Microsoft IOC Detection Tool for Exchange Server Vulnerabilities

Microsoft has released an updated script that scans Exchange log files for indicators of compromise IOCs associated with the vulnerabilities disclosed on March 2, 2021. CISA is aware of widespread domestic and international exploitation of these vulnerabilities and strongly recommends organizatio...

Vulnerability fixed in Snort

A vulnerability has been fixed in Snort. The vulnerability allows an unauthenticated malicious party to cause a denial-of-service denial-of-service. The malicious party should be able to send rogue send Ethernet frames to a device that then then handles them. Cisco indicates that the...

MGASA-2021-0097 Updated firefox packages fix security vulnerabilities

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs CVE-2021-23968. As specified in the W3C...

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in multiple Cisco products. An attacker could exploit this vulnerability to cause a denial-of-service condition. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages users and...

Vulnerabilities fixed in Clustered Data ONTAP

NetApp has fixed two vulnerabilities in Clustered Data ONTAP. The vulnerabilities could be exploited by a malicious person to gather information about the vulnerable system or cause a denial-of-service. To cause a Denial-of-Service, the malicious party must be authenticated on the vulnerable...

CVE-2021-21166

creationtimestamp| type| source ---|---|--- 2021-03-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=557 2021-03-03 05:01:48+00:00| exploited| https://t.me/cKure/4156 2021-03-03 08:49:41+00:00| exploited| https://t.me/truesecator/1479 2021-03-03 15:30:55+00:00| seen|...

Photon OS 1.0: Openldap PHSA-2021-1.0-0366

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0366. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Openssl PHSA-2021-1.0-0366

An update of the openssl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0366. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Glib PHSA-2021-2.0-0322

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0322. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147002;...

Security Updates for Microsoft Exchange Server (March 2021)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker could exploit this to execute unauthorized arbitrary code. CVE-2021-26412, CVE-2021-26854,...

RHEL 8 : kpatch-patch (RHSA-2021:0689)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0689 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Photon OS 2.0: Linux PHSA-2021-2.0-0322

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0322. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147000...

Photon OS 1.0: Openvswitch PHSA-2021-1.0-0366

An update of the openvswitch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0366. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Glib PHSA-2021-1.0-0365

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0365. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147008;...

Photon OS 3.0: Glib PHSA-2021-3.0-0201

An update of the glib package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0201. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146998;...

Photon OS 1.0: Linux PHSA-2021-1.0-0366

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0366. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147007...

Photon OS 3.0: Linux PHSA-2021-3.0-0201

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0201. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146997;...

On-Premises Exchange Server Vulnerabilities Resource Center – updated March 25, 2021

MSRC / By MSRC Team / March 2, 2021 On March 2nd, we released several security updates for Microsoft Exchange Server to address vulnerabilities that are being used in ongoing attacks. Due to the critical nature of these vulnerabilities, we recommend that customers protect their organizations by...

On-Premises Exchange Server Vulnerabilities Resource Center - updated March 25, 2021

On March 2nd, we released several security updates for Microsoft Exchange Server to address vulnerabilities that are being used in ongoing attacks. Due to the critical nature of these vulnerabilities, we recommend that customers protect their organizations by applying the patches immediately to...

On-Premises Exchange Server Vulnerabilities Resource Center - updated March 25, 2021

On March 2nd, we released several security updates for Microsoft Exchange Server to address vulnerabilities that are being used in ongoing attacks. Due to the critical nature of these vulnerabilities, we recommend that customers protect their organizations by applying the patches immediately to...