CVE-2024-41156

creationtimestamp| type| source ---|---|--- 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-02...

CVE-2024-41153

creationtimestamp| type| source ---|---|--- 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-02...

Siemens SINEC NMS

SUMMARY SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to devices...

CISA Urges Patching of Critical Palo Alto Networks’ Expedition Tool Vulnerability

A critical security vulnerability in Palo Alto Networks' Expedition tool is being actively exploited by hackers. CISA urges…...

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability. "Palo Alto Networks is aware of a claim of a remote code execution vulnerability via the...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

Updated November 8, 2024 CISA has removed the following vulnerability from its Known Exploited Vulnerabilities Catalog, due to a transcription error: CVE-2021-4043link is external Motion Spell GPAC Null Pointer Dereference Vulnerability End of Update CISA has added four new vulnerabilities to its...

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 CVS...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on November 7, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-312-01 Beckhoff Automation TwinCAT Package Manager ICSA-24-312-02 Delta Electronics...

CVE-2024-47131

creationtimestamp| type| source ---|---|--- 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 2024-11-08 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1463/ 2024-11-08 06:00:00+00:00| seen|...

CVE-2024-47253

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:38+00:00| seen| https://t.me/cvedetector/9854 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17...

CVE-2024-47254

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:38+00:00| seen| https://t.me/cvedetector/9853 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17...

CVE-2024-47255

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:34+00:00| seen| https://t.me/cvedetector/9852 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17...

Why your vote can’t be “hacked,” with Cait Conley of CISA (Lock and Code S05E23)

This week on the Lock and Code podcast … The US presidential election is upon the American public, and with it come fears of "election interference." But "election interference" is a broad term. It can mean the now-regular and expected foreign disinformation campaigns that are launched to sow...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8957link is external PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CVE-2024-8956link is external PTZOptics PT30X-SDI/NDI Cameras...

CVE-2024-8934

creationtimestamp| type| source ---|---|--- 2024-10-31 15:16:18+00:00| seen| https://t.me/cvedetector/9502 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-01 2024-11-11 13:31:49+00:00| seen| Telegram/D2pvGkTuSuQoHjEgXF6pNqwYJdL2ayIHlXfl1SpKeACj8...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on October 31, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-305-01 Rockwell Automation FactoryTalk ThinManager ICSA-24-030-02 Mitsubishi Electric...

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability CVE-2024-47575 to include additional workarounds and indicators of compromise IOCs. A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive files or take...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on October 29, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-303-01 Siemens InterMesh Subscriber Devices ICSA-24-303-02 Solar-Log Base 15...

CVE-2024-10456

creationtimestamp| type| source ---|---|--- 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-03 2024-10-30 20:03:08+00:00| seen| https://t.me/cvedetector/9455 2024-11-06 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1457/...

Solar-Log Base 15

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Solar-Log Equipment : Base 15 Vulnerability : Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' 2. RISK EVALUATION Successful...