Security Digest archive
October 2024
17 known exploited (cisa kev) additions and 23 critical advisories across 16 digest days.
Thursday, October 31, 2024
- Critical 1 advisory: dompurify
Tuesday, October 29, 2024
- Critical 2 advisories: github.com/NVIDIA/nvidia-container-tool…, waitress
Monday, October 28, 2024
- Critical 1 advisory: org.springframework.security:spring-sec…
Friday, October 25, 2024
- Critical 4 advisories: github.com/rancher/rke2, github.com/rancher/rancher, github.com/rancher/rancher, github.com/crossplane/crossplane
Thursday, October 24, 2024
- KEV CVE-2024-37383 Roundcube Webmail
- KEV CVE-2024-20481 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- Critical 1 advisory: org.openrefine.dependencies:butterfly
Wednesday, October 23, 2024
- KEV CVE-2024-47575 Fortinet FortiManager
Tuesday, October 22, 2024
- KEV CVE-2024-38094 Microsoft SharePoint
- Critical 2 advisories: com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom
Monday, October 21, 2024
- KEV CVE-2024-9537 ScienceLogic SL1
Thursday, October 17, 2024
- KEV CVE-2024-40711 Veeam Backup & Replication
- Critical 1 advisory: github.com/grafana/grafana
Wednesday, October 16, 2024
- Critical 1 advisory: org.apache.solr:solr
Tuesday, October 15, 2024
- KEV CVE-2024-9680 Mozilla Firefox
- KEV CVE-2024-30088 Microsoft Windows
- KEV CVE-2024-28987 SolarWinds Web Help Desk
- Critical 3 advisories: @vendure/asset-server-plugin, github.com/kubernetes-sigs/image-builder, changedetection.io
Friday, October 11, 2024
- Critical 4 advisories: angular-base64-upload, org.webjars.npm:jsonpath-plus, github.com/ssoready/ssoready, org.pac4j:pac4j-core
Wednesday, October 9, 2024
- KEV CVE-2024-9380 Ivanti Cloud Services Appliance (CSA)
- KEV CVE-2024-9379 Ivanti Cloud Services Appliance (CSA)
- KEV CVE-2024-23113 Fortinet Multiple Products
Tuesday, October 8, 2024
- KEV CVE-2024-43573 Microsoft Windows
- KEV CVE-2024-43572 Microsoft Windows
- KEV CVE-2024-43047 Qualcomm Multiple Chipsets
Thursday, October 3, 2024
- KEV CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS)
- Critical 1 advisory: org.apache.avro:avro
Wednesday, October 2, 2024
- KEV CVE-2024-29824 Ivanti Endpoint Manager (EPM)
- Critical 2 advisories: org.jenkins-ci.plugins:oic-auth, org.jenkins-ci.plugins:oic-auth