Security Advisory

Overview   An update has been made available to fix vulnerabilities in Mozilla. Users of affected versions are advised to update to the latest version.   Affected Products   CVE-2024-26282 firefox for iOS before 123   CVE-2024-26284 focus for iOS before 123   Resolved Vulnerabilities   Universal Cross-Site Scripting (UXSS)

Overview   An update has been made available to fix vulnerabilities in the GitLab CE/EE product. Users of affected versions are advised to update to the latest version.   Affected Products   CVE-2024-1451 GitLab CE/EE products version 16.9   CVE-2023-6477 GitLab EE versions 16.5 through before 16.7.6  GitLab EE 16.8

Overview   An update has been made available to fix vulnerabilities in the PostgreSQL JDBC driver, pgjdbc. Users of affected versions are advised to update to the latest version.   Affected Products   Prior to pGJDBC 42.2.28  versions pgjdbc Versions greater than 42.2.28, 42.2.28.jre7 but less than 42.3.9 pgjdbc Versions

Overview   An update has been made available to fix vulnerabilities in M-Files Server. Users of affected versions are advised to update to the latest version.   Affected Products   M-Files Server versions earlier than 24.2 (excluding 23.2 SR7 and 23.8 SR5)   Resolved Vulnerabilities   Denial of Service Vulnerability

Overview   Cisco(https://www.cisco.com) has released a security update that fixes vulnerabilities in products. Users of affected systems are advised to update to the latest version.   Affected Products   Cisco Unified Intelligence Center   Resolved Vulnerabilities   Vulnerability in Cisco Unified Intelligence Center due to lack of access control to

Overview   An update has been made available to fix vulnerabilities in the sanitize-html package. Users of affected versions are advised to update to the latest version.   Affected Products   Versions of the sanitize-html package prior to 2.12.1   Resolved Vulnerabilities   Vulnerability to information disclosure when the sanitize-html

Overview   An update has been made available to fix vulnerabilities in the IBM family of products. Users of affected versions are advised to update to the latest version.   Affected Products   CVE-2023-39410, CVE-2018-8032, CVE-2014-3596, CVE-2012-5784, CVE-2019-0227, CVE-2022-34169, CVE-2021-43138, CVE-2023-36478, CVE-2023-44487, CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564, CVE-2021-35559, CVE-2021-35556, CVE-2021-35565, CVE-2021-35588,

Overview   The Internet Systems Consortium (ISC) has released a security update that fixes vulnerabilities in products supplied by BIND DNS. Users of affected systems are advised to update to the latest version.   Affected Products   BIND 9 version 9.16.x BIND 9 9.18.x versions BIND 9 9.19.x Versions  

Overview   An update has been made available to fix vulnerabilities in PHP. Users of affected versions are advised to update to the latest version.   Affected Products   PHP versions earlier than 8.0.30, 8.1.22, and 8.2.9   Resolved Vulnerabilities   Stack buffer overflow vulnerability due to insufficient length checking

Overview   QNAP (https://www.qnap.com/) has made available an update that fixes vulnerabilities in the products it has been made. Users of affected versions are advised to update to the latest version.   Affected Products   QTS 5.x versions QTS 4.x versions QuTS hero h5.x versions QuTS hero h4.x versions QuTScloud