UCSF IT Technology

Zoho has released a security notice to address vulnerabilities in multiple Zoho products.  An attacker could exploit this vulnerability to perform unauthenticated remote code execution.

Poly released a security update to address vulnerabilities in Poly EagleEye Director II. An attacker could exploit this vulnerability to execute arbitrary SQL code.

SonicWall has released a security notice to address vulnerabilities in multiple SonicWall products. An attacker could exploit this vulnerability to execute arbitrary SQL code.

FileWave has released a security update to address vulnerabilities in FileWave MDM. The authentication bypass vulnerability could allow a remote attacker to achieve “super_user” access and take full control of an internet-connected MDM instance. For a complete description of the vulnerabilities and affected systems WITH MANAGEMENT COMES RISK: FINDING FLAWS IN FILEWAVE MDM  IT Security Read more about IT Security service offerings.

Drupal has released security updates to address Critical and Moderately Critical vulnerabilities in Drupal core. A remote attacker could exploit these vulnerabilities to perform arbitrary PHP code execution For a complete description of the vulnerabilities and affected systems Drupal development team released security updates to fix multiple issues, including a critical code execution flaw. IT Security

The Apache Software Foundation has released a security update to address an Important vulnerability in Apache Spark. An attacker could exploit this vulnerability to perform arbitrary commands with the permissions of the Spark user.  For a complete description of the vulnerabilities and affected systems CVE-2022-33891: Apache Spark shell command injection vulnerability via Spark UI. IT Security

Atlassian released a security update to address a vulnerability in the Atlassian Questions for Confluence. For a complete description of the vulnerabilities and affected systems Questions For Confluence Security Advisory 2022-07-20. IT Security

Apple has released security updates to address vulnerabilities in multiple Apple products.