CVE-2024-9134

CVE-2024-9134 is tied to Arista Edge Threat Management - Arista NG Firewall versions up to 17.1.1. The advisory documents multiple SQL Injection vulnerabilities in the reporting application that enable a user with advanced report application access rights to exploit SQL injection and execute comm...

CVE-2024-9134 Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges...

CVE-2025-22445

A flaw was found in Mattermost. In certain versions, Mattermost fails to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs

Cybersecurity reporting is a critical yet often overlooked opportunity for service providers managing cybersecurity for their clients, and specifically for virtual Chief Information Security Officers vCISOs. While reporting is seen as a requirement for tracking cybersecurity progress, it often...

CVE-2024-9134: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista NG Firewall that originates from a user with advanced reporting application access rights can perform unauthorized actions...

PT-2025-3710 · Arista · Arista Edge Threat Management

Name of the Vulnerable Software and Affected Versions: Arista Edge Threat Management versions up to 17.1.1 Description: Multiple SQL Injection vulnerabilities exist in the reporting application, allowing a user with advanced report application access rights to exploit the SQL injection. This...

CVE-2024-13263

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimvng6c2e...

GHSA-C9CX-GHWR-X58M

creationtimestamp| type| source ---|---|--- 2025-01-09 19:23:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1040...

GHSA-7RGP-4J56-FM79 Mattermost has Improper Check for Unusual or Exceptional Conditions

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

CVE-2025-22445 affects Mattermost Server in the 10.x line up to 10.2 where the UI incorrectly reflects missing admin settings for the Calls feature, causing admin confusion. SUSE advisory SUSE-SU-2025:0297-1 documents the issue and recommends updating to OpenSUSE/Mattermost patch level 10.3 or la...

PT-2025-4489 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.x through 10.2 Description: The issue arises from Mattermost's failure to accurately reflect missing settings, leading to confusion among administrators regarding a Calls security-sensitive configuration due to incorrec...

CVE-2025-22445: Improper Check for Unusual or Exceptional Conditions

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2024-13191

creationtimestamp| type| source ---|---|--- 2025-01-08 22:34:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113795117051195743 2025-01-08 23:13:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/852 2025-01-08 23:15:31+00:00| seen|...

CVE-2024-56774

creationtimestamp| type| source ---|---|--- 2025-01-08 17:52:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113794007433747830 2025-01-08 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfargy6tdm25 2025-01-08 18:22:41+00:00|...

Security Bulletin: Multiple Vulnerabilities in moment.js used by IBM Jazz Reporting Service (JRS) (CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2022-31129)

Summary There are multiple vulnerabilities identified in IBM Jazz Reporting Service JRS. These vulnerabilities have been fixed. Please apply the latest version to obtain the fixes. Vulnerability Details CVEID:CVE-2022-24785 DESCRIPTION: Moment.js could allow a remote attacker to traverse...

CVE-2024-54731

creationtimestamp| type| source ---|---|--- 2025-01-08 05:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftspo2c2f 2025-01-08 05:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4oxlyz2r 2025-01-08 05:41:00+00:00|...

CVE-2024-56456

creationtimestamp| type| source ---|---|--- 2025-01-08 03:32:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790627182992909 2025-01-08 03:38:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/616 2025-01-08 04:16:18+00:00| seen|...