UCSF IT Technology

Mandiant reported a vulnerability in vm2 Project vm2 for Node[.]js. Exploitation of this vulnerability could allow for remote code execution. For a complete description of the vulnerabilities and affected systems go to CVE-2023-37466 Detail. IT Security  Read more about IT Security service offerings.

Ubuntu released security updates to address vulnerabilities in Ubuntu-Specific OverlayFS Module. An attacker could exploit these vulnerabilities to escalate privileges to ‘root’ on the affected machine.

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit this vulnerability to take control of an affected device. For a complete description of the vulnerabilities and affected systems go to Apple Security Updates. IT Security  Read more about IT Security service offerings.

Atlassian has published a security bulletin to address High Vulnerabilities in Multiple Atlassian products. The vulnerability can be exploited to perform remote code execution.  For a complete description of the vulnerabilities and affected systems go to Security Bulletin - July 18 2023. IT Security 

Google updated Chrome channels to 115.0.5790.98  for Linux and Mac and  115.0.5790.98/99 for Windows to address vulnerabilities in Chrome. For a complete description of the vulnerabilities and affected systems go to Chrome Stable Channel Update. IT Security  Read more about IT Security service offerings.

Openwall reported a vulnerability in OpenSSH's Forwarded SSH-agent. An attacker could exploit these vulnerabilities to take perform remote code execution. For a complete description of the vulnerabilities and affected systems go to CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent. IT Security 

AMI released a security advisory to address vulnerabilities affecting the AMI BMC. An attacker could exploit these vulnerabilities to takeover and physically damage an affected device. 

Oracle released their July Critical Patch Update to address vulnerabilities in Oracle products.  For a complete description of the vulnerabilities and affected systems go to Oracle Critical Patch Update Advisory - July 2022. IT Security  Read more about IT Security service offerings.

Citrix has released security updates to address Vulnerabilities in multiple Citrix products including a Critical Zero Day. The most sever of these vulnerabilities would allow an attacker to perform remote code execution.

Adobe has released security updates to address a Critical vulnerability affecting Adobe ColdFusion. An attacker could exploit these vulnerabilities to take control of an affected system.   For a complete description of the vulnerabilities and affected systems go to Security updates available for Adobe ColdFusion | APSB23-41. IT Security