Rockwell Automation ControlLogix

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send a...

Schneider Electric Zelio Soft 2

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : Zelio Soft 2 Vulnerabilities : Use After Free, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-23113 CVSS score: 9.8, relates ...

Siemens Siveillance Video Camera

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Details have emerged about multiple security vulnerabilities in two implementations of the Manufacturing Message Specification MMS protocol that, if successfully exploited, could have severe impacts in industrial environments. "The vulnerabilities could allow an attacker to crash an industrial...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23113link is external Fortinet Multiple Products Format String Vulnerability CVE-2024-9379link is external Ivanti Cloud Services Appliance CSA SQL Injection...

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

Patch Tuesday - October 2024

Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as critical yet. Of those five, Microsoft lists two as...

CVE-2024-8626

creationtimestamp| type| source ---|---|--- 2024-10-08 20:23:51+00:00| seen| https://t.me/cvedetector/7378 2024-10-10 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-18 2026-07-12 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqgktwtuku2f...

How Wiz Meets CISA “Secure by Design” Objectives

An update on our commitments to customer security...

CVE-2024-8884

creationtimestamp| type| source ---|---|--- 2024-10-08 13:42:45+00:00| seen| https://t.me/cvedetector/7359 2024-10-10 09:20:30+00:00| seen| https://t.me/HackingInsights/15669 2024-10-10 11:33:27+00:00| seen| https://t.me/CyberBulletin/26060 2024-10-10 11:33:27+00:00| seen|...

CVE-2024-9005

creationtimestamp| type| source ---|---|--- 2024-10-08 13:42:44+00:00| seen| https://t.me/cvedetector/7358 2025-02-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-01...

CVE-2024-45468

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:30+00:00| seen| https://t.me/cvedetector/7351 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-45467

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:30+00:00| seen| https://t.me/cvedetector/7350 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-45473

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:29+00:00| seen| https://t.me/cvedetector/7349 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-45472

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:28+00:00| seen| https://t.me/cvedetector/7348 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-45471

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:27+00:00| seen| https://t.me/cvedetector/7347 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09 2025-01-22 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-057/...

CVE-2024-45476

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:24+00:00| seen| https://t.me/cvedetector/7346 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-45474

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:23+00:00| seen| https://t.me/cvedetector/7345 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-45475

creationtimestamp| type| source ---|---|--- 2024-10-08 12:02:22+00:00| seen| https://t.me/cvedetector/7344 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...