OpenSSL Vulnerabilities
OpenSSL released a new version to fix two vulnerabilities, one of which can lead to remote code execution. You can find more info in the OpenSSL blog post.
Blog Articles
GitLab RCE
A new vulnerability in GitLab has been fixed which has a CVSS base score of 9.9. You can find a report for GitLab installations and more info in the GitLab vulnerability blog post.
Firefox 102 & ESR 91.11
The latest Firefox report is live here.
Chrome 103
Google Chrome 103 has been released including minor changes and 14 security fixes. Use the audit to manage your update progress and identify outdated installations. Grab the Chrome 103 report here.
Critical Splunk Enterprise Vulnerability Fixed
Splunk Enterprise contains a critical vulnerability in its deployment module. A compromised Universal Forwarded endpoint can be used to deploy to all other Universal Forwarded endpoints belonging to t...
Firefox 101 & ESR 91.10
The latest report for Firefox 101 & ESR 91.10 is now live.
MS Office zero-day vulnerability
Microsoft released a mitigation guide for a new actively exploited vulnerability CVE-2022-30190. You can read more about it and find the audit in our MS Office vulnerability blog post.
Chrome 102
The latest report to audit Chrome version 102 is now live.
NVIDIA May 2022 Vulnerabilities
Nvidia released a new security advisory with 10 vulnerabilities in display drivers. You can find the report and more info in the Nvidia vulnerability blog post.
HP BIOS Vulnerability
Two new vulnerabilities have been fixed for 200+ HP models, you can find the audit in the HP BIOS vulnerability blog post.
Firefox 100 & ESR 91.9
The latest report for Firefox 100 & ESR 91.9 is now live.
Chrome 101
The Chrome 101 audit is now live!
Lenovo BIOS Vulnerability
Lenovo released an advisory detailing 3 vulnerabilities. Learn more and grab the report in our blog post.
Chrome Zero Day 100 v127
Please find the Attached report - Covering CVE-2022-1364. Select Top 1000000 tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, tsysAssetTypes.AssetTypename As AssetType, tblAssets.Username...
Chrome Zero Day V100.0.4896.127
Please see the below report for the chrome Zero Day report Select Top 1000000 tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, tsysAssetTypes.AssetTypename As AssetType, tblAssets.Usernam...
Firefox 99 & ESR 91.8
Firefox 99 got released with new minor features and security fixes, you can find the Firefox 99 report here.
Spring4Shell & Lansweeper
Recently a new vulnerability in the Java Spring framework dubbed Spring4Shell. CVE-2022-22965 has a potentially large impact as many applications use the Spring framework. Neither Lansweeper, nor its ...
CVE-2022-22675 and CVE-2022-22674
Two new zero-days were fixed in multiple Apple operating systems you can read more about it in our blog post and grab the report.
- Mister_Nobody on: New Browser Version Reports
- andrgin1 on: Fortinet CVE-2024-21762
- ChrisJ_EPITS on: Chrome 119 Vulnerability Audit
- medard on: Edge 117 Audit
- KHoegeman on: Storm-0978 Attacks Mitigation Audit
- Ben-rutherford on: Chrome 113 Vulnerabilities Audit
- Mister_Nobody on: Chrome 113 Audit
- Ben-rutherford on: Chrome 112 Zero-Day Vulnerability
- betterinvesting on: Edge 111 Audit
-
Esben_D
on:
Schneider Electric CVE-2022-45788 and CVE-2022-457...
