CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-45727link is external North Grid Proself Improper Restriction of XML External Entity XEE Reference Vulnerability CVE-2024-11680link is external ProjectSend...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 3, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-338-01 Ruijie Reyee OS ICSA-24-338-02 Siemens RUGGEDCOM APE1808 ICSA-24-338-03 Open...

CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

Today, CISA—in partnership with the National Security Agency NSA, the Federal Bureau of Investigation FBI, and international partners—released joint guidance, Enhanced Visibility and Hardening Guidance for Communications Infrastructure. Partners of this guidance include: Australian Signals...

CVE-2024-9852

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04 2025-03-11 11:30:05+00:00| seen| https://t.me/truesecator/6826 2025-03-11 11:31:39+00:00| seen|...

CVE-2024-8300

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04 2025-03-11 11:30:05+00:00| seen| https://t.me/truesecator/6826 2025-03-11 11:31:39+00:00| seen|...

CVE-2024-45722

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:26:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607286215845352 2024-12-06 20:38:58+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-47043

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:14:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113607238645282439 2024-12-06 19:48:45+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-48874

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:26:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607286258124103 2024-12-06 20:38:58+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-51727

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:14:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113607238660158313 2024-12-06 19:48:43+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-46874

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:26:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607286230169597 2024-12-06 20:38:59+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-47146

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 20:39:00+00:00| seen| https://t.me/cvedetector/12274...

CVE-2024-11220

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-03 2024-12-06 17:51:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113607147250428125 2024-12-06 19:48:46+00:00| seen| https://t.me/cvedetector/122...

Open Automation Software

RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to...

Ruijie Reyee OS (Update A)

RISK EVALUATION Successful exploitation of this vulnerabilities could allow attackers to take near full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

Debian: Security Advisory (DSA-5823-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to perform proper impact...

CVE-2024-11787

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1614/ 2024-11-27 23:42:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113557567506147893 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11795

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1621/ 2024-11-27 23:57:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113557626607783965 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11801

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1627/ 2024-11-28 00:27:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113557744665236022 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11803

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1629/ 2024-11-28 00:27:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113557744692960351 2024-12-03 11:00:00+00:00| seen|...