CVE-2025-21395

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:17+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113828090083011005 2025-01-14 18:23:32+00:00| seen|...

CVE-2025-21300

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpujggk332p 2025-01-14 23:41:25+00:00| seen|...

CVE-2024-35276

creationtimestamp| type| source ---|---|--- 2025-01-14 14:16:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvdankk2t 2025-01-14 14:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113827296140055328 2025-01-14 21:10:36+00:00| seen|...

CVE-2024-11863

creationtimestamp| type| source ---|---|--- 2025-01-14 13:52:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113827035656023381 2025-01-14 14:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgugf2wo2t 2025-01-14 16:18:52+00:00| seen|...

Belledonne Communications Linphone-Desktop

RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

Incorrect UI Reporting

github.com/mattermost/mattermost-server is vulnerable to Incorrect UI reporting. The vulnerability is due to inaccurate reporting of missing settings, which allows an attacker to exploit misconfigurations. This could lead to manipulation of the Calls feature or unauthorized access to sensitive da...

CVE-2024-57631

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3buny7k2h 2025-01-14 01:31:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113824123335673302...

CVE-2024-57664

creationtimestamp| type| source ---|---|--- 2025-01-14 01:07:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1425 2025-01-14 01:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3eguzqv2t 2025-01-14 03:31:37+00:00| seen|...

IBM Cognos Controller Certificate Verification Unauthorized Access

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller is related to improper verification of certificates. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Cognos Controller Unprotected Accounting Data

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the use of rigidly encrypted account data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acces...

IBM Cognos Controller Error Report Unauthorized Access

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could allow man-in-the-middle attacks which could result in information disclosure, integrity issues and operational failures. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment...

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...

CVE-2024-47897

creationtimestamp| type| source ---|---|--- 2025-01-13 10:35:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113820600839220167 2025-01-13 11:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmmcaon5s2e 2025-01-13 11:47:32+00:00| seen|...

CVE-2025-0412

creationtimestamp| type| source ---|---|--- 2025-01-13 03:30:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113818930919655970 2025-01-13 04:06:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1350 2025-01-13 04:15:51+00:00| seen|...

HCL DRYiCE MyXalytics security vulnerabilities

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to a plaintext transfer of sensitive information vulnerability...

HCL DRYiCE MyXalytics security vulnerabilities

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to a session fixation vulnerability...

HCL DRYiCE MyXalytics security vulnerabilities

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to a password policy misimplementation vulnerability...

HCL DRYiCE MyXalytics security vulnerabilities

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from susceptibility to a weak input validation vulnerability...

CVE-2024-9134

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges...