Week 14 of 2024

• CVE-2024-3094: Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library
• CVE-2024-2879: Critical flaw in LayerSlider WordPress plugin impacts 1 million sites
• CVE-2024-21894, CVE-2024-22052, CVE-2024-22053, CVE-2024-22023: Ivanti fixes VPN gateway vulnerability allowing RCE and DoS attacks
• CVE-2024-0582: Serious Linux Kernel Bug
• CVE-2024-3159: Google fixes one more Chrome zero-day exploited at Pwn2Own

Brought to you by Brad Causey, CISSP and Joey Vandegrift at SecurIT360