National Cyber Awareness System

CISA Releases Four Industrial Control Systems Advisories Cisco Releases Security Updates for Multiple Products CISA Adds Twelve Known Exploited Vulnerabilities to Catalog  CISA Releases Five Industrial Control Systems Advisories #StopRansomware: Vice Society

Ubuntu Security Notices

USN-5605-1: Linux kernel (Azure CVM) vulnerabilities USN-5604-1: LibTIFF vulnerabilities USN-5603-1: Linux kernel (Raspberry Pi) vulnerabilities USN-5602-1: Linux kernel (Raspberry Pi) vulnerabilities USN-4976-2: Dnsmasq vulnerability USN-5600-1: Linux kernel (HWE) vulnerabilities USN-5599-1: Linux kernel (Oracle) vulnerabilities USN-5598-1: Linux kernel (Oracle) vulnerability USN-5597-1: Linux kernel (Oracle) vulnerability

Red Hat Security Advisory

(RHSA-2022:6407) Moderate: Red Hat Integration Camel-K 1.8 security update (RHSA-2022:6262) Important: OpenShift Container Platform 4.6.61 bug fix and security update (RHSA-2022:6263) Moderate: OpenShift Container Platform 4.6.61 security and extras update (RHSA-2022:6393) Important: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update (RHSA-2022:6392) Important: RHV RHEL Host (ovirt-host) [ovirt-4.5.2] security update (RHSA-2022:6389) Moderate: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security and bug fix update (RHSA-2022:6258) Important: OpenShift Container Platform 4.10.31 security update (RHSA-2022:6287) Moderate: OpenShift Container Platform 4.11.3 packages and security update (RHSA-2022:6386) Important: openvswitch2.17 security update (RHSA-2022:6385) Important: openvswitch2.15 security update (RHSA-2022:6384) Important: openvswitch2.13 security update (RHSA-2022:6382) Important: openvswitch2.16 security update (RHSA-2022:6383) Important: openvswitch2.17 security update (RHSA-2022:6252) Moderate: OpenShift Container Platform 3.11.784 security update (RHSA-2022:6381) Important: open-vm-tools security update (RHSA-2022:6370) Moderate: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes (RHSA-2022:6344) Moderate: Logging Subsystem 5.5.1 Security and Bug Fix Update (RHSA-2022:6358) Important: open-vm-tools security update (RHSA-2022:6357) Important: open-vm-tools security update (RHSA-2022:6356) Important: open-vm-tools security update (RHSA-2022:6355) Important: open-vm-tools security update (RHSA-2022:6354) Important: open-vm-tools security update (RHSA-2022:6183) Moderate: Logging Subsystem 5.4.5 Security and Bug Fix Update (RHSA-2022:6351) Important: OpenShift Virtualization 4.10.5 Images security and bug fix update (RHSA-2022:6182) Moderate: Openshift Logging Security and Bug Fix update (5.3.11) (RHSA-2022:6348) Moderate: Gatekeeper Operator v0.2 security and container updates (RHSA-2022:6347) Moderate: VolSync 0.5 security fixes and updates (RHSA-2022:6346) Moderate: RHSA: Submariner 0.13 - security and enhancement update (RHSA-2022:6345) Moderate: Multicluster Engine for Kubernetes 2.1 security updates and bug fixes (RHSA-2022:6341) Important: pcs security update

Cisco Security Advisory

Cisco Meraki MR Series Splash Page Insecure Configuration Option Cisco Webex Meetings App Character Interface Manipulation Vulnerability Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022

Github Security Advisories

[GHSA-q76q-q8hw-hmpw] Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs

CISA Known Exploted Vulnerabilities

Google Chromium Insufficient Data Validation Vulnerability CVE-2022-3075 D-Link DIR-816L Remote Code Execution Vulnerability CVE-2022-28958 QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 D-Link DIR-820L Remote Code Execution Vulnerability CVE-2022-26258 Apple iOS, iPadOS, and macOS Input Validation Vulnerability CVE-2020-9934 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CVE-2018-7445 D-Link Multiple Routers OS Command Injection Vulnerability CVE-2018-6530 Oracle WebLogic Server Unspecified Vulnerability CVE-2018-2628 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability CVE-2018-13374 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CVE-2017-5521 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability CVE-2011-4723 Android OS Privilege Escalation Vulnerability CVE-2011-1823

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.