Vulnerability Summary for the Week of August 2, 2021

Original release date: August 9, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info basic_shopping_cart_project -- basic_shopping_cart A SQL Injection vulnerability in Sourcecodester Basic…

Comments Off on Vulnerability Summary for the Week of August 2, 2021

Ivanti Releases Security Update for Pulse Connect Secure

Original release date: August 6, 2021Ivanti has released Pulse Connect Secure system software version 9.1R12 to address multiple vulnerabilities an attacker could exploit to take control of an affected system.…

Comments Off on Ivanti Releases Security Update for Pulse Connect Secure

CISA Releases Security Advisory for InterNiche Products

Original release date: August 5, 2021CISA has released an Industrial Control Systems (ICS) advisory detailing multiple vulnerabilities in InterNiche products. An attacker could exploit some of these vulnerabilities to take…

Comments Off on CISA Releases Security Advisory for InterNiche Products

CISA and NSA Release Kubernetes Hardening Guidance

Original release date: August 2, 2021 | Last revised: August 3, 2021The National Security Agency (NSA) and CISA have released Kubernetes Hardening Guidance, a cybersecurity technical report detailing the complexities…

Comments Off on CISA and NSA Release Kubernetes Hardening Guidance

CISA Releases Security Advisory for Swisslog Healthcare

Original release date: August 3, 2021CISA has released an Industrial Control Systems (ICS) advisory detailing multiple vulnerabilities in Swisslog Healthcare Translogic Pneumatic Tube Systems (PTS). An attacker could exploit some…

Comments Off on CISA Releases Security Advisory for Swisslog Healthcare

Vulnerability Summary for the Week of July 26, 2021

Original release date: August 2, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info naviwebs -- navigatecms In NavigateCMS version 2.9.4 and below, function…

Comments Off on Vulnerability Summary for the Week of July 26, 2021

CISA Announces Vulnerability Disclosure Policy (VDP) Platform

Original release date: July 30, 2021CISA has announced the establishment of its Vulnerability Disclosure Policy (VDP) Platform for the federal civilian enterprise, which will allow the Federal Civilian Executive Branch…

Comments Off on CISA Announces Vulnerability Disclosure Policy (VDP) Platform

Top Routinely Exploited Vulnerabilities

Original release date: July 28, 2021CISA, the Australian Cyber Security Centre (ACSC), the United Kingdom’s National Cyber Security Centre (NCSC), and the U.S. Federal Bureau of Investigation (FBI) have released…

Comments Off on Top Routinely Exploited Vulnerabilities

AA21-209A: Top Routinely Exploited Vulnerabilities

Original release date: July 28, 2021SummaryThis Joint Cybersecurity Advisory was coauthored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Cyber Security Centre (ACSC), the United Kingdom’s National…

Comments Off on AA21-209A: Top Routinely Exploited Vulnerabilities