Security Digest archive
January 2024
4 editorial briefs, 21 known exploited (cisa kev) additions and 34 critical advisories across 20 digest days.
Wednesday, January 31, 2024
- Patch this week Leaky Vessels: runc Container Escape (CVE-2024-21626)
- KEV CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons
- KEV CVE-2022-48618 Apple Multiple Products
- Critical 2 advisories: github.com/moby/buildkit, github.com/moby/buildkit
Tuesday, January 30, 2024
- Critical 1 advisory: github.com/hashicorp/vault
Monday, January 29, 2024
- Critical 3 advisories: github.com/0xJacky/Nginx-UI, meshcentral, @devicefarmer/stf
Friday, January 26, 2024
- Critical 1 advisory: synthcity
Wednesday, January 24, 2024
- Act now Jenkins CLI Arbitrary File Read (CVE-2024-23897)
- KEV CVE-2023-22527 Atlassian Confluence Data Center and Server
- Critical 1 advisory: org.jenkins-ci.main:jenkins-core
Tuesday, January 23, 2024
- KEV CVE-2024-23222 Apple Multiple Products
- Critical 2 advisories: apache-superset, com.alipay.sofa:rpc-sofa-boot-starter
Monday, January 22, 2024
- KEV CVE-2023-34048 VMware vCenter Server
Sunday, January 21, 2024
- Critical 5 advisories: embedchain, org.clojure:clojure, pandasai, llama-index, llama-hub
Saturday, January 20, 2024
- Critical 1 advisory: paddlepaddle
Friday, January 19, 2024
Thursday, January 18, 2024
- KEV CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core
Wednesday, January 17, 2024
- KEV CVE-2024-0519 Google Chromium V8
- KEV CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway
- KEV CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway
- Critical 1 advisory: shopware/core
Tuesday, January 16, 2024
- KEV CVE-2018-15133 Laravel Laravel Framework
Friday, January 12, 2024
- Critical 2 advisories: @clerk/nextjs, @evershop/evershop
Thursday, January 11, 2024
- Act now GitLab Password Reset Flaw Enables Account Takeover
- Critical 2 advisories: drupal/core, github.com/gofiber/template/django/v3
Wednesday, January 10, 2024
- Act now Ivanti Connect Secure Zero-Day Chain: Unauthenticated RCE
- KEV CVE-2024-21887 Ivanti Connect Secure and Policy Secure
- KEV CVE-2023-46805 Ivanti Connect Secure and Policy Secure
- KEV CVE-2023-29357 Microsoft SharePoint Server
- Critical 2 advisories: wwbn/avideo, github.com/go-git/go-git/v5
Tuesday, January 9, 2024
- Critical 1 advisory: aries-cloudagent
Monday, January 8, 2024
- KEV CVE-2023-41990 Apple Multiple Products
- KEV CVE-2023-38203 Adobe ColdFusion
- KEV CVE-2023-29300 Adobe ColdFusion
- KEV CVE-2023-27524 Apache Superset
- KEV CVE-2023-23752 Joomla! Joomla!
- KEV CVE-2016-20017 D-Link DSL-2750B Devices
- Critical 2 advisories: org.xwiki.platform:xwiki-platform-admin…, github.com/snapcore/snapd
Wednesday, January 3, 2024
- Critical 5 advisories: PaddlePaddle, PaddlePaddle, wrangler, org.apache.inlong:manager-pojo, PaddlePaddle
Tuesday, January 2, 2024
- KEV CVE-2023-7101 Spreadsheet::ParseExcel Spreadsheet::ParseExcel
- KEV CVE-2023-7024 Google Chromium WebRTC
- Critical 1 advisory: plotly/plotly.js