Security Updates & Patches Archives - Page 33 of 89

Critical WooCommerce SQL-injection vulnerability patched

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 17, 2021 / eCommerce, WooCommerce, WordPress

A researcher has discovered a Critical SQL-injection vulnerability in WooCommerce, an open-source e-commerce plugin for WordPress. WooCommerce promptly provided an emergency patch for the plugin to fix the issue.

Critical WooCommerce SQL-injection vulnerability patched Read More »

Citrix patches privileged escalation vulnerability in Virtual Apps and Desktops

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 17, 2021 / Citrix, CVE-2021-2292, VDA, Virtual Apps and Desktops, Windows

Citrix has patched a vulnerability (CVE-2021-22928) in Virtual Apps and Desktops that could result in privilege escalation on a Windows Virtual Delivery Agent (VDA).

Citrix patches privileged escalation vulnerability in Virtual Apps and Desktops Read More »

Juniper patches multiple vulnerabilities in Junos OS and other products (July 2021)

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 17, 2021 / CVE-2021-0276, Firewall, Juniper, Junos, QFX, Router, SRX

Juniper Networks has released security advisories to fix many vulnerabilities on Junos OS, EX4300, PTX Series, QFX Series, SRX Series network devices and multiple other products.

Juniper patches multiple vulnerabilities in Junos OS and other products (July 2021) Read More »

Google fixes Chrome zero-day (CVE-2021-30563) exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 16, 2021 / browser, Chrome, CVE-2021-30563

Google has released Chrome 91 security update 91.0.4472.164 for Windows, Mac and Linux with fixes for multiple High severity vulnerabilities, one of those a zero-day vulnerability CVE-2021-30563 exploited in the wild.

Google fixes Chrome zero-day (CVE-2021-30563) exploited in the wild Read More »

VMware patches 2 High risk ESXi vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 15, 2021 / CVE-2021-21994, CVE-2021-21995, ESXi, OpenSLP, SFCB, VMware

VMware has patched authentication and denial of service vulnerabilities (CVE-2021-21994, CVE-2021-21995) that impact VMware ESXi and Cloud Foundation products.

VMware patches 2 High risk ESXi vulnerabilities Read More »

SAP July 2021 Security Patch Day addresses Critical vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 15, 2021 / CVE-2021-27610, CVE-2021-33670, CVE-2021-33671, NetWeaver, Onapsis, SAP

Software giant SAP has released July 2021 Security Patch Day that includes 15 separate security advisories and patches.

SAP July 2021 Security Patch Day addresses Critical vulnerabilities Read More »

Microsoft July 2021 Security Updates includes fixes for 13 Critical RCEs, 3 zero-day vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / July 14, 2021 / CVE-2021-33740, CVE-2021-34439, CVE-2021-34448, CVE-2021-34450, CVE-2021-34458, CVE-2021-34464, CVE-2021-34473, CVE-2021-34474, CVE-2021-34494, CVE-2021-34497, CVE-2021-34503, CVE-2021-34522, CVE-2021-34527, Dynamics, Exchange, Malware Protection Engine, Windows, Windows 10, Windows Server

Microsoft has released the July 2021 Security updates that includes patches for 117 vulnerabilities, 13 of those rated Critical. The updates also include fixes for 3 zero-day bugs exploited in the wild.

Microsoft July 2021 Security Updates includes fixes for 13 Critical RCEs, 3 zero-day vulnerabilities Read More »

Adobe releases security updates for Adobe Acrobat and Reader (APSB21-51), other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 13, 2021 / Acrobat, Acrobat and Reader, Adobe, Bridge, CVE-2021-28634, CVE-2021-28635, CVE-2021-28636, CVE-2021-28637, CVE-2021-28638, CVE-2021-28639, CVE-2021-28640, CVE-2021-28641, CVE-2021-28642, CVE-2021-28643, CVE-2021-28644, CVE-2021-35980, CVE-2021-35981, CVE-2021-35983, Dimension, Illustrator, Reader

Adobe has released security updates to address multiple vulnerabilities in Adobe Acrobat and Reader, Adobe Dimension, Illustrator, Framemaker and Bridge products.

Adobe releases security updates for Adobe Acrobat and Reader (APSB21-51), other products Read More »

Mozilla releases Firefox 90 with new version of SmartBlock and 9 security fixes

Data Privacy, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 13, 2021 / browser, CVE-2021-29970, CVE-2021-29971, CVE-2021-29976, CVE-2021-29977, Firefox, Firefox 90, Privacy, SmartBlock

The Mozilla Foundation has released Firefox 90 that includes a new version of SmartBlock and security fixes for nine vulnerabilities, five rated High severity.

Mozilla releases Firefox 90 with new version of SmartBlock and 9 security fixes Read More »

Critical ForgeRock Access Management vulnerability (CVE-2021-35464) exploited

Identity & Access Management, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / July 12, 2021 / Access Management, ACSC, CVE-2021-35464, ForgeRock, Identity

A Critical ForgeRock Access Management (AM) vulnerability (CVE-2021-35464) has been exploited in the wild. The issue affects ForgeRock’s OpenAM, open-source AM solution.

Critical ForgeRock Access Management vulnerability (CVE-2021-35464) exploited Read More »