GHSA-3PFM-HP96-PFGV

creationtimestamp| type| source ---|---|--- 2024-12-19 18:44:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113680964695610869...

Ossur Mobile Logic Application

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

Hitachi Energy RTU500 series CMU

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform...

Steps to TruRisk—Insight to Action with VMDR

Shifting from Vulnerability Management to Business-Focused Risk Reduction In cybersecurity, numbers can be deceptive. The sheer volume of vulnerabilities does not equate to risk. Instead, resilience depends on understanding which vulnerabilities pose the greatest threat to your business—and actin...

CVE-2024-53241

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...

CISA and ONCD Release Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure

Today, CISA and the Office of the National Cyber Director ONCD published Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure to assist grant-making agencies to incorporate cybersecurity into their grant programs and assist grant-recipients to build cyber...

CISA Issues BOD 25-01, Implementing Secure Practices for Cloud Services

Today, CISA issued Binding Operational Directive BOD 25-01, Implementing Secure Practices for Cloud Services to safeguard federal information and information systems. This Directive requires federal civilian agencies to identify specific cloud tenants, implement assessment tools, and align cloud...

CISCO-SA-20190501-FABRIC

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:53+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794783383554...

CISCO-SA-20181017-SM

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:30+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793178357329...

CISCO-SA-20190605-ECE

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:27+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793090941495...

CISCO-SA-20190123-RV

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:03+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792924025627...

Siemens User Management Component

SUMMARY Siemens User Management Component UMC is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions...

Debian: Security Advisory (DSA-5829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XWiki allows remote code execution through the extension sheet

Impact On instances where Extension Repository Application is installed, any user can execute any code requiring programming rights on the server. In order to reproduce on an instance, as a normal user without script nor programming rights, go to your profile and add an object of type...

CGA-RHXQ-3F3M-CQVQ

Bulletin has no description...

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

GitLab 13.9 < 17.4.6 / 17.5 < 17.5.4 / 17.6 < 17.6.2 (CVE-2024-9367)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2024-9367 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

GHSA-X794-564W-VGXX

creationtimestamp| type| source ---|---|--- 2024-12-11 17:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113635295248950416...

Cross-Site Scripting (XSS)

decidim-meetings is vulnerable to a cross-site scripting XSS. The vulnerability is due to the meeting embeds feature being susceptible to a malformed URL, allowing an attacker to exploit it...

Oracle Siebel CRM (April 2017 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2017 CPU advisory. - Vulnerability in the Siebel Apps - E-Billing component of Oracle Siebel CRM subcomponent: Security Struts 2. Supported versions that are affected are 6.1,...