Advisory No: TZCERT/SA/2023/10/5 Date of First Release: 5th October 2023 Source: CISCO Software Affected:  Cisco Emergency Responder Overview: A vulnerability affecting Cisco Emergency Responder has been disclosed. This vulnerability may lead to arbitrary code execution in the context of privileged user. Description: Cisco Emergency Responder has the static user credentials …

SUSE has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review SUSE Security Advisories suse-su-20233975-1, suse-su-20233981-1, suse-su-20233984-1, suse-su-20233969-1, suse-su-20233966-1, suse-su-20233957-1 and suse-su-20233963-1 and apply necessary updates.

Ubuntu has released security updates to address vulnerabilities in Linux kernel, Django, gnu, exim and freerdp. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Ubuntu Security Advisories USN-6416-1, USN-6414-2, USN-6413-1, USN-6411-1 and USN-6401-1 and apply necessary updates.

Apple has released security updates to address vulnerabilities in iOS and iPadOS. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Apple Security Advisory and apply necessary updates.

Dell has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Dell Security Advisories dsa-2023-305, dsa-2023-321, dsa-2023-328 and dsa-2023-331 and apply necessary updates.

Google has released security updates to address vulnerabilities in Android OS. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Android Security Advisory and apply necessary updates.

Juniper Networks has released security updates to address vulnerabilities in Junos OS SRX and EX series. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Juniper Networks Security Advisory and apply necessary updates.

Oracle has released security updates to address vulnerabilities in glibc and nodejs. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Oracle Security Advisories ELSA-2023-12850 and ELSA-2023-5363 and apply necessary updates.

Google has released security updates to address vulnerabilities in Chrome for desktop and android. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Chrome Security Advisories update-for-desktop and update-for-android and apply necessary updates.

Drupal has released security update to address a vulnerability in Drupal core. Exploitation of this vulnerability may allow an attacker to bypass access control. Users and administrators are encouraged to review Drupal Security Advisory and apply necessary updates.