CVE-2024-20387

creationtimestamp| type| source ---|---|--- 2024-10-24 18:00:07+00:00| exploited| https://t.me/truesecator/6358 2024-10-31 18:51:56+00:00| exploited| https://t.me/icscert/941 2024-11-03 17:33:56+00:00| seen| https://t.me/icscert/943...

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance ASA that could lead to a denial-of-service DoS condition. The vulnerability, tracked as CVE-2024-20481 CVSS score: 5.8, affects the Remote Access VPN RAVPN service of...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20481link is external Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-37383link is external RoundCube Webmail Cross-Site Scripting XSS Vulnerability...

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild. Tracked as CVE-2024-47575 CVSS score: 9.8, the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager FGFM protocol. "A missing...

CVE-2017-7927

creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-24 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-27 00:00:00+00:00| exploited| The Shadowserver...

Slackware: Security Advisory (SSA:2024-297-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-17532

creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-28 2024-11-02 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-20424

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:19+00:00| seen| https://t.me/cvedetector/8760 2024-10-24 07:49:33+00:00| seen| https://t.me/CyberBulletin/26181 2024-10-24 07:49:34+00:00| seen| https://t.me/CyberBulletin/1246 2024-10-24 18:00:07+00:00| exploited|...

CVE-2024-20412

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:17+00:00| seen| https://t.me/cvedetector/8758 2024-10-24 07:48:30+00:00| seen| https://t.me/CyberBulletin/1243 2024-10-24 07:48:30+00:00| seen| https://t.me/CyberBulletin/26178 2024-10-24 18:00:07+00:00| exploited|...

CVE-2024-47575

creationtimestamp| type| source ---|---|--- 2024-10-23 16:01:18+00:00| exploited| https://t.me/BleepingComputer/20896 2024-10-23 16:28:14+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus25/2024 2024-10-23 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-10-...

Slackware Linux 15.0 php81 Multiple Vulnerabilities (SSA:2024-297-01)

The version of php81 installed on the remote host is prior to 8.1.30. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-297-01 advisory. New php81 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...

Drupal Improper Error Handling Vulnerability (SA-CORE-2024-002) - Linux

Drupal is prone to an improper error handling vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

CVE-2020-4415

creationtimestamp| type| source ---|---|--- 2024-10-21 17:47:20+00:00| exploited| https://t.me/CyberSecurityTechnologies/1012...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-9537link is external ScienceLogic SL1 Unspecified Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.3.5 is vulnerable to Sensitive Data Exposure

Software Schema & Structured Data for WP & AMP Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.36 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-49683 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fb194b3fd454 Credits Joshua...

Fedora 39 : thunderbird (2024-18ac02a385)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-18ac02a385 advisory. Update to 115.16.0 https://www.thunderbird.net/en-US/thunderbird/115.16.0esr/releasenotes/ Tenable has extracted the preceding description block directly fro...

CVE-2024-47486

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...

Drupal 10.2.x < 10.2.10 Drupal Vulnerability (SA-CORE-2024-002)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.2.x prior to 10.2.10. It is, therefore, affected by a vulnerability. - A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10...

CVE-2023-32192

A vulnerability has been identified in which unauthenticated cross-site scripting XSS in the API Server's public API endpoint can be exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser...