Security Digest archive
September 2024
2 editorial briefs, 25 known exploited (cisa kev) additions and 18 critical advisories across 17 digest days.
Monday, September 30, 2024
- KEV CVE-2023-25280 D-Link DIR-820 Router
- KEV CVE-2020-15415 DrayTek Multiple Vigor Routers
- KEV CVE-2019-0344 SAP Commerce Cloud
Thursday, September 26, 2024
- Check exposure CUPS cups-browsed RCE Chain: Real, but Needs a Print Job
- Critical 1 advisory: agnai
Wednesday, September 25, 2024
- Critical 1 advisory: gradio
Tuesday, September 24, 2024
- KEV CVE-2024-7593 Ivanti Virtual Traffic Manager
- Critical 1 advisory: mellium.im/xmpp
Monday, September 23, 2024
- Critical 1 advisory: io.dataease:common
Friday, September 20, 2024
- Critical 1 advisory: github.com/navidrome/navidrome
Thursday, September 19, 2024
- KEV CVE-2024-8963 Ivanti Cloud Services Appliance (CSA)
- Critical 3 advisories: github.com/grafana/grafana-plugin-sdk-go, d7y.io/dragonfly/v2, github.com/traefik/traefik/v3
Wednesday, September 18, 2024
- KEV CVE-2024-27348 Apache HugeGraph-Server
- KEV CVE-2022-21445 Oracle ADF Faces
- KEV CVE-2020-14644 Oracle WebLogic Server
- KEV CVE-2020-0618 Microsoft SQL Server
- Critical 2 advisories: langchain-experimental, github.com/chaosblade-io/chaosblade
Tuesday, September 17, 2024
- KEV CVE-2014-0502 Adobe Flash Player
- KEV CVE-2014-0497 Adobe Flash Player
- KEV CVE-2013-0648 Adobe Flash Player
- KEV CVE-2013-0643 Adobe Flash Player
- Critical 1 advisory: pl.allegro.tech.hermes:hermes-management
Monday, September 16, 2024
- KEV CVE-2024-6670 Progress WhatsUp Gold
- KEV CVE-2024-43461 Microsoft Windows
- Critical 1 advisory: org.apache.seata:seata-core
Friday, September 13, 2024
- KEV CVE-2024-8190 Ivanti Cloud Services Appliance
Wednesday, September 11, 2024
- Critical 2 advisories: agpt, omniauth-saml
Tuesday, September 10, 2024
- KEV CVE-2024-38226 Microsoft Publisher
- KEV CVE-2024-38217 Microsoft Windows
- KEV CVE-2024-38014 Microsoft Windows
- Critical 1 advisory: ruby-saml
Monday, September 9, 2024
- KEV CVE-2024-40766 SonicWall SonicOS
- KEV CVE-2017-1000253 Linux Kernel
- KEV CVE-2016-3714 ImageMagick ImageMagick
- Critical 2 advisories: pyload-ng, topthink/framework
Friday, September 6, 2024
- Critical 1 advisory: ai.h2o:h2o-core
Wednesday, September 4, 2024
Tuesday, September 3, 2024
- KEV CVE-2024-7262 Kingsoft WPS Office
- KEV CVE-2021-20124 DrayTek VigorConnect
- KEV CVE-2021-20123 DrayTek VigorConnect