Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista NG Firewall that originates from a user with advanced reporting application access rights can perform unauthorized actions...

CVE-2024-13263

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimvng6c2e...

GHSA-C9CX-GHWR-X58M

creationtimestamp| type| source ---|---|--- 2025-01-09 19:23:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1040...

GHSA-7RGP-4J56-FM79 Mattermost has Improper Check for Unusual or Exceptional Conditions

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

CVE-2025-22445 affects Mattermost Server in the 10.x line up to 10.2 where the UI incorrectly reflects missing admin settings for the Calls feature, causing admin confusion. SUSE advisory SUSE-SU-2025:0297-1 documents the issue and recommends updating to OpenSUSE/Mattermost patch level 10.3 or la...

PT-2025-4489 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.x through 10.2 Description: The issue arises from Mattermost's failure to accurately reflect missing settings, leading to confusion among administrators regarding a Calls security-sensitive configuration due to incorrec...

CVE-2024-13191

creationtimestamp| type| source ---|---|--- 2025-01-08 22:34:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113795117051195743 2025-01-08 23:13:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/852 2025-01-08 23:15:31+00:00| seen|...

CVE-2024-56774

creationtimestamp| type| source ---|---|--- 2025-01-08 17:52:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113794007433747830 2025-01-08 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfargy6tdm25 2025-01-08 18:22:41+00:00|...

Security Bulletin: Multiple Vulnerabilities in moment.js used by IBM Jazz Reporting Service (JRS) (CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2022-31129)

Summary There are multiple vulnerabilities identified in IBM Jazz Reporting Service JRS. These vulnerabilities have been fixed. Please apply the latest version to obtain the fixes. Vulnerability Details CVEID:CVE-2022-24785 DESCRIPTION: Moment.js could allow a remote attacker to traverse...

CVE-2024-54731

creationtimestamp| type| source ---|---|--- 2025-01-08 05:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftspo2c2f 2025-01-08 05:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4oxlyz2r 2025-01-08 05:41:00+00:00|...

CVE-2024-56456

creationtimestamp| type| source ---|---|--- 2025-01-08 03:32:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790627182992909 2025-01-08 03:38:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/616 2025-01-08 04:16:18+00:00| seen|...

CVE-2024-40427

creationtimestamp| type| source ---|---|--- 2025-01-07 18:35:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113788514243444533 2025-01-07 18:37:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/503 2025-01-07 19:15:53+00:00| seen|...

CVE-2025-22299

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jljbgih2m 2025-01-07 11:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jljbgih2m 2025-01-07 13:25:20+00:00| seen|...

CVE-2024-49249

creationtimestamp| type| source ---|---|--- 2025-01-07 10:55:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113786703677090826 2025-01-07 11:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jijlme22o 2025-01-07 11:37:46+00:00| seen|...

CVE-2024-12313

creationtimestamp| type| source ---|---|--- 2025-01-07 04:39:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/327 2025-01-07 05:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhhhji425 2025-01-07 05:48:09+00:00| seen|...

CVE-2024-20144

creationtimestamp| type| source ---|---|--- 2025-01-06 03:29:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113779288518911401 2025-01-06 03:32:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113779302313248744 2025-01-06 04:15:31+00:00| seen|...

PT-2025-1037 · Ibm · Ibm Cognos Controller +1

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 IBM Controller version 11.1.0 Description: The issue is related to the error reporting mechanism in IBM Cognos Controller and IBM Controller, which could allow a remote attacker to obtain...

PT-2025-1040 · Ibm · Ibm Cognos Controller +1

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 IBM Controller version 11.1.0 Description: The issue is related to the error reporting mechanism in IBM Cognos Controller and IBM Controller, which could allow a remote attacker to obtain...

CVE-2025-0225

creationtimestamp| type| source ---|---|--- 2025-01-05 17:03:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113776829322710751 2025-01-05 17:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lez4ociopl25 2025-01-05 17:43:09+00:00| seen|...