Vulnerability Summary for the Week of January 29, 2024

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 60indexpage_project -- 60indexpage A vulnerability classified as critical has been found in 60IndexPage up to…

Comments Off on Vulnerability Summary for the Week of January 29, 2024

Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components

Moby and the Open Container Initiative (OCI) have released updates for multiple vulnerabilities (CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626) affecting Docker-related components, including Moby BuildKit and OCI runc. A cyber threat actor…

Comments Off on Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components

Vulnerability Summary for the Week of January 22, 2024

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 60indexpage -- 60indexpage   A vulnerability classified as critical has been found in 60IndexPage up to…

Comments Off on Vulnerability Summary for the Week of January 22, 2024

Guidance: Assembling a Group of Products for SBOM

Today, CISA published Guidance on Assembling a Group of Products created by the Software Bill of Materials (SBOM) Tooling & Implementation Working Group, one of the five SBOM community-driven workstreams facilitated by…

Comments Off on Guidance: Assembling a Group of Products for SBOM

Vulnerability Summary for the Week of January 15, 2024

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info argoproj -- argo-cd Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The Argo…

Comments Off on Vulnerability Summary for the Week of January 15, 2024

CISA Issues Emergency Directive on Ivanti Vulnerabilities

CISA has issued Emergency Directive (ED) 24-01 Mitigate Ivanti Connect Secure and Ivanti Policy Secure Vulnerabilities in response to active vulnerabilities in the following Ivanti products: Ivanti Connect Secure and…

Comments Off on CISA Issues Emergency Directive on Ivanti Vulnerabilities