CVE-2025-21311

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:08:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113828044694890704 2025-01-14 18:21:18+00:00| seen|...

CVE-2025-21186

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucl7vgi2j 2025-01-14 18:20:17+00:00| seen|...

CVE-2025-21362

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:11:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113828054122742443 2025-01-14 18:23:00+00:00| seen|...

CVE-2024-10811

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-50338

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 19:16:10+00:00| seen...

CVE-2024-7344

creationtimestamp| type| source ---|---|--- 2025-01-14 13:33:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113826960793774858 2025-01-14 14:18:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgxu5na52f 2025-01-14 14:43:14+00:00| seen|...

Microsoft Releases January 2025 Security Updates

Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:...

Fortinet Releases Security Updates for Multiple Products

Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Fortin...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Photoshop, Animate, and Illustrator for iPad. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

CVE-2024-53649

creationtimestamp| type| source ---|---|--- 2025-01-14 10:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113826249862815171 2025-01-14 10:36:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113826265651859688 2025-01-14 11:16:01+00:00| seen|...

January 14, 2025—KB5050004 (Monthly Rollup)

None None...

January 14, 2025-Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 (KB5050181)

None None...

KB5049994: Cumulative security update for Internet Explorer: January 14, 2025

None None...

Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass

This CVE was assigned by CERT CC. The purpose of this document is to attest to the fact that the products listed in the Security Updates table have been updated to protect against this vulnerability...

MGASA-2025-0010 Updated thunderbird packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...

Security Updates for Microsoft Visual Studio 2022 17.12 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Security Updates for Microsoft SharePoint Server Subscription Edition (January 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL...

Security Updates for Microsoft Visual Studio 2022 17.6 / 17.8 / 17.10 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Security Updates for Microsoft Visual Studio 2019 16.11 / 2017 15.9 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

PT-2025-1114

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A critical elevation-of-privilege vulnerability in Active Directory Domain Services allows attackers to gain SYSTEM-level access. The vulnerability is related to erro...