CVE-2024-50338

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 19:16:10+00:00| seen...

CVE-2024-53263

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 20:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2x5e4kp2f 2025-01-14 22:23:01+00:00| seen|...

GHSA-R5PH-XG7Q-XFRP

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

GHSA-Q6R2-X2CC-VRP7

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-15 15:10:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1767...

CVE-2024-50349

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 18:09:49+00:00| seen| https://bsky.app/profile/top4all.bsky.social/post/3lfptvqqems2k 2025-01-14 19:11:33+00:00|...

GHSA-86C2-4X57-WC8G

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

CVE-2024-29980

creationtimestamp| type| source ---|---|--- 2025-01-14 16:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpnk6foyv2e 2025-01-14 16:48:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfppeahaqp2r 2025-01-14 17:34:11+00:00| seen|...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM. CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates: Ivanti Avalanchelink is...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-014-01 Hitachi Energy FOXMAN-UN ICSA-25-014-02 Schneider Electric Vijeo Designer...

CVE-2025-0147

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:49+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5iqgtcn2n 2025-01-15 07:03:45+00:00| seen| https://t.me/CyberBulletin/2077 2025-01-15 19:34:06+00:00| seen|...

January 14, 2025—KB5050049 (Monthly Rollup)

None None...

January 14, 2025—KB5050061 (Security-only update)

None None...

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57650

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57651

creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1435 2025-01-14 01:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dh4u6f2t 2025-01-14 02:46:33+00:00| seen|...

Updated thunderbird packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...

MGASA-2025-0009 Updated firefox packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...

CVE-2025-0068 Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker could obtain information that would otherwise be restricted. It has no impact on integrity or availability on the application...

Photon OS 5.0: Chromium PHSA-2025-5.0-0445

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0445. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fortinet Fortigate Null pointer dereference leading to sslvpn DOS (FG-IR-23-293)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-23-293 advisory. - A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all...