National Cyber Awareness System

CISA Has Added One Known Exploited Vulnerability to Catalog  CISA and NSA Publish Joint Cybersecurity Advisory on Control System Defense ISC Releases Security Advisories for Multiple Versions of BIND 9 CISA Releases Three Industrial Control Systems Advisories Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager Iranian State Actors Conduct Cyber Operations Against the Government of Albania CISA Releases Eight industrial Control Systems Advisories

Mozilla Security Advisories

Security Vulnerabilities fixed in Thunderbird 102.3 mfsa2022-42 Security Vulnerabilities fixed in Firefox ESR 102.3 mfsa2022-41 Security Vulnerabilities fixed in Firefox 105 mfsa2022-40 Security Vulnerabilities fixed in Thunderbird 91.13.1 mfsa2022-39

Ubuntu Security Notices

USN-5635-1: Linux kernel (GKE) vulnerabilities USN-5629-1: Python vulnerability USN-5634-1: Linux kernel (OEM) vulnerability USN-5633-1: Linux kernel vulnerabilities USN-5632-1: OAuthLib vulnerability USN-5631-1: libjpeg-turbo vulnerabilities USN-5630-1: Linux kernel (Raspberry Pi) vulnerabilities USN-5628-1: etcd vulnerabilities USN-5627-1: PCRE vulnerabilities USN-5626-2: Bind vulnerabilities USN-5626-1: Bind vulnerabilities USN-5623-1: Linux kernel (HWE) vulnerabilities USN-5625-1: Mako vulnerability USN-5624-1: Linux kernel vulnerabilities USN-5622-1: Linux kernel vulnerabilities USN-5621-1: Linux kernel vulnerabilities USN-5618-1: Ghostscript vulnerability USN-5619-1: LibTIFF vulnerabilities USN-5617-1: Xen vulnerabilities USN-5613-2: Vim regression

Red Hat Security Advisory

(RHSA-2022:6681) Important: OpenShift Virtualization 4.9.6 Images security and bug fix update (RHSA-2022:6531) Important: OpenShift Container Platform 4.10.33 packages and security update (RHSA-2022:6536) Moderate: OpenShift Container Platform 4.11.5 bug fix and security update (RHSA-2022:6535) Low: OpenShift Container Platform 4.11.5 packages and security update (RHSA-2022:6634) Moderate: webkit2gtk3 security update (RHSA-2022:6610) Important: kernel security, bug fix, and enhancement update (RHSA-2022:6585) Moderate: ruby security, bug fix, and enhancement update (RHSA-2022:6580) Moderate: booth security update (RHSA-2022:6602) Moderate: gnupg2 security update (RHSA-2022:6582) Important: kernel-rt security and bug fix update (RHSA-2022:6590) Moderate: mysql security, bug fix, and enhancement update (RHSA-2022:6608) Moderate: dbus-broker security update (RHSA-2022:6595) Moderate: nodejs and nodejs-nodemon security and bug fix update (RHSA-2022:6592) Important: kpatch-patch security update (RHSA-2022:6537) Moderate: Moderate:OpenShift Container Platform 4.11.5 security and extras update (RHSA-2022:6551) Important: Red Hat Virtualization security update

Cisco Security Advisory

Cisco NX-OS Software Border Gateway Protocol Denial of Service Vulnerability

Microsoft Security

Microsoft Endpoint Configuration Manager Spoofing Vulnerability

Jenkins Security Advisories

Jenkins Security Advisory 2022-09-21

Github Security Advisories

[GHSA-v57h-6hmh-g2p4] Weight not properly refunded after EVM execution [GHSA-gmhj-xjfh-cf6m] Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library [GHSA-8gq9-2x98-w8hf] protobuf-cpp and protobuf-python have potential Denial of Service issue [GHSA-4456-w38r-m53x] Besu VM vulnerable to gas allocation error in CALL operations [GHSA-g7j7-h4q8-8w2f] Rancher API and cluster.management.cattle.io object vulnerable to plaintext storage and exposure of credentials [GHSA-w9mf-83w3-fv49] Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles [GHSA-wf7g-7h6h-678v] Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console [GHSA-28q9-9c3g-v3f9] lakeFS vulnerable to authenticated users deleting files they are not authorized to delete [GHSA-6h2x-4gjf-jc5w] autogluon.multimodal vulnerable to unsafe YAML deserialization [GHSA-9jjv-524m-jm98] @netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation [GHSA-5p8v-58qm-c7fp] python-jwt vulnerable to token forgery with new claims [GHSA-r657-33vp-gp22] parse-server auth adapter app ID validation can be circumvented [GHSA-vv7x-7w4m-q72f] fhir-works-on-aws-authz-smart handles permissions improperly [GHSA-6w4q-23cf-j9jp] parse-server's session object properties can be updated by foreign user if object ID is known [GHSA-4qw4-jpp4-8gvp] Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service [GHSA-88cv-mj24-8w3q] arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm. [GHSA-gwp4-mcv4-w95j] jwcrypto token substitution can lead to authentication bypass [GHSA-28r9-pq4c-wp3c] personnummer/rust vulnerable to Improper Input Validation [GHSA-cf7g-cm7q-rq7f] SFTPGo WebClient vulnerable to Cross-site Scripting [GHSA-g4h6-qp44-wqvx] XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups [GHSA-gg53-wf5x-r3r6] XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference [GHSA-cmr8-5w4c-44v8] Fastly Compute@Edge JS Runtime has fixed random number seed during compilation

CISA Known Exploted Vulnerabilities

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-35405 Sophos Firewall Code Injection Vulnerability CVE-2022-3236

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.