National Cyber Awareness System

CISA Issues Emergency Directive on Ivanti Vulnerabilities Incident Response Guide for the WWS Sector Drupal Releases Security Advisory for Drupal Core CISA Releases One Industrial Control Systems Advisory Oracle Releases Critical Patch Update Advisory for January 2024 Atlassian Releases Security Updates for Multiple Products CISA Adds One Known Exploited Vulnerability to Catalog Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway CISA Adds Three Known Exploited Vulnerabilities to Catalog VMware Releases Security Advisory for Aria Operations CISA Releases Two Industrial Control Systems Advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA and FBI Release Known IOCs Associated with Androxgh0st Malware

Oracle Security Alerts

Oracle Critical Patch Update Advisory - January 2024

Ubuntu Security Notices

Xerces-C++ vulnerabilities: USN-6590-1 FileZilla vulnerability: USN-6589-1 PAM vulnerability: USN-6588-1 PostgreSQL vulnerabilities: USN-6538-2 ZooKeeper vulnerabilities: USN-6559-1 X.Org X Server vulnerabilities: USN-6587-1 FreeImage vulnerabilities: USN-6586-1 Xerces-C++ vulnerability: USN-6579-2 libssh2 vulnerability: USN-6585-1 Libspf2 vulnerabilities: USN-6584-1 MySQL vulnerabilities: USN-6583-1 WebKitGTK vulnerability: USN-6582-1 GNU binutils vulnerabilities: USN-6581-1 w3m vulnerability: USN-6580-1

Red Hat Security Advisory

Important: RHACS 3.74 enhancement and security update: RHSA-2024:0304 Important: java-11-openjdk security update: RHSA-2024:0266 / RHSA-2024:0237 / RHSA-2024:0235 / RHSA-2024:0233 / RHSA-2024:0232 / RHSA-2024:0234 Moderate: python-urllib3 security update: RHSA-2024:0300 Moderate: python-requests security update: RHSA-2024:0299 Critical: Red Hat Advanced Cluster Management 2.9.2 security and bug fix container updates: RHSA-2024:0298 Important: java-21-openjdk security update: RHSA-2024:0248 / RHSA-2024:0249 Important: java-17-openjdk security and bug fix update: RHSA-2024:0242 / RHSA-2024:0241 Moderate: OpenShift Container Platform 4.12.47 security update: RHSA-2024:0200 Important: java-1.8.0-openjdk security update: RHSA-2024:0228 Important: OpenShift Container Platform 4.12.47 security update: RHSA-2024:0198 Moderate: OpenShift Container Platform 4.13.29 packages and security update: RHSA-2024:0195 Important: gstreamer-plugins-bad-free security update: RHSA-2024:0279 Moderate: OpenShift Container Platform 4.14.9 packages and security update: RHSA-2024:0207 Important: java-1.8.0-openjdk security and bug fix update: RHSA-2024:0226 / RHSA-2024:0224 / RHSA-2024:0223 / RHSA-2024:0225 Important: OpenJDK 21.0.2 security update: RHSA-2024:0250 Important: OpenJDK 17.0.10 security update: RHSA-2024:0240 / RHSA-2024:0246 Important: OpenJDK 11.0.22 security update: RHSA-2024:0231 / RHSA-2024:0239 Important: OpenJDK 8u402 security update: RHSA-2024:0222 Moderate: Red Hat AMQ Broker 7.11.5 release and security update: RHSA-2024:0278 Moderate: Logging Subsystem 5.8.2 - Red Hat OpenShift security update: RHSA-2024:0271 Moderate: OpenShift Container Platform 4.14.9 bug fix and security update: RHSA-2024:0204 Low: Logging Subsystem 5.7.10 - Red Hat OpenShift security update: RHSA-2024:0268 Important: OpenShift Container Platform 4.13.29 bug fix and security update: RHSA-2024:0193 Important: OpenShift Virtualization 4.12.9 Images security and bug fix update: RHSA-2024:0273 Important: kernel security update: RHSA-2024:0262 / RHSA-2024:0261 Moderate: Red Hat OpenStack Platform 17.1 (python-eventlet) security update: RHSA-2024:0188 Moderate: Red Hat OpenStack Platform 17.1 (python-urllib3) security update: RHSA-2024:0187 Moderate: python3 security update: RHSA-2024:0256 Important: .NET 6.0 security, bug fix, and enhancement update: RHSA-2024:0255 Moderate: rsync security update: RHSA-2024:0254 Moderate: sqlite security update: RHSA-2024:0253 Moderate: krb5 security update: RHSA-2024:0252

Microsoft Security

Microsoft January 2024 Security Update Guide Chromium: CVE-2024-0519 Out of bounds memory access in V8 Chromium: CVE-2024-0518 Type Confusion in V8 Chromium: CVE-2024-0517 Out of bounds write in V8 CVE-2023-51780

Github Security Advisories

[GHSA-57wx-m636-g3g8] Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry [GHSA-wg2x-rv86-mmpx] SPV Merkle proof malleability allows the maintainer to prove invalid transactions [GHSA-c24v-8rfc-w8vw] Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem [GHSA-92mw-q256-5vwg] github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability [GHSA-58j9-j2fj-v8f4] SurrealDB vulnerable to Uncontrolled CPU Consumption via WebSocket Interface [GHSA-44cc-43rp-5947] JupyterLab vulnerable to potential authentication and CSRF tokens leak [GHSA-4m77-cmpx-vjc4] JupyterLab vulnerable to SXSS in Markdown Preview [GHSA-2q8v-3gqq-4f8p] concat built-in can corrupt memory in vyper [GHSA-qr8r-m495-7hc4] Validation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbft [GHSA-pgpj-v85q-h5fm] Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation [GHSA-rh63-9qcf-83gf] Marvin Attack of RSA and RSAOAEP decryption in jsrsasign [GHSA-4qhp-652w-c22x] Unsecured endpoints in the jupyter-lsp server extension [GHSA-6r8p-hpg7-825g] Uncontrolled Recursion in SurrealQL Parsing [GHSA-m24x-r6q3-2vp9] Uncaught Exception processing HTTP Headers in SurrealDB [GHSA-jm4v-58r5-66hj] Uncaught Exception in surrealdb [GHSA-g8vp-2v5p-9qfh] Cross-site scripting (XSS) in Action messages on Avo [GHSA-f6jh-hvg2-9525] crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber) [GHSA-3867-jc5c-66qf] Broken Access Control order API in Shopware [GHSA-qmp9-2xwj-m6m9] Blind SQL injection in shopware [GHSA-r78f-4q2q-hvv4] CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential [GHSA-6698-mhxx-r84g] Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders [GHSA-2q6j-gqc4-4gw3] Breaking unlinkability in Identity Mixer using malicious keys [GHSA-xgfm-fjx6-62mj] readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects [GHSA-62jr-84gf-wmg4] Default swagger-ui configuration exposes all files in the module [GHSA-ghjv-mh6x-7q6h] avo vulnerable to stored cross-site scripting (XSS) in key_value field

Drupal Security Advisories

Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001

CISA Known Exploted Vulnerabilities

Laravel Deserialization of Untrusted Data Vulnerability CVE-2018-15133 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability CVE-2024-0519 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CVE-2023-6548 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability CVE-2023-35082

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.