CVE-2024-46670

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwige4o2d 2025-01-14 15:11:37+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/113827347482732049 2025-01-14 15:11:57+00:00| seen|...

CVE-2024-46665

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgw42mtw2t 2025-01-14 15:13:34+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827355879730690 2025-01-14 15:43:24+00:00| seen|...

Microsoft Releases January 2025 Security Updates

Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM. CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates: Ivanti Avalanchelink is...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-014-01 Hitachi Energy FOXMAN-UN ICSA-25-014-02 Schneider Electric Vijeo Designer...

CVE-2024-28021

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-2013

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-2012

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-28024

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-8401

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-03 2025-01-28 16:42:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113906977232244012 2025-01-28 17:15:56+00:00| seen|...

CVE-2024-2011

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-28022

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-28023

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2025-0430

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04 2025-01-17 17:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113844925428063721 2025-01-17 17:57:24+00:00| seen|...

CVE-2024-45385

creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249828255649 2025-01-14 10:36:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265616304136 2025-01-14 11:08:27+00:00| seen|...

CVE-2024-47100

creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249846900286 2025-01-14 10:36:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265635967477 2025-01-14 11:08:20+00:00| seen|...

Belledonne Communications Linphone-Desktop

RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior...

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access PRA and Remote Support RS products to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...