Security Digest archive
April 2024
1 editorial brief, 10 known exploited (cisa kev) additions and 41 critical advisories across 16 digest days.
Tuesday, April 30, 2024
- KEV CVE-2024-29988 Microsoft SmartScreen Prompt
Thursday, April 25, 2024
- Critical 2 advisories: python-jose, mdanter/ecc
Wednesday, April 24, 2024
- KEV CVE-2024-4040 CrushFTP CrushFTP
- KEV CVE-2024-20359 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- KEV CVE-2024-20353 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- Critical 3 advisories: github.com/go-gitea/gitea, kubevirt.io/kubevirt, pyload-ng
Tuesday, April 23, 2024
- KEV CVE-2022-38028 Microsoft Windows
- Critical 3 advisories: zendframework/zendframework1, org.open-metadata:openmetadata-service, drupal/core
Monday, April 22, 2024
- Critical 2 advisories: mysql2, org.apache.hugegraph:hugegraph-api
Thursday, April 18, 2024
- Critical 1 advisory: @andrei-tatar/nora-firebase-common
Wednesday, April 17, 2024
- Critical 2 advisories: github.com/evmos/evmos/v11, github.com/hashicorp/go-getter
Tuesday, April 16, 2024
- Critical 1 advisory: keras
Monday, April 15, 2024
- Critical 5 advisories: llama-index-core, bentoml, mlflow, @aws-amplify/cli, zenml
Friday, April 12, 2024
- Act now PAN-OS GlobalProtect Zero-Day RCE (CVE-2024-3400)
- KEV CVE-2024-3400 Palo Alto Networks PAN-OS
Thursday, April 11, 2024
- KEV CVE-2024-3273 D-Link Multiple NAS Devices
- KEV CVE-2024-3272 D-Link Multiple NAS Devices
Wednesday, April 10, 2024
- Critical 17 advisories: org.xwiki.platform:xwiki-platform-local…, org.xwiki.platform:xwiki-platform-searc…, github.com/go-skynet/LocalAI, llama-index-core, org.xwiki.platform:xwiki-platform-oldco…, org.xwiki.platform:xwiki-platform-realt…, aim, wwbn/avideo, org.xwiki.commons:xwiki-commons-velocity, mysql2, org.xwiki.platform:xwiki-platform-oldco…, org.xwiki.platform:xwiki-platform-uiext… …
Tuesday, April 9, 2024
- Critical 2 advisories: org.apache.zeppelin:zeppelin-interpreter, org.apache.zeppelin:zeppelin-jdbc
Friday, April 5, 2024
- Critical 1 advisory: github.com/cosmos/ibc-go/v4
Thursday, April 4, 2024
- KEV CVE-2024-29748 Android Pixel
- KEV CVE-2024-29745 Android Pixel
- Critical 1 advisory: maildev
Tuesday, April 2, 2024
- Critical 1 advisory: gleez/cms