CVE-2025-32454

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-06 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-01...

CVE-2024-51445

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11...

CVE-2025-24510

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-16...

CVE-2024-51444

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11...

CVE-2025-26389

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-10...

CVE-2025-30198

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19...

Patch Tuesday - May 2025

Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...

CISA Adds TeleMessage Vulnerability to KEV List Following Breach

CISA adds TeleMessage flaw to KEV list, urges agencies to act within 3 weeks after a breach exposed…...

CVE-2024-23815

creationtimestamp| type| source ---|---|--- 2025-05-13 19:31:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16217 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-04...

CVE-2024-51447

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16164 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11...

CVE-2024-51446

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16159 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11...

CVE-2025-3916

creationtimestamp| type| source ---|---|--- 2025-05-13 13:30:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16114 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-20 2025-06-03 10:00:00+00:00| seen|...

CVE-2025-32469

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16110 2025-05-13 13:52:32+00:00| seen| https://t.me/cvedetector/25193 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-17...

CVE-2025-33024

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16109 2025-05-13 13:52:33+00:00| seen| https://t.me/cvedetector/25194 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-17...

CVE-2025-33025

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16108 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-17...

Siemens RUGGEDCOM ROX II

SUMMARY The web interface of RUGGEDCOM ROX II devices contain multiple Client-Side Enforcement of Server-Side Security vulnerabilities that could allow an attacker with a legitimate, highly privileged account on the web interface to get privileged code execution in the underlying OS of the...

Siemens Mendix OIDC SSO

SUMMARY The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development. Siemens has released a new version for Mendix OIDC SSO and recommends to update...

Siemens SIMATIC PCS

SUMMARY Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for the affected...

Siemens MS/TP Point Pickup Module

SUMMARY MS/TP Point Pickup Module devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's normal operation. Siemens...

Siemens BACnet ATEC Devices

SUMMARY BACnet ATEC devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's normal operation. Siemens recommends...