PT-2023-6135 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.2R3-S6 on QFX5k Junos OS versions 20.3 prior to 20.3R3-S5 on QFX5k Junos OS versions 20.4 prior to 20.4R3-S5 on QFX5k Junos OS versions 21.1 prior to 21.1R3-S4 on QFX5k Junos OS versions 21.2 prior to 21.2R3-S3 o...

Patch Tuesday, October 2023 Edition

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day bugs in iOS...

Citrix Hypervisor Multiple Security Updates

Description of Problem Several issues have been discovered that affect Citrix Hypervisor 8.2 CU1 LTSR and may allow malicious privileged code in a guest VM to: i Compromise an AMD-based host via a passed through PCI device: CVE-2023-34326 ii Compromise the host when a specific administrative acti...

Citrix Releases Security Updates for Multiple Products

Citrix has released security updates to address vulnerabilities affecting multiple products. A malicious cyber actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Citrix security bulletins and apply...

Internet Explorer help

None None...

October 10, 2023—KB5031408 (Monthly Rollup)

None None...

October 10, 2023—KB5031416 (Monthly Rollup)

None None...

October 10, 2023—KB5031411 (Security-only update)

None None...

October 10, 2023—KB5031441 (Security-only update)

None None...

Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (October 2023)

The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in QMS Automotive, Parasolid, WIBU, Teamcenter, JT2Go, Spectrum Power 7, SIMATIC, SIPLUS and RUGGEDCOM products. The vulnerabilities allow a malicious potentially able to carry out attacks that could result in the following categories of damage: Denial-of-Service...

Security Updates for Microsoft Exchange Server (October 2023)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the Oct, 2023 security bulletin. - Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-36778 Note that Nessus has not tested f...

About the security content of iOS 16.7.1 and iPadOS 16.7.1

About the security content of iOS 16.7.1 and iPadOS 16.7.1 This document describes the security content of iOS 16.7.1 and iPadOS 16.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Security Updates for Microsoft Skype for Business (October 2023)

The Microsoft Skype for Business installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2023-41763 - A remote code execution...

RHEL 9 : curl (RHSA-2023:5598)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5598 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

KB5031466: Servicing stack update for Windows 10: October 10, 2023

None None...

KB5031469: Servicing stack update for Windows Server 2012: October 10, 2023

KB5031469: Servicing stack update for Windows Server 2012: October 10, 2023 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date ...

KB5031658: Servicing stack update for Windows Server 2008 R2 SP1: October 10, 2023

KB5031658: Servicing stack update for Windows Server 2008 R2 SP1: October 10, 2023 REMINDER As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported version of Windows. Upgrade to...

KB5031659: Servicing stack update for Windows Server 2008 SP2: October 10, 2023

KB5031659: Servicing stack update for Windows Server 2008 SP2: October 10, 2023 REMINDER Windows Server 2008 SP2 Extended Security Updates third and final year of ESU ended on January 10, 2023. Many customers are taking advantage of Azures commitment to security and compliance and have moved to...

Fedora 38 : libspf2 (2023-7f01e967ad)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7f01e967ad advisory. Patch CVE-2023-42118, plus some other fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...