Ruijie Reyee OS (Update A)

RISK EVALUATION Successful exploitation of this vulnerabilities could allow attackers to take near full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

Debian: Security Advisory (DSA-5823-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to perform proper impact...

CVE-2024-11801

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1627/ 2024-11-28 00:27:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113557744665236022 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11802

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1628/ 2024-11-28 00:27:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113557744679185633 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11803

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1629/ 2024-11-28 00:27:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113557744692960351 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11794

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1620/ 2024-11-27 23:57:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113557626594293010 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11795

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1621/ 2024-11-27 23:57:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113557626607783965 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11792

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1618/ 2024-11-27 23:57:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113557626546979069 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11787

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1614/ 2024-11-27 23:42:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113557567506147893 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11791

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1617/ 2024-11-27 23:42:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113557567547612063 2024-12-03 11:00:00+00:00| seen|...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on November 26, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-331-01 Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC ICSA-24-331-02...

CVE-2021-22764

creationtimestamp| type| source ---|---|--- 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-01...

CISA Urges Agencies to Patch Critical "Array Networks" Flaw Amid Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a now-patched critical security flaw impacting Array Networks AG and vxAG secure access gateways to its Known Exploited Vulnerabilities KEV catalog following reports of active exploitation in the wild. The vulnerabilit...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28461link is external Array Networks AG and vxAG ArrayOS Improper Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308link is external Apple Multiple Products Code Execution Vulnerability CVE-2024-44309link is external Apple Multiple Products Cross-Site Scripting XSS...

CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization

Today, CISA released Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a U.S. Critical Infrastructure Sector Organization in coordination with the assessed organization. This cybersecurity advisory details lessons learned and key findings from an assessment, including the Red...

CVE-2024-45369

creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07...

CVE-2024-47138

creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07...

CVE-2024-8525

creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-01 2024-11-21 15:34:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113521672720175626...