PT-2025-1114

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A critical elevation-of-privilege vulnerability in Active Directory Domain Services allows attackers to gain SYSTEM-level access. The vulnerability is related to erro...

KB5050682: Servicing stack update for Windows Server 2008 SP2: January 14, 2025

None None...

KB5050681: Servicing stack update for Windows Server 2008 R2 SP1: January 14, 2025

None None...

Security Updates for Microsoft SharePoint Server 2016 (January 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...

Security Updates for Microsoft Office Products (January 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity and availability of the system/application...

Security Updates for Microsoft SharePoint Server 2019 (January 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...

KB5050115: Servicing stack update for Windows Server 2012 R2: January 14, 2025

None None...

KB5050116: Servicing stack update for Windows Server 2012: January 14, 2025

None None...

Siemens SIPROTEC 5 Products

SUMMARY Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for several affected products and...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.8 Images Update

New images are available for Red Hat build of Keycloak 26.0.8 and Red Hat build of Keycloak 26.0.8 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20019)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20019 advisory. - objtool: Default ignore INT3 for unreachable Peter Zijlstra Orabug: 37273706 CVE-2022-29901 Tenable has extracted the preceding description bloc...

keycloak -- Multiple security fixes

Keycloak reports: This update includes 2 security fixes: CVE-2024-11734: Unrestricted admin use of system and environment variables CVE-2024-11736: Denial of Service in Keycloak Server via Security Headers...

CISA: 2018 ISC Annual Review - Spanish Translation

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Fedora 41 : python-jinja2 (2025-7b6e208ef2)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7b6e208ef2 advisory. - Update to 3.1.5 - Security fix for CVE-2024-56201 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CISA: ILT Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Fedora 40 : suricata (2025-aa783e1cbd)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-aa783e1cbd advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 41 : suricata (2025-e24171db6d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e24171db6d advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

CGA-HRWF-5WXM-58JC

Bulletin has no description...

CVE-2024-5872

creationtimestamp| type| source ---|---|--- 2025-01-10 20:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113805966910344177 2025-01-10 21:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4gh53kt22 2025-01-10 21:38:21+00:00| seen|...

CVE-2024-57211

creationtimestamp| type| source ---|---|--- 2025-01-10 17:13:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113805177877958565 2025-01-10 17:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffozyduyr2a 2025-01-10 17:54:06+00:00| seen|...