Security Advisory

Overview An update has been made available to fix vulnerabilities in WordPress Post SMTP Mailer (an email sending and management plugin). Users of affected versions are advised to update to the latest version.   Affected Products All versions of Post SMTP Mailer up to 2.8.7   Resolved Vulnerabilities Authorization bypass

Overview   Apple (https://apple.com) has released a security update that addresses a product vulnerability. Users of affected products are advised to update to the latest version.   Affected Products   MacOS Ventura IPad Pro 12.9-inch 3rd generation and newer IPad Pro 11-inch 1st generation and later IPad Air 3rd generation

Overview   The latest security updates have been released for MLflow and ClearML Server open source platforms for machine learning and artificial intelligence development. Users of affected versions are advised to update to the latest version.   Affected Products   Prior to MLflow 2.9.2 and ClearML Server 1.13.0   Resolved

Overview An update has been made available to fix an access control lapse vulnerability in Aria Automation by VMware. Users of affected versions are advised to update to the latest version.   Affected Products VMware Aria Automation versions 8.16, 8.14.x, 8.13.x, 8.12.x, 8.11.xVMware Cloud Foundation (Aria Automation) 5.x, 4.x versions

Overview An update has been made available to fix vulnerabilities in Apache Tomcat(https://tomcat.apache.org/). Users of affected versions are advised to update to the latest version.   Affected Products Apache Tomcat 9.versions from 0.0-M11 through 9.0.43 8.versions from 5.7 through 8.5.63   Resolved Vulnerabilities Vulnerability in Apache Tomcat to generate error

Overview   Microsoft(https://www.microsoft.com) has released a security update that fixes vulnerabilities in products. Users of affected products are advised to update to the latest version.   Affected Products   Microsoft Edge (Chromium-based) 120.0.6099.224 and earlier   Resolved Vulnerabilities   Out of bounds memory access vulnerability in the V8 engine of

Overview An update has been made available to fix vulnerabilities in the pyload package, the python open source download manager package. Users of affected versions are advised to update to the latest version.   Affected Products All versions of the python pyload package 0.5.0b3.dev77 and earlier   Resolved Vulnerabilities CSRF

Overview   SonicWall(https://www.sonicwall.com) has released a security update that fixes vulnerabilities in its products. Users of affected products are advised to update to the latest version.   Affected Products   Capture Client 3.7.10 and earlier versions NetExtender Windows Client 10.2.337 (Windows 32 and 64 bit) and earlier versions   Resolved

Overview An update has been made available to address a remote code execution vulnerability in Atlassian Confluence Data Center and Server. Users of affected versions are advised to update to the latest version.   Affected Products Confluence Data Center and Server versions 8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, 8.5.0-8.5.3  Resolved Vulnerabilities

Overview SonicWall(https://www.sonicwall.com) has released a security update that fixes vulnerabilities in its products. Users of affected products are advised to update to the latest version.   Affected Products The vulnerability only affects “Web Management” in SonicOS and does not affect the SonicOS SSLVPN interface.  CVE-2022-22274 Product Name Affected Platforms Affected