ControlST – Control Server has been updated to fix several VMware vulnerabilities.  Highest CVSSv3 score of 9.8
More info.

WindLDR and Operator Interfaces' Touchscreen Programming Software WindO/I-NV4 contain a Cleartext Storage of Sensitive Information vulnerability. A remote attacker who obtains a project file could obtain user authentication information for the PLC or Operator Interface.  CVSSv3 score of 5.9
More info. And here.

PLCs contain Cleartext Transmission of Sensitive Information and Generation of Predictable Identifiers vulnerabilities. Highest CVSSv3 score of 5.3
More info. And here.

Telenium Online Web Applicationcontains an Improper Input Validation vulnerability that could allow a remote attacker to inject arbitrary Perl code through a crafted HTTP request, leading to RCE. CVSSv4 score of 9.3.
More info.

There is a vulnerability in DNS which triggers a resolver to ignore valid responses, thus causing DoS. A remote attacker could forge a response targeting the source port of a vulnerable resolver. CVSSv3 score of 8.2
More info.

SICK MSC800 contains a vulnerability that allows a remote attacker to modify the IP address of the product through the SopasET interface, potentially leading to DoS. CVSSv3 score of 7.5
More info.

The grafana plugin SDK bundles build metadata into the binaries it compiles and includes the repository URI. If credentials are included in the repository URI the final binary will contain the full URI, including said credentials. CVSSv4 score of 9.1
More info.

SUSE has updated the kernel and microcode. More info.
OpenSUSE has updated the microcode. More info.
Oracle Linux has updated the kernel. More info.
Amazon Linux 2 has updated the kernel, systemd, and microcode. More info.
Amazon Linux 2023 has updated the kernel and microcode. More info.

Google has updated Chrome for Desktop to fix 9 security vulnerabilities.
More info.

VMware has updated vCenter Server to address heap-overflow and privilege escalation vulnerabilities.  Highest CVSSv3 score of 9.8
More info.

A Critical Patch Release for GitLab fixes an authentication bypass vulnerability. CVSSv3 score of 10.
More info.

Four issues in VNS3 allow improperly parsed input to achieve RCE. This requires control plane TCP port 8000 access to a VNS3 controller. Highest CVSSv3 score of 9.8
More info.

Confluence Data Server contains a DoS vulnerability. CVSSv3 score of 7.5
More info.

Dell PowerStore Family remediation is available for multiple security vulnerabilities in third-party software.  Dell rates this High.
More info.

Red Hat has updated the kernel and kernel-rt. More info.
Ubuntu has updated the kernel. More info.
Amazon Linux has updated the microcode. More info.

Apple has published updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS 2, Safari, and Xcode. 
More info.

D-Link has updated several wireless routers to fix security issues like hardcoded credentials, hidden telnet services, and improper authentication.  Highest CVSSv3 score of 9.8
More info.

Updates for Q-SMT and TCP2RS+ have been made available for 6 vulnerabiltiies, 3 rated Critical, 1 High, and 2 Medium.  Highest CVSSv3 score of 10.
More info.

Yokogawa has updated Dual-redundant Platform for Computer to fix a DoS vulnerability.  Highest CVSSv3 score of 7.5
More info.

NetApp has published a bulletin for ONTAP that identifies vulnerabilities in FreeBSD. Highest CVSSv3 score of 10.
No patch yet.
More info.

Hitachi has published updates for Command Suite, Automation Directory, Configuration Manager, and Ops Center.
More info.

SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Mageia has updated the microcode. More info.
Amazon Linux 2023 has updated the kernel and microcode. More info.

When curl is built to use the GnuTLS library and told to use OCSP stapling to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.
More info.

The Windows version of WebIQ is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system. CVSSv3 score of 8.6
No patch yet.
More info.

Traffix SDC uses CPAN.pm which contains a vulnerability that may allow a remote attacker to inject into the network path and perform a MITM attack, causing confidentiality or integrity issues. CVSSv3 score of 7.4
More info.

REF630, REG630, REM630 and RET630 equipment contains vulnerabilities that could result in a DoS.  Highest CVSSv4 score of 8.2
More info.

5015-U8IHFT contains a DoS vulnerability with a malformed CIP Message. CVSSv4 score of 8.7
More info.

FactoryTalk Batch View contains an authentication bypass vulnerability due to shared secrets.  CVSSv4 score of 9.2
More info.

FactoryTalk View Site Edition contains a RCE vulnerability. CVSSv4 score of 9.2
More info.

ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 are vulnerable to DoS. CVSSv4 score of 8.7
More info.

Docker Desktop has been updated to fix 2 security vulnerabilities that allow RCE. Highest CVSSv4 score of 9.0
More info.

Spring Framework has been updated to fix a Path Traversal vulnerability. CVSSv3 score of 7.5
More info. And here.

NetApp has published 12 bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 9.8
Five have patches.
More info.

Extreme Networks has published 3 months of vulnerability bulletins, 38 in total. CVSSv3 score of 8.1
More info.

regreSSHion Vulnerability in OpenSSH Server affects several Extreme Networks products. CVSSv3 score of 8.1
More info.

Apache Tomcat DoS in HTTP/2 Connector affects several Extreme Networks products. CVSSv3 score of 5.3
More info.

Amazon Corretto vulnerabilities have been addressed in several Extreme Networks products. CVSSv3 score of 7.4
More info.

A business logic error in some Zoom Workplace Apps may allow a remote attacker to disclose information. CVSSv3 score of 5.3
More info.

SUSE has updated the kernel. More info.
Oracle Linux has updated the kernel. More info.
Ubuntu has updated the kernel. More info.

Cisco has published 8 new bulletins, 6 rated High and 2 rated Medium.  Highest CVSSv3 score of 8.8
More info.

A vulnerability in the Mtrace2 feature of Cisco IOS XR Software could allow a remote attacker to exhaust the UDP packet memory of an affected device, resulting in a DoS.  CVSSv3 score of 8.6
More info.

A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow a remote attacker to cause a DoS on XML TCP listen port 38751. CVSSv3 score of 5.3
More info.

Palo Alto Networks Monthly Patches include 7 bulletins, 2 rated High and 5 rated Medium. Highest CVSSv4 score of 8.6
More info.

Prisma Access Browser has incorporated the latest upstream Chromium security fixes. Highest CVSSv3 score of 8.8
More info.

A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles. CVSSv4 score of 6.
More info.

SpiderControl SCADA Web Server contains an Unrestricted Upload of File with Dangerous Type vulnerability. CVSSv4 score of 8.7.
More info.

Microsoft has updated Edge with the latest chromium fixes and 1 Edge specific vulnerability.
Note: This is currently not reflected in the Edge Release Note page.
More info. And here.

HPE NonStop Vrtual Tape Repository (VTR) contains several vulnerabilities. Highest CVSSv3 score of 9.8
More info.

Zyxel has released hotfixes addressing command injection vulnerability in two NAS products that have reached EoS. A remote attacker could execute some OS commands by sending a crafted HTTP POST request. CVSSv3 score of 9.8
More info.

Tenable has updated Nessus to fix vulnerabilities in third-party software. Highest CVSSv3 score of 9.8
More info.

GitLab has been updated to fix 17 vulnerabilities, 1 rated Critical, 3 rated High, 11 rated Medium, and 2 rated Low. Highest CVSSv3 score of 8.5
More info.

Security update has been published for Dell Data Protection Central for third-party software vulnerabilities.. Dell rates this Critical.
More info.

Dell ThinOS remediation is available for multiple vulnerabilities in third-party software. Dell rates this Critical.
More info.

Dell Avamar remediation is available for Switch OS 10.5.x-Gen5A vulnerabilities. Dell rates this High.
More info.

Dell PowerScale InsightIQ remediation is available for multiple security vulnerabilities in third-party software. Dell rates this High.
More info.

SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Oracle Linux has updated the kernel. More info.
Ubuntu has updated the kernel. More info.
Mageia has updated the microcode. More info.

Microsoft Monthly Patches are out, with 79 vulnerabilities, 7 rated Critical and 4 are 0-days currently being exploited.  Highest CVSSv3 score of 9.8
More info. And here.

Microsoft recently updated the Edge page to show updates for the latest chromium vulnerabilities, although the dates were more than a week in the past.
More info.

Adobe Monthly Patches include updates for Media Encoder, Audition, After Effects, Premiere Pro, Illustrator, Reader, ColdFusion, and Photoshop.  Highest CVSSv3 score of 9.8
More info.

ColdFusion has been updated to fix a RCE vulnerability. CVSSv3 score of 9.8
More info.

F5 has published 10 new bulletins, 4 of which are exploitable remotely without authentication.  Of those 4, the highest CVSSv3 score is 6.9
More info.

Ivanti has released updates for Ivanti Endpoint Manager 2024 and 2022 which addresses medium and high vulnerabilities. Successful exploitation could lead to unauthorized access to the EPM core server. Highest CVSSv3 score of 10.
More info.

Viessmann Vitogate 300 contains several vulnerabilities, including Use of Hard-coded Credentials, Forced Browsing, Command Injection. Highest CVSSv3 score of 9.3
More info. And here.

Google has updated Chrome for Desktop to fix 5 security vulnerabilities.
More info.

SUSE has updated the kernel. More info.
Red Hat has updated the kernel. More info.

Siemens Monthly Patches are out with 36 bulletins, 17 new and 19 updated.  Of the new bulletins, 10 address vulnerabilities that are remotely exploitable without authentication with a highest CVSSv4 score of 10.
More info.

Industrial Edge Management contains an Authorization Bypass vulnerability that could allow a remote attacker to impersonate other devices onboarded to the system. CVSSv4 score of 10.
More info.

Schneider Electric Monthly Patches include 5 bulletins, 2 new and 3 updated.  Of the new bulletins, highest CVSSv3 score of 7.8
More info.

SAP has published their Monthly Patches, with 19 Security Notes, 16 new and 3 updated.  Of the new Notes, highest CVSSv3 score of 6.5
More info.

Echo Curve Viewer contains a vulnerability that allows a remote attacker to run malicious c# code included in curve files and execute commands in the users context. CVSSv3 score of 9.8
More info.

Multiple mGuard devices are vulnerable to a drain of open file descriptors. CVSSv3 score of 5.3
More info. And here.

Multiple mGuard devices are vulnerable to a remote code injection due to SSH. CVSSv3 score of 8.1
More info. And here.

HPE has identified DoS vulnerabilities in HP-UX System's NFSv4 and RPC. Highest CVSSv3 score of 9.3
More info. And here.

BD has published updates to fix third-party software in Kiestra TLA/WCA, Kiestra TLA Track, Kiestra ReadA, and Kiestra InoqulA.
More info.

LCOS contains a vulnerability that could allow a remote attacker to trigger a Heap Overflow in the web interface, resulting in a DoS.
More info. And here.

go-git vulnerabilities have been identified that could affect IBM Watson Assistant for IBM Cloud Pak for Data. Highest CVSSv3 score of 9.8
More info.

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation. Highest CVSSv3 score of 9.8
More info.

Amazon Linux 2 and Amazon Linux 2023 have updated the kernel and microcode. More info. And here.

QNAP has published 13 bulletins for their products, most requiring Physical access or Local privileges.
More info.

A heap buffer overflow vulnerability has been reported in curl, which affects certain versions of QTS and QuTS hero.
More info.

A XSS vulnerability has been reported to affect QuLog Center. The vulnerability could allow a remote attacker to inject malicious code. CVSSv3 score of 8.2
More info.

Festo products include Siemens Simatic S7-1500 CPUs, which has a memory bypass vulnerability. CVSSv3 score of 9.8
Note the vulnerability is from 2020.
More info.

ownCloud has published 5 new bulletins, the wors of which allows request forgery.  Highest CVSSv3 score of 8.8
More info.

Improper handling of CSRF protection in the diagnostics app in combination with the `SameSite`-Cookie setting being set to `None` allows cross site invocation of an admin API. CVSSv3 score of 3.1
More info.

Server-Side Request Forgery in federated sharing API may allow a remote attacker to identify internal servers or cause a DoS. CVSSv3 score of 5.3
More info.

QRadar Suite Software includes components with known vulnerabilities. Highest CVSSv3 score of 9.9
More info.

IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of requirejs. CVSSv3 score of 9.8
More info.

Apache Derby could allow a remote attacker to bypass security restrictions to view and corrupt sensitive data and run sensitive database functions and procedures. CVSSv3 score of 9.1
More info.

There are multiple vulnerabilities in Java, Node.js and IBM WebSphere Application Server Liberty used by IBM Cloud Transformation Advisor. Highest CVSSv3 score of 9.8
More info.

F5 has published 5 new bulletins that are exploitable by remote attackers. Highest CVSSv3 score of 8.8
More info.

BIG-IP, BIG-IQ, and Traffix SDC are vulnerable to a DoS due to libarchive. Highest CVSSv3 score of 5.9
More info.

BIG-IP Next SPK and CNF are vulnerable to OpenSSH and could allow RCE.  CVSSv3 score of 8.1
More info.

Traffix SDC contains a vulnerability in libjpeg-turbo that allows a remote attacker to cause a DoS or code execution. Highest CVSSv3 score of 8.8
More info. And here.

NetApp has published 10 new bulletins identifying vulnerabilties in third-party software included in their products.  Highest CVSSv3 score of 9.8
No patches yet.
More info.

Xerox has updated FreeFlow Print Server v2 / Window s10 to fix vulnerabilities in third-party software.
More info.

Zoom has published a bulletin for an Information Disclosure vulnerability in Workplace Apps. CVSSv3 score of 5.3
More info.

FreeBSD has been updated for . More info.
OpenSUSE has updated systemd. More info.
Alpine Linux has put out version 3.17.10 More info.

Juniper has published an "On Demand" bulletin for Secure Analytics identifying several vulnerabilities.  Highest CVSSv3 score of 9.8
More info.

Cisco has published 5 new bulletins, 1 rated Critical, 1 rated High, and 3 rated Medium.  Highest CVSSv3 score of 9.8
More info.

Multiple vulnerabilities in Cisco Smart Licensing Utility could allow a remote attacker to collect sensitive information or administer Cisco Smart Licensing Utility services on a system while the software is running. CVSSv3 score of 9.8
More info.

Veeam has published a bulletin for several products identifying vulnerabilities. Highest CVSSv3 score of 9.8
More info.

Baxter Connex Health Portal contains 2 vulnerabilities, including SQL Injection, and Improper Access Control. Highest CVSSv3 score of 10.
More info. And here.

Security vulnerabilities in the HP-UX Secure Shell daemon (sshd) could be exploited remotely to allow arbitrary command execution, authentication bypass, or unauthorized use. Highest CVSSv3 score of 9.8
More info.

EMC Metronode remediation is available for multiple security vulnerabilities in third-party software. Dell rates this Critical.
More info.

CloudBoost Virtual Appliance remediation is available for multiple security vulnerabilities in third-party software. Dell rates this Critical.
More info.

Cloud Tiering Appliance remediation is available for multiple security vulnerabilities in third-party software. Dell rates this High.
More info.

Google has published Monthly Patches for Android, with 12 vulnerabilities, all rated High, plus Arm, Imagination Technologies, Unisoc, and Qualcomm updates.  Highest CVSSv3 score of 8.8
More info.

Pixel Monthly Patches are out with 6 vulnerabilities, 4 rated Critical and 2 rated High, plus Android patches.
More info.

Android Automotive OS Monthly Patches include 1 vulnerability rated High.
More info.

Samsung Monthly Patches include 23 vulnerabilities, 8 rated High and 14 rated Medium, plus Android patches.
More info.

D-Link is aware of critical vulnerabilities in DIR-846W router which is EOS.  Highest CVSSv3 score of 9.8
No patches because it is EOS/EOL.
More info.

Mozilla has updated Firefox, Firefox ESR, and Focus for iOS to fix High severity vulnerabilities.
More info.

OnCell 3120-LTE-1 Series are affected by multiple vulnerabilities in the old version of jQuery that can be exploited by a remote attacker. Highest CVSSv3 score of 6.1
More info.

Security vulnerabilities have been identified in Unified OSS Console Assurance Monitoring (UOCAM). These vulnerabilities could be exploited to allow authentication bypass, DoS, and escalation of privilege. Highest CVSSv3 score of 7.5
More info.

LINX series devices contain several vulnerabilities. Highest CVSSv4 score of 9.3
More info.

OpenSSL has been updated to fix a DoS in X.509 name checks.
More info.

HAProxy has updated their products to fix a vulnerability related to a possible endless loop in the HTTP/2 multiplexer when combined with zero-copy forwarding system.
More info.

Google has updated Chrome for Desktop to fix 4 security vulnerabilities.
More info.

An OS command injection vulnerability exists in some AP and security routers. The improper neutralization of special elements could allow a remote attacker to execute OS commands by sending a crafted cookie to a vulnerable device. CVSSv3 score of 9.8
More info.

5G NR/4G LTE CPE, DSL/Ethernet CPE, fiber ONT, WiFi extender, and security router devices are affected by a buffer overflow vulnerability that could allow a remote attacker to cause a DoS by sending a crafted HTTP request to a vulnerable device. CVSSv3 score of 7.5
More info.

Zyxel Firewall has been updated to fix several security vulnerabilities.  Highest CVSSv3 score of 8.1
More info.

SUSE has updated the kernel-firmware. More info.
OpenSUSE has updated the kernel-firmware. More info.
Red Hat has updated the kernel. More info.
Oracle Linux has updated the kernel. More info.

Qualcomm Monthly Patches include 8 patches for proprietary software and 13 patches for open source software, highest CVSSv3 score of 8.4
More info.

MediaTek Monthly Patches include 6 vulnerabilities, all rated Medium.
More info.

Samsung has published 7 new bulletins for Exynos, all rated Medium.
More info.

Cloud Tiering Appliance has been updated to fix multiple third-party vulnerabilities, some dating back to 2020. Dell rates this High.
More info.

Several buffer overflow vulnerabilities have been identified in libexpat.
More info. And here. And here.

PHP has been updated to fix several vulnerabilities.  CVSSv3 score of 7.5
More info. And here.

IBM Concert is vulnerable to multiple issues due to Cloud Pak Openshift. Highest CVSSv3 score of 10.
More info.

Portal for ArcGIS Security has been updated to resolve multiple high and medium severity security vulnerabilities. Highest CVSSv4 score of 8.7
More info.

Cisco has published 6 new bulletins, 1 rated High and the rest Medium.  Highest CVSSv3 score of 8.6
More info.

A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a DoS. CVSSv3 score of 8.6
More info.

Google has published an update for Chrome for Desktop that fixes 4 High severity vulnerabilities.
More info.

Wireshark (older versions) has been updated to fi a DoS vulnerability.
More info.

Dell RecoverPoint for Virtual Machines remediation is available for multiple security vulnerabilities in third-party software. Dell rates this Critical.
More info.

Dell APEX Cloud Platform for Redhat Openshift remediation is available for multiple security vulnerabilities in third-party software. Dell rates this High.
More info.

Red Hat has updated the kernel and the firmware. More info.

B&R APROL has been updated to fix 3 vulnerabilities, one of which allows a remote attacker to conduct a Reflected XSS attack. Highest CVSSv4 score of 7.3
More info.

Traffix SDC contaions a vulnerability that could allow a remote attacker to access restricted information, modify files, or cause a DoS. CVSSv3 score of 7.5
No patches yet.
More info.

NetApp has published 10 new bulletins identifying vulnerabilities in third-party software included in their products.  Highest CVSSv3 score of 9.8
One has patches.
More info.

The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. CVSSv3 score of 9.8
More info. And here.

An unauthenticated DoS vulnerability exists in Flowise leading to a DoS. CVSSv3 score of 7.4
More info.

Multiple vulnerabilities exist in MicroSCADA X SYS600, some of which allow a remote attacker to cause confidentiality, integrity and availability impacts. Highest CVSSv3 score of 9.9
More info.

Red Hat has updated the firmware. More info.
Mageia has updated systemd. More info.

Outpost 0810 and Outpost Uploader Utility contain 2 vulnerabilities, Storage of File with Sensitive Data Under Web Root, and Use of Hard-coded Cryptographic Key.  Highest CVSSv4 score of 8.7
More info.

TruControl laser control software uses OpenSSH server and is affected by the RegreSSHion vulnerability. CVSSv3 score of 8.1
More info.

Multiple vulnerabilities were addressed in IBM Application Performance Management. Highest CVSSv3 score of 9.8
More info.

IBM Concert Software uses multiple open source libraries which are susceptible to various security vulnerabilities. Highest CVSSv3 score of 10
More info.

BIG-IP contains a vulnerability that allows a remote attacker to crafting HTTP requests with deliberately incorrect URL encoding, potentially bypassing security controls that rely on proper URL parsing and authentication.  CVSSv3 score of 7.5
No patch yet.
More info.

NetApp has published 10 new bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 9.0
Only 1 has a patch.
More info.

Microsoft has updated Edge to include the latest chromium patches as well as 4 Edge specific patches.  Exploits are in the wild.
More info.

Improper access control in Decentralized Identity Services allows an unathenticated attacker to disable Verifiable ID's on another tenant. CVSSv3 score of 7.5
More info.

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. CVSSv3 score of 8.6
More info.

ThinManager ThinServer contains Information Disclosure and RCE vulnerabilities. Highest CVSSv4 score of 9.3
More info.

Web Help Desk (WHD) is affected by a hardcoded credential vulnerability, allowing a remote attacker to access internal functionality and modify data. CVSSv3 score of 9.1
More info.

Tanzu has 20 security bulletins published that identify vulnerabilities in third-party software included in their product.  1 is rated High, 18 Medium, and 1 Low.
More info.

BIG-IP (DNS) contains a vulnerability in the BIND process that allows a remote atatcker to cause a DoS.  CVSSv3 score of 7.5
No patch yet.
More info.

Cisco has published 5 new bulletins and 1 updated bulletin.  Highest CVSSv3 score of 8.6
More info.

A vulnerability in the SIP call processing function of Unified CM and Unified CM SME could allow a remote attacker to cause a DoS or perform a XSS attack. Highest CVSSv3 score of 8.6
More info. And here.

Chrome for Desktop has been updated to fix 38 security vulnerabilities, with at least one with exploits in the wild.
More info.

Microsoft is aware. More info.

BD has published third-party software updates for Pyxis, EpiCenter, Data Agent, IDM, and CCE products.
More info.

Bedside Monitors are vulnerable to Name:Wreck, a DNS vulnerability from 2016.  CVSSv3 score of 9.8
More info.

Products from the Edge Gateway Family are affected by the RegreSSHion vulnerability. CVSSv3 score of 8.1
More info.

Multiple vulnerabilities were addressed in IBM Application Performance Management. Highest CVSSv3 score of 9.8
More info.

QRadar SIEM contains multiple vulnerabilities in third-party software. Highest CVSSv3 score of 9.8
More info.

Ubuntu has updated the kernel. More info.
Amazon Linux 2 and Amazon Linux 2023 have updated the firmware. More info. And here.

A vulnerability in the parse_cookie function could be exploited by sending specially crafted cookie values to trigger significant delays, resulting in a DoS. CVSSv3 score of 7.5
More info. And here.

GitHub Enterprise Server has been patched to fix 3 vulnerabilities, one of which exposed signed federation metadata XML, allowing a remote attacker to forge a SAML response to provision and/or gain access to a user account with site administrator privileges. Highest CVSSv4 score of 9.5
More info.

Reflected XSS and CSRF vulnerabilities exist in Confluence Data Center and Server. CVSSv3 score of 7.1
More info.

A vulnerability in Bosch IP cameras of families CPP13 and CPP14, allows a remote attacker to retrieve video analytics event data. CVSSv3 score of 7.5
More info.

An unauthorized access vulnerability exists in the Legacy Chat component of Mitel MiContact Center Business, which could allow a remote attacker to access sensitive information and send unauthorized messages. CVSSv3 score of 8.1
More info. And here.

SUSE has updated the kernel firmware. More info.
Red Hat has updated the kernel. More info.

Security vulnerabilities have been identified in HPE SimpliVity AMD Servers. These vulnerabilities could be exploited to allow arbitrary code execution, disclosure of privileged information, buffer overflow, and DoS. Highest CVSSv3 score of 7.5
More info.

Vulnerabilities have been identified in the libfluid_msg library, a core component of the libfluid OpenFlow library that is used to process OpenFlow network packets, that could be used for DoS. Highest CVSSv3 score of 6.5
No patches available.
More info.

SUSE has updated the kernel. More info.
OpenSUSe has updated the kernel. More info.
Ubuntu has updated the microcode. More info.

BIG-IP (DNS) contains a DoS vulnerability.  CVSSv3 score of 7.5
No patches yet.
More info.

NetApp has published 10 new bulletins identifying vulnerabilities in third-party software included in their products.  Highest CVSSv3 score of 8.8
Only 1 has patches.
More info.

SUSE has updated the kernel. More info.
Red Hat has updated kpatch. More info.
Amazon Linux 2 and Amazon Linux 2023 have updated the kernel. More info. And here.