Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. CISA encourages user...

Security Updates for Microsoft Office (January 2021) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities in Word and Excel. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

CVE-2021-1168

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws

For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability. The latest security patches cover Microsoft Windows, Edge browser, ChakraCore, Office and...

Microsoft Patch Tuesday, January 2021 Edition

Microsoft today released updates to plug more than 80 security holes in its Windows operating systems and other software, including one that is actively being exploited and another which was disclosed prior to today. Ten of the flaws earned Microsofts most-dire "critical" rating, meaning they cou...

Photon OS 2.0: Apache PHSA-2021-2.0-0308

An update of the apache package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14489...

Photon OS 2.0: Openldap PHSA-2021-2.0-0308

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Consul PHSA-2021-3.0-0181

An update of the consul package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0181. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144900;...

Photon OS 2.0: Glib PHSA-2021-2.0-0308

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144893;...

Vulnerabilities fixed in Adobe products

Adobe has fixed vulnerabilities in several products from Adobe. The vulnerabilities allow a locally authenticated malicious party to execute arbitrary code under permissions of the application or to obtain elevated privileges. Adobe has released updates to fix the vulnerabilities. More informatio...

Vulnerabilities fixed in Joomla!

Vulnerabilities have been fixed in Joomla! The vulnerabilities allow a remote malicious party to launch a Cross-site scripting attack and to obtain system data. Updates have been released to fix the vulnerabilities. More information can be found on the pages below: CVE-2021-23123:...

Photon OS 1.0: Glibc PHSA-2021-1.0-0353

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0353. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144896...

Roundcube Webmail < 1.2.13, 1.3.x < 1.3.16, 1.4.x < 1.4.10 XSS Vulnerability

Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 33 : sympa (2021-11cb6626e2)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-11cb6626e2 advisory. - Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as...

Photon OS 1.0: Glib PHSA-2021-1.0-0351

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0351. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144901;...

SUSE-SU-2021:0096-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0444: Fixed a bad kfree due to a logic error in auditdatatoentry bnc1180027. - CVE-2020-0465: Fixed multiple missing bounds checks in...

January 12, 2021—KB4598288 (Monthly Rollup)

None None...

January 12, 2021—KB4598275 (Security-only update)

None None...

SAP Releases January 2021 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the SAP Security Notes for January 2021 and apply the necessa...

APSB21-04 Security updates available for Adobe Campaign Classic

Adobe has released security updates for Adobe Campaign Classic. These updates address a critical server-side request forgery SSRF vulnerability that could result in sensitive information disclosure...