org.apache.zookeeper:zookeeper
Tuesday, October 10, 2023
- Act now Citrix Bleed: NetScaler Gateway Leaks Session Tokens
- Check exposure HTTP/2 Rapid Reset: Record DDoS Flaw in HTTP/2 Servers
- KEV CVE-2023-44487 IETF HTTP/2
- KEV CVE-2023-41763 Microsoft Skype for Business
- KEV CVE-2023-36563 Microsoft WordPad
- KEV CVE-2023-21608 Adobe Acrobat and Reader
- KEV CVE-2023-20109 Cisco IOS and IOS XE
Monday, October 9, 2023
- Check exposure LangChain PALChain: Prompt Injection to RCE (CVE-2023-44467)
- Critical 1 advisory: langchain-experimental
Friday, October 6, 2023
- Critical 3 advisories: fsevents, github.com/neuvector/neuvector, bolt
Thursday, October 5, 2023
- KEV CVE-2023-42824 Apple iOS and iPadOS
- KEV CVE-2023-40044 Progress WS_FTP Server
- KEV CVE-2023-22515 Atlassian Confluence Data Center and Server
- Critical 1 advisory: geokit-rails
Wednesday, October 4, 2023
- KEV CVE-2023-42793 JetBrains TeamCity
- KEV CVE-2023-28229 Microsoft Windows CNG Key Isolation Service
Tuesday, October 3, 2023
- KEV CVE-2023-4211 Arm Mali GPU Kernel Driver
Monday, October 2, 2023
- KEV CVE-2023-5217 Google Chromium libvpx
- Critical 2 advisories: torchserve, torchserve