Alerts

Mozilla has released an updated Firefox version 121, and Firefox ESR version 115.6 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1. […]

Microsoft has released an updated Microsoft Edge version 120.0.2210.77 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1. Microsoft Edge Code

Ivanti has released security updates to fix multiple vulnerabilities across Ivanti Connect Secure and Ivanti Policy Secure. The addressed vulnerabilities could allow the attacker to gain access, gain elevated privileges, or perform a denial of service attack on the affected systems. Sample of the addressed vulnerabilities: 1. Ivanti Connect Secure Denial of Service Vulnerability (CVE-2023-39340):

Google has released an updated Chrome version 120.0.6099.109/110 for Windows, and 120.0.6099.109 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed one zero-day vulnerability. Microsoft has fixed (34) vulnerabilities, with (4) classified as critical as they could allow the attacker to perform remote code execution and spoofing attacks on theaffected products. December’s Patch Tuesday was released to fix security

Google has released an updated Chrome version 120.0.6099.62/.63 for Windows, and 120.0.6099.62 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the

SolarWinds has released a security update to fix a vulnerability in SolarWinds platform. The addressed vulnerability could allow the attackers with low-privileged accounts to launch SQL injection attacks and then they could view, add, modify, or delete the data on the vulnerable system. SQL Injection Remote Code Execution Vulnerability (CVE-2023-40056): CVSS: 8 Attack Vector: Adjacent

IBM has released security updates to fix multiple vulnerabilities in IBM Db2 versions 10.5.0.x, 11.1.4.x, and 11.5.x. The addressed vulnerabilities could allow the remote attacker to cause a denial of service attack or gain elevated privileges by executing routines that they shouldn’t have access to on the vulnerable system. Sample of the addressed vulnerabilities: 1.

Apple has released security updates to address multiple vulnerabilities across macOS Monterey, Ventura, Sonoma and Safari. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, execute arbitrary code, and gain access to the affected systems by persuading the victim to visit a specially crafted website. The addressed vulnerabilities: 1. Apple Safari, and

Microsoft has released an updated Microsoft Edge Stable version (119.0.2151.97) and an Extended Stable version (118.0.2088.122) to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Microsoft Edge

ache has released security updates to address several vulnerabilities in Apache Tomcat versions prior to 9.0.83. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, conduct denial of service attacks, bypass web application firewall protection, conduct XSS attacks, and gain access to the affected system by sendinga specially crafted HTTP(S) trailer header.

Google has released an update Chrome version 119.0.6045.199/.200 for Windows,and 119.0.6045.199 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Code Execution Vulnerability (CVE-2023-6351):