National Cyber Awareness System

Cisco Releases Security Updates for Multiple Products CISA releases 1 Industrial Control Systems Advisory CISA Adds Ten Known Exploited Vulnerabilities to Catalog Preparing Critical Infrastructure for Post-Quantum Cryptography VMware Releases Security Update Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird CISA releases 7 Industrial Control Systems Advisories CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite CISA Adds One Known Exploited Vulnerabilities to Catalog

Mozilla Security Advisories

Security Vulnerabilities fixed in Thunderbird 91.13 mfsa2022-37 Security Vulnerabilities fixed in Thunderbird 102.2 mfsa2022-36 Security Vulnerabilities fixed in Firefox 104 mfsa2022-33 Security Vulnerabilities fixed in Firefox ESR 102.2 mfsa2022-34 Security Vulnerabilities fixed in Firefox ESR 91.13 mfsa2022-35

Ubuntu Security Notices

USN-5582-1: Linux kernel (Azure CVM) vulnerabilities USN-5581-1: Firefox vulnerabilities USN-5578-2: Open VM Tools vulnerability USN-5580-1: Linux kernel (AWS) vulnerabilities USN-5579-1: Linux kernel vulnerabilities USN-5578-1: Open VM Tools vulnerability USN-5577-1: Linux kernel (OEM) vulnerabilities USN-5576-1: Twisted vulnerability USN-5474-2: Varnish Cache regression USN-5575-2: Libxslt vulnerabilities USN-5575-1: Libxslt vulnerabilities USN-5574-1: Exim vulnerability

Red Hat Security Advisory

(RHSA-2022:6188) Important: Node Maintenance Operator 4.11.1 security update (RHSA-2022:6187) Important: Node Health Check Operator 0.3.1 security update (RHSA-2022:6184) Important: Self Node Remediation Operator 0.4.1 security update (RHSA-2022:6180) Important: rsync security update (RHSA-2022:6179) Important: firefox security update (RHSA-2022:6178) Important: firefox security update (RHSA-2022:6175) Important: firefox security update (RHSA-2022:6176) Important: firefox security update (RHSA-2022:6174) Important: firefox security update (RHSA-2022:6173) Important: rsync security update (RHSA-2022:6172) Important: rsync security update (RHSA-2022:6171) Important: rsync security update (RHSA-2022:6170) Important: rsync security update (RHSA-2022:6169) Important: thunderbird security update (RHSA-2022:6168) Important: thunderbird security update (RHSA-2022:6167) Important: thunderbird security update (RHSA-2022:6166) Important: thunderbird security update (RHSA-2022:6165) Important: thunderbird security update (RHSA-2022:6163) Important: systemd security update (RHSA-2022:6162) Important: systemd security update (RHSA-2022:6161) Important: systemd security update (RHSA-2022:6160) Important: systemd security update (RHSA-2022:6159) Moderate: curl security update (RHSA-2022:6158) Moderate: php:7.4 security update (RHSA-2022:6157) Moderate: curl security update (RHSA-2022:6156) Important: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement, & bugfix update (RHSA-2022:6155) Moderate: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement & bugfix update (RHSA-2022:6094) Moderate: OpenShift Container Platform 4.10.28 packages and security update (RHSA-2022:6103) Moderate: OpenShift Container Platform 4.11.1 bug fix and security update (RHSA-2022:6102) Low: OpenShift Container Platform 4.11.1 packages and security update (RHSA-2022:6053) Moderate: OpenShift Container Platform 4.7.56 security and bug fix update (RHSA-2022:6119) Moderate: podman security and bug fix update

Cisco Security Advisory

Cisco ACI Multi-Site Orchestrator Privilege Escalation Vulnerability Cisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution Vulnerability Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability Cisco FXOS Software Command Injection Vulnerability

Jenkins Security Advisories

Jenkins Security Advisory 2022-08-23

CISA Known Exploted Vulnerabilities

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability CVE-2022-0028 dotCMS Unrestricted Upload of File Vulnerability CVE-2022-26352 Apache CouchDB Insecure Default Initialization of Resource Vulnerability CVE-2022-24706 Apache APISIX Authentication Bypass Vulnerability CVE-2022-24112 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability CVE-2022-22963 WebRTC Heap Buffer Overflow Vulnerability CVE-2022-2294 Grafana Authentication Bypass Vulnerability CVE-2021-39226 Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability CVE-2021-38406 Apple iOS, macOS, watchOS Sanbox Bypass Vulnerability CVE-2021-31010 PEAR Archive_Tar Improper Link Resolution Vulnerability CVE-2020-36193 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CVE-2020-28949

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.