CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28461link is external Array Networks AG and vxAG ArrayOS Improper Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for...

CVE-2023-5830

creationtimestamp| type| source ---|---|--- 2024-11-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-25 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-02 00:00:00+00:00| seen| The Shadowserver...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308link is external Apple Multiple Products Code Execution Vulnerability CVE-2024-44309link is external Apple Multiple Products Cross-Site Scripting XSS...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38812link is external VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38813link is external VMware vCenter Server Privilege Escalation...

CVE-2024-0012

creationtimestamp| type| source ---|---|--- 2024-11-18 14:20:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-0012 2024-11-18 14:29:11+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113504429682120533 2024-11-18 14:42:18+00:00| seen|...

CVE-2020-8191

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2024-12-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-17 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

CVE-2022-45933

creationtimestamp| type| source ---|---|--- 2024-11-17 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-17 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-29 00:00:00+00:00| exploited| The...

CVE-2018-13315

creationtimestamp| type| source ---|---|--- 2024-11-16 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-16 2024-11-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-23 2024-11-27 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-17431

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:03+00:00| seen| MISP/0ffb58bb-1622-4d63-95e3-9bd2d81e65e1 2024-12-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-27 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2019-19824

creationtimestamp| type| source ---|---|--- 2024-11-14 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-14 2024-12-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-09 2024-12-25 00:00:00+00:00| exploited| The...

CVE-2024-8069

creationtimestamp| type| source ---|---|--- 2024-11-12 16:21:28+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113470897346004162 2024-11-12 19:44:08+00:00| seen| https://t.me/cvedetector/10676 2024-11-12 21:23:09+00:00| seen|...

CISA, FBI, NSA, and International Partners Release Joint Advisory on 2023 Top Routinely Exploited Vulnerabilities

Today, the Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, National Security Agency NSA, and international partners released joint Cybersecurity Advisory, 2023 Top Routinely Exploited Vulnerabilities. This advisory supplies details on the top Common...

PT-2024-8515

Name of the Vulnerable Software and Affected Versions: Citrix Virtual Apps and Desktops CVAD versions 1912 LTSR, 2203, 2402, and 2407 Description: This issue involves improper privilege management within the Session Recording component of Citrix Virtual Apps and Desktops CVAD. Exploitation allows...

CVE-2018-17246

creationtimestamp| type| source ---|---|--- 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2024-12-23 00:00:00+00:00| seen| The Shadowserver...

CVE-2021-29442

creationtimestamp| type| source ---|---|--- 2024-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-11 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver...

CVE-2017-14135

creationtimestamp| type| source ---|---|--- 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-12-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-15 2024-12-25 00:00:00+00:00| seen| The Shadowserver...

CVE-2020-7796

creationtimestamp| type| source ---|---|--- 2024-11-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-09 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-17 00:00:00+00:00| exploited| The Shadowserver...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

Updated November 8, 2024 CISA has removed the following vulnerability from its Known Exploited Vulnerabilities Catalog, due to a transcription error: CVE-2021-4043link is external Motion Spell GPAC Null Pointer Dereference Vulnerability End of Update CISA has added four new vulnerabilities to its...

CVE-2019-12276

creationtimestamp| type| source ---|---|--- 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2024-12-23 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-23 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-11222

creationtimestamp| type| source ---|---|--- 2024-11-07 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-07 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2025-01-12 00:00:00+00:00| seen| The Shadowserver...