Jun 26, 2024
2 new incidents, 1 with updates.
Started
- ClosedCriticalPatched
OSGeo GeoServer JAI-EXT Code Injection
OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution. Added to the CISA KEV catalog on 2024-06-26. CVE-2022-24816 was assigned before 2024; the KEV listing came in 2024.
OSGeo JAI-EXTClosed Jun 26, 2024
- ClosedMediumPatched
Roundcube Webmail Cross-Site Scripting (XSS)
Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment. Added to the CISA KEV catalog on 2024-06-26. CVE-2020-13965 was assigned before 2024; the KEV listing came in 2024.
Roundcube WebmailClosed Jun 26, 2024
Updated
- ClosedMediumPatched
Linux Kernel Use-After-Free
Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges. Added to the CISA KEV catalog on 2024-06-26. CVE-2022-2586 was assigned before 2024; the KEV listing came in 2024.
Linux KernelClosed Jun 26, 2024
