5157 matches found
CVE-2024-28021
creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...
CVE-2024-28023
creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...
CVE-2024-2011
creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...
CVE-2024-47100
creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249846900286 2025-01-14 10:36:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265635967477 2025-01-14 11:08:20+00:00| seen|...
CVE-2024-45385
creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249828255649 2025-01-14 10:36:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265616304136 2025-01-14 11:08:27+00:00| seen|...
Belledonne Communications Linphone-Desktop
RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...
Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior...
CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access PRA and Remote Support RS products to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...
Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)
RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...
Siemens Siveillance Video Camera
SUMMARY Several camera device drivers in the Siveillance Video Device Pack store camera credentials in their log file when authentication fails. This could allow a local attacker to read camera credentials stored in the Recording Server under specific conditions. Siemens has released an update...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-12686link is external BeyondTrust Privileged Remote Access PRA and Remote Support RS OS Command Injection Vulnerability CVE-2023-48365link is external Qlik Sen...
CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators
Today, CISA—along with U.S. and international partners—released joint guidance Secure by Demand: Priority Considerations for Operational Technology Owners and Operators when Selecting Digital Products. As part of CISA’s Secure by Demand series, this guidance focuses on helping customers identify...
CISA: STS Threat Timelines Facilitator Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Emerging Risks: the Cyber-Physical Drone Threat
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2023 ISC Annual Review
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Business Case for Security Infographic
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: ETP Fact Sheet
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: CFATS Personnel Surety Program Demonstration and Lessons Learned
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...