Fortinet Releases Security Updates for Multiple Products

Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Fortin...

Microsoft Releases January 2025 Security Updates

Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Photoshop, Animate, and Illustrator for iPad. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

CVE-2024-53649

creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249862815171 2025-01-14 10:36:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265651859688 2025-01-14 11:16:01+00:00| seen|...

MGASA-2025-0010 Updated thunderbird packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...

PT-2025-1114

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A critical elevation-of-privilege vulnerability in Active Directory Domain Services allows attackers to gain SYSTEM-level access. The vulnerability is related to erro...

Security Updates for Microsoft Office Products (January 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity and availability of the system/application...

Security Updates for Microsoft SharePoint Server Subscription Edition (January 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL...

Siemens SIPROTEC 5 Products

SUMMARY Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for several affected products and...

KB5050682: Servicing stack update for Windows Server 2008 SP2: January 14, 2025

None None...

KB5050681: Servicing stack update for Windows Server 2008 R2 SP1: January 14, 2025

None None...

KB5050116: Servicing stack update for Windows Server 2012: January 14, 2025

None None...

KB5050115: Servicing stack update for Windows Server 2012 R2: January 14, 2025

None None...

Security Updates for Microsoft SharePoint Server 2016 (January 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...

Security Updates for Microsoft Visual Studio 2019 16.11 / 2017 15.9 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Security Updates for Microsoft Visual Studio 2022 17.6 / 17.8 / 17.10 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Security Updates for Microsoft SharePoint Server 2019 (January 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...

Security Updates for Microsoft Visual Studio 2022 17.12 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.8 Images Update

New images are available for Red Hat build of Keycloak 26.0.8 and Red Hat build of Keycloak 26.0.8 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20019)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20019 advisory. - objtool: Default ignore INT3 for unreachable Peter Zijlstra Orabug: 37273706 CVE-2022-29901 Tenable has extracted the preceding description bloc...