Solar-Log Base 15

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Solar-Log Equipment : Base 15 Vulnerability : Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' 2. RISK EVALUATION Successful...

Hitachi Energy MSM (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to impact the confidentiality, integrity or availability of the MSM. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA...

webkitgtk: Arbitrary Remote Code Execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

CVE-2024-10386

creationtimestamp| type| source ---|---|--- 2024-10-25 20:25:58+00:00| seen| https://t.me/cvedetector/8968 2024-10-31 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-305-01 2024-11-08 19:52:48+00:00| seen| https://t.me/icscert/945 2026-06-28 04:37:07+00:00| seen|...

CVE-2024-10387

creationtimestamp| type| source ---|---|--- 2024-10-25 20:25:43+00:00| seen| https://t.me/cvedetector/8957 2024-10-31 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-305-01 2026-07-11 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqfawtcnq227...

RockyLinux 8 : thunderbird (RLSA-2024:8024)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8024 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the RockyLin...

CVE-2024-9692

creationtimestamp| type| source ---|---|--- 2024-10-24 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01 2024-10-24 20:09:53+00:00| seen| https://t.me/cvedetector/8812...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on October 24, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-298-01 VIMESA VHF/FM Transmitter Blue Plus ICSA-24-298-02 iniNet Solutions...

CISA, US, and International Partners Release Joint Guidance to Assist Software Manufacturers with Safe Software Deployment Processes

Today, CISA—along with U.S. and international partners—released joint guidance, Safe Software Deployment: How Software Manufacturers Can Ensure Reliability for Customers. This guide aids software manufacturers in establishing secure software deployment processes to help ensure software is reliabl...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation , as confirmed by Fortinet. CVE-2024-47575link is external Fortinet FortiManager Missing Authentication Vulnerability These types of vulnerabilities are frequent attack...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20481link is external Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-37383link is external RoundCube Webmail Cross-Site Scripting XSS Vulnerability...

CVE-2024-10313

creationtimestamp| type| source ---|---|--- 2024-10-24 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-02 2024-10-24 21:00:26+00:00| seen| https://t.me/cvedetector/8831...

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Sometimes, it turns out that the answers we struggled so hard to find were sitting right in front of us for so long that we somehow overlooked them. When the Department of Homeland Security, through the Cybersecurity and Infrastructure Security Agency CISA, in coordination with the FBI, issues a...

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild. Tracked as CVE-2024-47575 CVSS score: 9.8, the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager FGFM protocol. "A missing...

Deep Sea Electronics DSE855

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION : low attack complexity/public exploits are available Vendor : Deep Sea Electronics Equipment : DSE855 Vulnerability : Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

iniNet Solutions SpiderControl SCADA PC HMI Editor

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : iniNet Solutions Equipment : SpiderControl SCADA PC HMI Editor Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain...

VIMESA VHF/FM Transmitter Blue Plus

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : VIMESA Equipment : VHF/FM Transmitter Blue Plus Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could...

CVE-2024-47901

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-25 07:32:16+00:00| seen| https://t.me/CyberBulletin/26210 2024-10-25 07:32:17+00:00| seen| https://t.me/CyberBulletin/1270 2024-10-25 08:55:42+00:00| seen|...

CVE-2024-47904

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:31+00:00| seen| https://t.me/cvedetector/8699 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01 2026-07-14 17:37:06+00:00| seen...

CVE-2024-47903

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:30+00:00| seen| https://t.me/cvedetector/8698 2024-10-23 18:13:38+00:00| seen| https://t.me/cvedetector/8704 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01...