Month: marzo 2022

Oracle WebLogic Server vulnerability CVE-2022-21371 Security Advisory Security Advisory Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web ... More info: https://support.f5.com/csp/article/K21406935?utm_source=f5support&utm_medium=RSS

PHP vulnerability CVE-2021-21708 Security Advisory Security Advisory Description In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with ... More info: https://support.f5.com/csp/article/K14492558?utm_source=f5support&utm_medium=RSS

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11176&actp=RSS

OpenSSL vulnerability CVE-2022-0778 Security Advisory Security Advisory Description The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop ... More info: https://support.f5.com/csp/article/K31323265?utm_source=f5support&utm_medium=RSS

Since the Colonial Pipeline attack last year, we have known that additional cyberattacks targeting the energy sector were likely. Against the backdrop of today’s geopolitical crisis, however, VMware believes that all critical infrastructure providers should operate under the assumption that targeted attacks using destructive malware are imminent. Securing internet-facing systems and testing incident response readiness … ContinuedThe post Defending Against Destructive Attacks More info: https://blogs.vmware.com/security/2022/03/defending-against-destructive-attacks-targeting-energy-and-utilities.html?utm_source=rss&utm_medium=rss&utm_campaign=defending-against-destructive-attacks-targeting-energy-and-utilities

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11139&actp=RSS

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11130&actp=RSS

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11162&actp=RSS

Project: Drupal coreDate: 2022-March-21Security risk: Moderately critical 11∕25 AC:Complex/A:None/CI:None/II:Some/E:Theoretical/TD:DefaultVulnerability: Third-party librariesCVE IDs: CVE-2022-24775Description: Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released a security update which may affect some Drupal sites.We are issuing this security advisory outside our regular Drupal security release window schedule More info: https://www.drupal.org/sa-core-2022-006

Kibana vulnerability CVE-2019-7609 Security Advisory Security Advisory Description Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An ... More info: https://support.f5.com/csp/article/K54184111?utm_source=f5support&utm_medium=RSS