Security Advisory

Overview An update has been made available to fix an access control lapse vulnerability in Aria Automation by VMware. Users of affected versions are advised to update to the latest version.   Affected Products VMware Aria Automation versions 8.16, 8.14.x, 8.13.x, 8.12.x, 8.11.xVMware Cloud Foundation (Aria Automation) 5.x, 4.x versions

Overview An update has been made available to fix vulnerabilities in Apache Tomcat(https://tomcat.apache.org/). Users of affected versions are advised to update to the latest version.   Affected Products Apache Tomcat 9.versions from 0.0-M11 through 9.0.43 8.versions from 5.7 through 8.5.63   Resolved Vulnerabilities Vulnerability in Apache Tomcat to generate error

Overview An update has been made available to fix vulnerabilities in the pyload package, the python open source download manager package. Users of affected versions are advised to update to the latest version.   Affected Products All versions of the python pyload package 0.5.0b3.dev77 and earlier   Resolved Vulnerabilities CSRF

Overview   Microsoft(https://www.microsoft.com) has released a security update that fixes vulnerabilities in products. Users of affected products are advised to update to the latest version.   Affected Products   Microsoft Edge (Chromium-based) 120.0.6099.224 and earlier   Resolved Vulnerabilities   Out of bounds memory access vulnerability in the V8 engine of

Overview SonicWall(https://www.sonicwall.com) has released a security update that fixes vulnerabilities in its products. Users of affected products are advised to update to the latest version.   Affected Products The vulnerability only affects “Web Management” in SonicOS and does not affect the SonicOS SSLVPN interface.  CVE-2022-22274 Product Name Affected Platforms Affected

Overview   SonicWall(https://www.sonicwall.com) has released a security update that fixes vulnerabilities in its products. Users of affected products are advised to update to the latest version.   Affected Products   Capture Client 3.7.10 and earlier versions NetExtender Windows Client 10.2.337 (Windows 32 and 64 bit) and earlier versions   Resolved

Overview An update has been made available to address a remote code execution vulnerability in Atlassian Confluence Data Center and Server. Users of affected versions are advised to update to the latest version.   Affected Products Confluence Data Center and Server versions 8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, 8.5.0-8.5.3  Resolved Vulnerabilities

Overview   Juniper has released a security update that fixes vulnerabilities in products supplied by Juniper. Users of affected systems are advised to update to the latest version.   Affected Products   Juniper Networks Junos OS SRX Series and EX Series: Junos OS All versions prior to  20.4R3-S9 Junos OS

Overview   Google has released an update to fix vulnerabilities in the Chrome(https://www.google.com/chrome) browser. Users of affected versions are advised to update to the latest version.   Affected Products   Version prior to Chrome 120.0.6099.225 (Windows) Version prior to Chrome 120.0.6099.234 (Mac)   Resolved Vulnerabilities   High-level out-of-bounds write vulnerability

Overview   Microsoft(https://www.microsoft.com) has released a security update that fixes vulnerabilities in products. Users of affected products are advised to update to the latest version.   Affected Products   Version prior to .NET 6.0 Version prior to .NET 7.0 Version prior to .NET 8.0 Version prior to Microsoft .NET Framework