National Cyber Awareness System

Cisco Releases Security Advisory for Cisco IP Phones FBI and CISA Release #StopRansomware: Royal Ransomware CISA Releases Five Industrial Control Systems Advisories CISA Releases Decider Tool to Help with MITRE ATT&CK Mapping CISA Adds Three Known Exploited Vulnerabilities to Catalog VMware Releases Security Updates for Carbon Black App Control Cisco Releases Security Advisories for Multiple Products CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks CISA Releases Three Industrial Control Systems Advisories CISA Adds One Known Exploited Vulnerability to Catalog US-CERT and ICS-CERT Transition to CISA CISA Urges Increased Vigilance One Year After Russia's Invasion of Ukraine CISA Releases Three Industrial Control Systems Advisories CISA Releases Decider Tool to Help with MITRE ATT&CK Mapping CISA Releases Three Industrial Control Systems Advisories CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks CISA Releases Two Industrial Control Systems Advisories CISA Releases Two Industrial Control Systems Advisories CISA Adds Three Known Exploited Vulnerabilities to Catalog Fortinet Releases Security Updates for Multiple Products Cisco Releases Security Advisories for Multiple Products CISA Releases Three Industrial Control Systems Advisories CISA Urges Increased Vigilance One Year After Russia's Invasion of Ukraine VMware Releases Security Updates for Carbon Black App Control US-CERT and ICS-CERT Transition to CISA CISA Adds One Known Exploited Vulnerability to Catalog

Mozilla Security Advisories

Security Vulnerabilities fixed in Firefox for Android 110.1.0 mfsa2023-08

Ubuntu Security Notices

Linux kernel vulnerabilities: USN-5919-1 / USN-5920-1 / USN-5917-1 / USN-5912-1 / USN-5911-1 Linux kernel (BlueField) vulnerabilities: USN-5918-1 Linux kernel vulnerability: USN-5916-1 Linux kernel (OEM) vulnerabilities: USN-5915-1 / USN-5914-1 / USN-5913-1 Rack vulnerabilities: USN-5910-1 / USN-5896-1 Linux kernel (Azure CVM) vulnerabilities: USN-5909-1 pip regression: USN-5821-4 / USN-5821-3 Sudo vulnerability: USN-5908-1 Git regression: USN-5871-2 c-ares vulnerability: USN-5907-1 PostgreSQL vulnerability: USN-5906-1 PHP vulnerabilities: USN-5905-1 / USN-5902-1 SoX vulnerabilities: USN-5904-1 SPIP vulnerabilities: USN-5482-2 Git vulnerabilities: USN-5810-4 Firefox regressions: USN-5880-2 tar vulnerability: USN-5900-1 lighttpd vulnerabilities: USN-5903-1 Expat vulnerabilities: USN-5638-4 GnuTLS vulnerability: USN-5901-1 AWStats vulnerability: USN-5899-1 OpenJDK vulnerabilities: USN-5898-1 / USN-5897-1 Python vulnerabilities: USN-5888-1 MPlayer vulnerabilities: USN-5895-1 curl vulnerabilities: USN-5894-1 / USN-5891-1 WebKitGTK vulnerabilities: USN-5893-1 NSS vulnerabilities: USN-5892-1 Open vSwitch vulnerabilities: USN-5890-1 ZoneMinder vulnerabilities: USN-5889-1 ClamAV vulnerabilities: USN-5887-1 Intel Microcode vulnerabilities: USN-5886-1 APR vulnerability: USN-5885-1

Red Hat Security Advisory

Important: Red Hat OpenStack Platform 17.0 (python-werkzeug) security update: RHSA-2023:1018 Important: Red Hat Single Sign-On 7.6.2 security update: RHSA-2023:1049 / RHSA-2023:1045 / RHSA-2023:1043 Important: Red Hat Single Sign-On 7.6.2 for OpenShift image security and enhancement update: RHSA-2023:1047 Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 9: RHSA-2023:1045 Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 7: RHSA-2023:1043 Important: OpenShift Container Platform 4.10.53 bug fix and security update: RHSA-2023:0899 Important: Red Hat OpenStack Platform 17.0 (etcd) security update: RHSA-2023:1014 Moderate: OpenShift Container Platform 4.12.5 security update: RHSA-2023:0890 Important: kpatch-patch security update: RHSA-2023:1008 / RHSA-2023:0945 Important: Red Hat Ceph Storage 5.3 Bug fix and security update: RHSA-2023:0980 Important: kernel-rt security and bug fix update: RHSA-2023:0979 Important: git security update: RHSA-2023:0978 Important: Red Hat OpenShift Data Science 1.22.1 security update: RHSA-2023:0977 Important: zlib security update: RHSA-2023:0976 / RHSA-2023:0943 Moderate: pcs security update: RHSA-2023:0974 Important: kernel security update: RHSA-2023:0944 Moderate: OpenShift Container Platform 4.11.29 security update: RHSA-2023:0895 Important: Migration Toolkit for Applications security and bug fix update: RHSA-2023:0934 Moderate: Service Binding Operator security update: RHSA-2023:0918

Cisco Security Advisory

Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability Cisco Webex App for Web Cross-Site Scripting Vulnerability Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability Cisco Unified Intelligence Center Vulnerabilities

CISA Known Exploted Vulnerabilities

ZK Framework AuUploader Unspecified Vulnerability CVE-2022-36537

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.