Security Digest archive
March 2024
2 editorial briefs, 10 known exploited (cisa kev) additions and 24 critical advisories across 14 digest days.
Friday, March 29, 2024
- Check exposure xz-utils Backdoor in liblzma 5.6.0/5.6.1 (CVE-2024-3094)
Tuesday, March 26, 2024
- Check exposure ShadowRay: Exposed Ray Clusters Hijacked (CVE-2023-48022)
- KEV CVE-2023-24955 Microsoft SharePoint Server
- Critical 1 advisory: Lektor
Monday, March 25, 2024
- KEV CVE-2023-48788 Fortinet FortiClient EMS
- KEV CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)
- KEV CVE-2019-7256 Nice Linear eMerge E3-Series
- Critical 2 advisories: stringio, @thi.ng/paths
Wednesday, March 20, 2024
- Critical 1 advisory: jupyter-server-proxy
Tuesday, March 19, 2024
- Critical 1 advisory: parse-server
Monday, March 18, 2024
- Critical 2 advisories: org.fitnesse:fitnesse, github.com/argoproj/argo-cd/v2
Friday, March 15, 2024
- Critical 3 advisories: org.apache.cxf:cxf-rt-databinding-aegis, github.com/argoproj/argo-cd/v2, github.com/pterodactyl/wings
Thursday, March 14, 2024
- Critical 3 advisories: whoogle-search, discordrb, whoogle-search
Tuesday, March 12, 2024
- Critical 1 advisory: org.apache.pulsar:pulsar-functions-work…
Thursday, March 7, 2024
- KEV CVE-2024-27198 JetBrains TeamCity
- Critical 3 advisories: pgAdmin4, paddlepaddle, paddlepaddle
Wednesday, March 6, 2024
- KEV CVE-2024-23296 Apple Multiple Products
- KEV CVE-2024-23225 Apple Multiple Products
- Critical 2 advisories: org.apache.inlong:manager-common, org.ngrinder:ngrinder-core
Tuesday, March 5, 2024
- KEV CVE-2023-21237 Android Pixel
- KEV CVE-2021-36380 Sunhillo SureLine
- Critical 1 advisory: @tomphttp/bare-server-node
Monday, March 4, 2024
- KEV CVE-2024-21338 Microsoft Windows
- Critical 2 advisories: jsonata, github.com/zeromicro/go-zero
Friday, March 1, 2024
- Critical 2 advisories: parse-server, @budibase/server