National Cyber Awareness System

CISA Adds One Known Exploited Vulnerability to Catalog JetBrains Releases Security Advisory for TeamCity On-Premises Fortinet Releases Security Advisories for FortiOS CISA Partners With OpenSSF Securing Software Repositories Working Group to Release Principles for Package Repository Security Cisco Releases Security Advisory for Vulnerabilities in Cisco Expressway Series CISA Releases Two Industrial Control Systems Advisories CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance VMware Releases Security Advisory for Aria Operations for Networks CISA Adds One Known Exploited Vulnerability to Catalog CISA Releases Two Industrial Control Systems Advisories

Ubuntu Security Notices

Linux kernel (Intel IoTG) vulnerabilities: USN-6628-1 Linux kernel (GCP) vulnerabilities: USN-6625-2 libde265 vulnerabilities: USN-6627-1 Linux kernel vulnerabilities: USN-6626-1 / USN-6625-1 / USN-6624-1 LSN-0100-1: Kernel Live Patch Security Notice Firefox regressions: USN-6610-2 Linux kernel (Oracle) vulnerabilities: USN-6609-3 Django vulnerability: USN-6623-1 libssh vulnerabilities: USN-6592-2 OpenSSL vulnerabilities: USN-6622-1

Red Hat Security Advisory

Important: OpenShift Container Platform 4.11.58 bug fix and security update: RHSA-2024:0682 Moderate: OpenShift Container Platform 4.12.49 packages and security update: RHSA-2024:0666 Moderate: linux-firmware security update: RHSA-2024:0753 Important: container-tools:rhel8 security update: RHSA-2024:0764 / RHSA-2024:0759 / RHSA-2024:0752 Important: OpenShift Container Platform 4.12.49 bug fix update and security update: RHSA-2024:0664 Moderate: OpenShift Container Platform 4.14.11 packages and security update: RHSA-2024:0645 Moderate: OpenShift Container Platform 4.13.32 packages and security update: RHSA-2024:0662 Important: container-tools:3.0 security update: RHSA-2024:0760 Important: container-tools:4.0 security update: RHSA-2024:0757 / RHSA-2024:0748 Important: container-tools:2.0 security update: RHSA-2024:0758 Important: runc security update: RHSA-2024:0756 / RHSA-2024:0717 Moderate: libmaxminddb security update: RHSA-2024:0751 / RHSA-2024:0750 Moderate: unbound security update: RHSA-2024:0749 Moderate: Logging Subsystem 5.8.3 - Red Hat OpenShift: RHSA-2024:0728 Important: new container image: rhceph-5.3: RHSA-2024:0746 Moderate: Red Hat Ceph Storage 5.3 Security update: RHSA-2024:0745 Moderate: Logging 5.6.16 - Red Hat OpenShift: RHSA-2024:0695 Moderate: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update: RHSA-2024:0733 Critical: Red Hat Advanced Cluster Management 2.7.11 security and bug fix container update: RHSA-2024:0729 Moderate: Logging Subsystem 5.7.11 - Red Hat OpenShift: RHSA-2024:0694 Critical: OpenShift Container Platform 4.14.11 bug fix and security update: RHSA-2024:0642 Critical: OpenShift Container Platform 4.14.11 security and extras update: RHSA-2024:0641 Important: kernel-rt security update: RHSA-2024:0725 Important: kernel security and bug fix update: RHSA-2024:0724 Important: OpenShift Container Platform 4.13.32 bug fix and security update: RHSA-2024:0660 Moderate: Migration Toolkit for Runtimes security, bug fix and enhancement update: RHSA-2024:0720 / RHSA-2024:0719 Important: gimp security update: RHSA-2024:0716 / RHSA-2024:0702 / RHSA-2024:0675 Moderate: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update: RHSA-2024:0714 / RHSA-2024:0711 / RHSA-2024:0712 / RHSA-2024:0710 Moderate: Red Hat AMQ Broker 7.11.6 release and security update: RHSA-2024:0705

Cisco Security Advisory

ClamAV OLE2 File Format Parsing Denial of Service Vulnerability Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities

Microsoft Security

Microsoft February 2024 Security Update Guide Chromium: CVE-2024-1284 Use after free in Mojo Chromium: CVE-2024-1283 Heap buffer overflow in Skia CVE-2024-21626

Github Security Advisories

[GHSA-c4cm-r9fh-jgj9] commonground-api-common unexploitable privilege escalation in JWT authentication middleware [GHSA-22r3-9w55-cj54] Pkg Local Privilege Escalation [GHSA-583g-g682-crxf] Micronaut management endpoints vulnerable to drive-by localhost attack [GHSA-59j8-776v-xxxg] NoneBot Potential Information Leak in User-Constructed Message Templates [GHSA-3qx3-6hxr-j2ch] eza Potential Heap Overflow Vulnerability for AArch64 [GHSA-833m-37f7-jq55] Rancher API Server Cross-site Scripting Vulnerability [GHSA-r8f4-hv23-6qp6] Norman API Cross-site Scripting Vulnerability [GHSA-xfj7-qf8w-2gcr] Rancher 'Audit Log' leaks sensitive information [GHSA-c85r-fwc7-45vc] Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' [GHSA-hvp4-vrv2-8wrq] Kinto Attachment's attachments can be replaced on read-only records [GHSA-8v28-3g86-chj5] PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges [GHSA-259p-rvjx-ffwg] Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges [GHSA-7wh2-wxc7-9ph5] WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges [GHSA-59qj-jcjv-662j] DIRAC's TokenManager does not check permissions on cached tokens [GHSA-7c6p-848j-wh5h] Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php [GHSA-3rfr-mpfj-2jwq] Pimcore Admin Classic Bundle permissions are not getting checked when working with tags [GHSA-3xf8-g8gr-g7rh] Graylog session fixation vulnerability through cookie injection [GHSA-p6gg-5hf4-4rgj] Graylog vulnerable to instantiation of arbitrary classes triggered by API request [GHSA-wh5w-82f3-wrxh] CKEditor cross-site scripting vulnerability in AJAX sample [GHSA-mw2c-vx6j-mg76] CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature [GHSA-fq6h-4g8v-qqvm] CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection [GHSA-r3jc-3qmm-w3pw] SQLAlchemyDA unauthenticated arbitrary SQL query execution [GHSA-52xq-j7v9-v4v2] Vyper array negative index vulnerability [GHSA-g3cm-qg2v-2hj5] pyLoad open redirect vulnerability due to improper validation of the is_safe_url function [GHSA-gfrh-gwqc-63cv] Sulu HTML Injection via Autocomplete Suggestion [GHSA-xc9x-jj77-9p9j] Nokogiri update packaged libxml2 to v2.12.5 to resolve CVE-2024-25062 [GHSA-7m8g-fprr-47fx] phpMyFAQ vulnerable to stored XSS on attachments filename [GHSA-9hhf-xmcw-r3xg] phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes [GHSA-6648-6g96-mg35] phpMyFAQ User Removal Page Allows Spoofing Of User Details [GHSA-9xfw-jjq2-7v8h] 1Panel set-cookie is missing the Secure keyword [GHSA-6845-xw22-ffxv] Vyper sha3 codegen bug [GHSA-qf9m-vfgh-m389] FastAPI Content-Type Header ReDoS [GHSA-93gm-qmq6-w238] Starlette Content-Type Header ReDoS

CISA Known Exploted Vulnerabilities

Google Chromium V8 Type Confusion Vulnerability CVE-2023-4762 Fortinet FortiOS Out-of-Bound Write Vulnerability CVE-2024-21762

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.