CVE-2024-9692

creationtimestamp| type| source ---|---|--- 2024-10-24 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01 2024-10-24 20:09:53+00:00| seen| https://t.me/cvedetector/8812...

CVE-2024-10313

creationtimestamp| type| source ---|---|--- 2024-10-24 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-02 2024-10-24 21:00:26+00:00| seen| https://t.me/cvedetector/8831...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20481link is external Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-37383link is external RoundCube Webmail Cross-Site Scripting XSS Vulnerability...

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Sometimes, it turns out that the answers we struggled so hard to find were sitting right in front of us for so long that we somehow overlooked them. When the Department of Homeland Security, through the Cybersecurity and Infrastructure Security Agency CISA, in coordination with the FBI, issues a...

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild. Tracked as CVE-2024-47575 CVSS score: 9.8, the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager FGFM protocol. "A missing...

iniNet Solutions SpiderControl SCADA PC HMI Editor

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : iniNet Solutions Equipment : SpiderControl SCADA PC HMI Editor Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain...

VIMESA VHF/FM Transmitter Blue Plus

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : VIMESA Equipment : VHF/FM Transmitter Blue Plus Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Deep Sea Electronics DSE855

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION : low attack complexity/public exploits are available Vendor : Deep Sea Electronics Equipment : DSE855 Vulnerability : Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

CVE-2024-47901

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-25 07:32:16+00:00| seen| https://t.me/CyberBulletin/26210 2024-10-25 07:32:17+00:00| seen| https://t.me/CyberBulletin/1270 2024-10-25 08:55:42+00:00| seen|...

CVE-2024-47904

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:31+00:00| seen| https://t.me/cvedetector/8699 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01 2026-07-14 17:37:06+00:00| seen...

CVE-2024-47903

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:30+00:00| seen| https://t.me/cvedetector/8698 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01...

CVE-2024-47902

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:29+00:00| seen| https://t.me/cvedetector/8697 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01...

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...

Slackware Linux 15.0 php81 Multiple Vulnerabilities (SSA:2024-297-01)

The version of php81 installed on the remote host is prior to 8.1.30. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-297-01 advisory. New php81 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on October 22, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-296-01 ICONICS and Mitsubishi Electric Products CISA encourages users and administrators...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38094link is external link is externalMicrosoft SharePoint Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...

CVE-2024-7587

creationtimestamp| type| source ---|---|--- 2024-10-22 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-296-01 2024-10-23 02:20:16+00:00| seen| https://t.me/cvedetector/8670 2024-10-31 18:39:00+00:00| seen| https://t.me/icscert/939 2025-03-11 11:30:05+00:00| seen|...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : ICONICS, Mitsubishi Electric Equipment : ICONICS Product Suite, Mitsubishi Electric MC Works64 Vulnerability : Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-9537link is external ScienceLogic SL1 Unspecified Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...