Security Digest archive
February 2024
3 editorial briefs, 9 known exploited (cisa kev) additions and 42 critical advisories across 20 digest days.
Thursday, February 29, 2024
- KEV CVE-2023-29360 Microsoft Streaming Service
Wednesday, February 28, 2024
- Critical 1 advisory: Flask-AppBuilder
Tuesday, February 27, 2024
- Check exposure Malicious Hugging Face Models: Pickle Code Execution
- Critical 2 advisories: github.com/edgelesssys/marblerun, org.apache.james:james-server
Monday, February 26, 2024
- Critical 4 advisories: langchain-experimental, com.linecorp.centraldogma:centraldogma…, @nfid/embed, com.linecorp.armeria:armeria-saml
Friday, February 23, 2024
Thursday, February 22, 2024
- KEV CVE-2024-1709 ConnectWise ScreenConnect
- Critical 2 advisories: github.com/gofiber/fiber/v2, phenx/php-svg-lib
Wednesday, February 21, 2024
- Critical 3 advisories: pymatgen, com.liferay.portal:release.portal.bom, org.postgresql:postgresql
Tuesday, February 20, 2024
- Critical 14 advisories: com.liferay.portal:release.portal.bom, apache-airflow-providers-mongo, com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom, org.apache.dolphinscheduler:dolphinsche…, com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom, @dfinity/identity, com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom …
Monday, February 19, 2024
- Act now ScreenConnect Auth Bypass CVE-2024-1709 (CVSS 10)
- Critical 1 advisory: torrentpier/torrentpier
Thursday, February 15, 2024
- KEV CVE-2024-21410 Microsoft Exchange Server
- KEV CVE-2020-3259 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Tuesday, February 13, 2024
- KEV CVE-2024-21412 Microsoft Windows
- KEV CVE-2024-21351 Microsoft Windows
- Critical 1 advisory: NuGet.CommandLine
Monday, February 12, 2024
- KEV CVE-2023-43770 Roundcube Webmail
- Critical 1 advisory: pixelfed/pixelfed
Saturday, February 10, 2024
- Critical 1 advisory: Samly
Friday, February 9, 2024
- KEV CVE-2024-21762 Fortinet FortiOS
Thursday, February 8, 2024
- Act now FortiOS SSL VPN Pre-Auth RCE (CVE-2024-21762)
- Critical 1 advisory: DIRAC
Wednesday, February 7, 2024
- Critical 3 advisories: Products.SQLAlchemyDA, com.liferay.portal:release.portal.bom, vyper
Tuesday, February 6, 2024
- KEV CVE-2023-4762 Google Chromium V8
Monday, February 5, 2024
- Critical 1 advisory: stimulsoft-dashboards-js
Friday, February 2, 2024
- Critical 3 advisories: ckb, ckb, com.linecorp.centraldogma:centraldogma…
Thursday, February 1, 2024
- Critical 2 advisories: vyper, com.ibeetl:beetl-core