National Cyber Awareness System

Drupal Releases Security Advisories to Address Multiple Vulnerabilities Cisco Releases Security Advisory for Unified CM and Unified CM SME CISA Releases One Industrial Control Systems Advisory Mozilla Releases Security Updates for Firefox CISA Adds One Known Exploited Vulnerability to Catalog CISA Updates Best Practices for Mapping to MITRE ATT&CK® CISA Releases Four Industrial Control Systems Advisories

Oracle Security Alerts

Oracle Critical Patch Update Advisory - January 2023

Mozilla Security Advisories

Security Vulnerabilities fixed in Thunderbird 102.7 mfsa2023-03 Security Vulnerabilities fixed in Firefox ESR 102.7 mfsa2023-02 Security Vulnerabilities fixed in Firefox 109 mfsa2023-01

Ubuntu Security Notices

USN-5815-1: Linux kernel (BlueField) vulnerabilities USN-5814-1: Linux kernel vulnerabilities USN-5813-1: Linux kernel vulnerabilities USN-5810-2: Git regression USN-5812-1: urllib3 vulnerability USN-5811-2: Sudo vulnerability USN-5811-1: Sudo vulnerabilities USN-5810-1: Git vulnerabilities USN-5809-1: Linux kernel (OEM) vulnerabilities USN-5808-1: Linux kernel (IBM) vulnerabilities USN-5807-1: libXpm vulnerabilities USN-5806-1: Ruby vulnerability USN-5795-2: Net-SNMP vulnerabilities USN-5805-1: Apache Maven vulnerability

Red Hat Security Advisory

(RHSA-2023:0069) Low: OpenShift Container Platform 4.11.24 bug and security update (RHSA-2023:0264) Moderate: Red Hat OpenShift (Logging Subsystem) security update (RHSA-2023:0261) Critical: Satellite 6.12.1 Async Security Update (RHSA-2023:0201) Moderate: java-11-openjdk security update (RHSA-2023:0200) Moderate: java-11-openjdk security and bug fix update (RHSA-2023:0199) Moderate: java-11-openjdk security update (RHSA-2023:0198) Moderate: java-11-openjdk security update (RHSA-2023:0191) Moderate: java-17-openjdk security and bug fix update (RHSA-2023:0190) Moderate: java-17-openjdk security update (RHSA-2023:0192) Moderate: java-17-openjdk security and bug fix update (RHSA-2023:0202) Moderate: java-11-openjdk security and bug fix update (RHSA-2023:0193) Moderate: java-17-openjdk security update (RHSA-2022:7399) Moderate: OpenShift Container Platform 4.12.0 bug fix and security update (RHSA-2022:7401) Moderate: OpenShift Container Platform 4.12 security update (RHSA-2022:7398) Moderate: OpenShift Container Platform 4.12.0 packages and security update (RHSA-2023:0189) Moderate: Red Hat AMQ Streams 2.3.0 release and security update (RHSA-2023:0187) Moderate: kernel security update (RHSA-2023:0173) Moderate: libxml2 security update (RHSA-2023:0172) Important: dpdk security update (RHSA-2023:0171) Important: dpdk security update (RHSA-2023:0170) Important: dpdk security update (RHSA-2023:0169) Important: dpdk security update (RHSA-2023:0167) Important: dpdk security update (RHSA-2023:0168) Important: dpdk security update (RHSA-2023:0166) Important: dpdk security update

Cisco Security Advisory

Cisco Unified Communications Manager SQL Injection Vulnerability Identifying and Mitigating Security Exposures When Using No Payload Encryption Images with Existing Cryptographic Configuration Cisco Email Security Appliance URL Filtering Bypass Vulnerability

Microsoft Security

Microsoft January 2023 Security Update Guide Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CISA Known Exploted Vulnerabilities

CWP Control Web Panel OS Command Injection Vulnerability CVE-2022-44877

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.