January 21, 2022

McAfee

McAfee released a security update for McAfee Agent for Windows, which addresses two vulnerabilities that could lead to an attacker gaining control of affected systems.

Sources:

McAfee Security,

CISA

January 20, 2022

F5

Versions of BIG-IP, BIG-IQ and NGINX Controller API Management have vulnerabilities that could lead an attacker to either deny service to or take control of affected systems.

Sources:

CISA,

F5,

F5 Support

Drupal

Drupal released security updates due to vulnerabilities affecting two versions of Drupal that could allow an attacker to take control of affected systems.

Sources:

Drupal,

CISA

Google

Google released security updates for Windows, Mac and Linux due to vulnerabilities found that could allow an attacker to gain control of affected systems.

Sources:

Google Chrome,

CISA

Cisco

Cisco released security updates for multiple products containing vulnerabilities that could allow an attacker to take control of affected systems.

Sources:

Cisco Security Advisories,

CISA

January 19, 2022

Zoho

Zoho released a security advisory for ManageEngine Desktop Central and Desktop Central MSP due to an authentication bypass vulnerability.

Sources:

Zoho,

CISA

January 18, 2022

Oracle

Oracle released its Critical Patch Update, which addresses 497 vulnerabilities in multiple products that could lead to an attacker gaining control of affected systems.

Sources:

Oracle,

CISA