Security Digest archive

June 2024

5 editorial briefs, 9 known exploited (cisa kev) additions and 37 critical advisories across 17 digest days.

Friday, June 28, 2024
- Critical 1 advisory: github.com/gin-gonic/gin
Thursday, June 27, 2024
- Critical 3 advisories: vanna, lightning, litellm
Wednesday, June 26, 2024
- KEV CVE-2022-2586 Linux Kernel
- KEV CVE-2022-24816 OSGeo JAI-EXT
- KEV CVE-2020-13965 Roundcube Webmail
Tuesday, June 25, 2024
- Act now MOVEit Transfer: SFTP Authentication Bypass (CVE-2024-5806)
- Check exposure polyfill.io CDN Supply-Chain Compromise Hits 100K+ Sites
- Critical 1 advisory: craftcms/cms
Monday, June 24, 2024
- Check exposure Probllama: Ollama Path Traversal to RCE (CVE-2024-37032)
- Critical 2 advisories: org.xwiki.platform:xwiki-platform-rende…, org.apache.streampipes:streampipes-reso…
Saturday, June 22, 2024
- Critical 1 advisory: lollms
Thursday, June 20, 2024
- Critical 1 advisory: org.xwiki.platform:xwiki-platform-oldco…
Monday, June 17, 2024
- Critical 3 advisories: ai.djl:api, @almela/obx, github.com/rancher/rke
Thursday, June 13, 2024
- KEV CVE-2024-4358 Progress Telerik Report Server
- KEV CVE-2024-32896 Android Pixel
- KEV CVE-2024-26169 Microsoft Windows
- Critical 2 advisories: magento/community-edition, magento/community-edition
Wednesday, June 12, 2024
- KEV CVE-2024-4610 Arm Mali GPU Kernel Driver
- KEV CVE-2024-4577 PHP Group PHP
- Critical 1 advisory: org.apache.submarine:submarine-server-c…
Tuesday, June 11, 2024
- Critical 2 advisories: lollms, jupyter-server-proxy
Friday, June 7, 2024
- Critical 9 advisories: willdurand/js-translation-bundle, zendframework/zendframework1, zendframework/zendframework1, zendframework/zendframework, zendframework/zendframework1, zendframework/zend-xmlrpc, zendframework/zend-json, zendframework/zendframework1, zendframework/zendframework1
Thursday, June 6, 2024
- Act now CVE-2024-4577: PHP-CGI Argument Injection RCE on Windows
- Critical 2 advisories: lightning, mlflow
Wednesday, June 5, 2024
- Critical 2 advisories: typo3/cms, typo3/cms
Tuesday, June 4, 2024
- Critical 4 advisories: @janhq/core, github.com/projectdiscovery/interactsh, nano-id, @janhq/core
Monday, June 3, 2024
- KEV CVE-2017-3506 Oracle WebLogic Server
- Critical 1 advisory: qdrant-client
Sunday, June 2, 2024
- Check exposure Snowflake UNC5537: Customer Accounts Hit With Stolen Logins
- Critical 2 advisories: qdrant, org.silverpeas.core:silverpeas-core