CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on December 10, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-345-01 MOBATIME Network Master Clock ICSA-24-345-02 Schneider Electric EcoStruxure...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-49138link is external Microsoft Windows Common Log File System CLFS Driver Heap-Based Buffer Overflow Vulnerability These types of vulnerabilities are frequent...

Microsoft Releases December 2024 Security Updates

Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:...

CVE-2024-9508

creationtimestamp| type| source ---|---|--- 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-05 2024-12-13 00:53:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113642778608388164 2024-12-13 03:13:20+00:00| seen| https://t.me/cvedetector/128...

CVE-2024-12286

creationtimestamp| type| source ---|---|--- 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-01 2024-12-10 17:46:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113629773421070243 2024-12-10 19:59:17+00:00| seen| https://t.me/cvedetector/125...

CVE-2024-10494

creationtimestamp| type| source ---|---|--- 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-04 2024-12-10 15:55:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113629340021174577 2024-12-10 18:18:41+00:00| seen| https://t.me/cvedetector/125...

CVE-2024-10496

creationtimestamp| type| source ---|---|--- 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-04 2024-12-10 16:01:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113629363345570825 2024-12-10 18:18:40+00:00| seen| https://t.me/cvedetector/125...

CVE-2024-12212

creationtimestamp| type| source ---|---|--- 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-05 2024-12-13 00:53:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113642778567397779 2024-12-13 03:13:21+00:00| seen| https://t.me/cvedetector/128...

CVE-2024-10495

creationtimestamp| type| source ---|---|--- 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-04 2024-12-10 15:55:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113629340037244956 2024-12-10 18:18:39+00:00| seen| https://t.me/cvedetector/125...

GLSA-202412-14 : HashiCorp Consul: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-14 HashiCorp Consul: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in HashiCorp Consul. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding descriptio...

CVE-2024-11158

creationtimestamp| type| source ---|---|--- 2024-12-05 17:44:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113601457861462098 2024-12-05 20:22:53+00:00| seen| https://t.me/cvedetector/12130 2024-12-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1650/...

CVE-2024-51550

creationtimestamp| type| source ---|---|--- 2024-12-05 15:21:27+00:00| seen| https://t.me/cvedetector/12089 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-51555

creationtimestamp| type| source ---|---|--- 2024-12-05 15:21:22+00:00| seen| https://t.me/cvedetector/12087 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-51551

creationtimestamp| type| source ---|---|--- 2024-12-05 15:21:21+00:00| seen| https://t.me/cvedetector/12085 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-51554

creationtimestamp| type| source ---|---|--- 2024-12-05 15:21:21+00:00| seen| https://t.me/cvedetector/12086 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-51548

creationtimestamp| type| source ---|---|--- 2024-12-05 15:21:19+00:00| seen| https://t.me/cvedetector/12083 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-51546

creationtimestamp| type| source ---|---|--- 2024-12-05 13:37:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113600487651084599 2024-12-05 15:21:26+00:00| seen| https://t.me/cvedetector/12088 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-...

CVE-2024-51545

creationtimestamp| type| source ---|---|--- 2024-12-05 13:37:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113600487637214165 2024-12-05 15:21:34+00:00| seen| https://t.me/cvedetector/12095 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-...

CVE-2024-51543

creationtimestamp| type| source ---|---|--- 2024-12-05 13:22:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113600428617635495 2024-12-05 15:21:33+00:00| seen| https://t.me/cvedetector/12093 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-...

CVE-2024-11317

creationtimestamp| type| source ---|---|--- 2024-12-05 12:52:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113600310424048169 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...