CVE-2024-50349

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt i.e. without using any credential helper, it prints out the host name for whic...

SUSE-SU-2025:0102-1 Security update for apache2-mod_jk

This update for apache2-modjk fixes the following issues: - Update to version 1.2.50: - CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or denial of service. bsc1230916 - CVE-2023-41081: Fixed information disclosure in modjk...

GHSA-R5PH-XG7Q-XFRP

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

GHSA-HMG8-H7QF-7CXR

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:11:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1589...

CVE-2024-50338

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 19:16:10+00:00| seen...

CVE-2024-53263

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 20:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2x5e4kp2f 2025-01-14 22:23:01+00:00| seen|...

GHSA-Q6R2-X2CC-VRP7

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-15 15:10:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1767...

CVE-2024-50349

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 18:09:49+00:00| seen| https://bsky.app/profile/top4all.bsky.social/post/3lfptvqqems2k 2025-01-14 19:11:33+00:00|...

GHSA-86C2-4X57-WC8G

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

CVE-2024-29980

creationtimestamp| type| source ---|---|--- 2025-01-14 16:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpnk6foyv2e 2025-01-14 16:48:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfppeahaqp2r 2025-01-14 17:34:11+00:00| seen|...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM. CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates: Ivanti Avalanchelink is...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-014-01 Hitachi Energy FOXMAN-UN ICSA-25-014-02 Schneider Electric Vijeo Designer...

CVE-2025-0147

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:49+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5iqgtcn2n 2025-01-15 07:03:45+00:00| seen| https://t.me/CyberBulletin/2077 2025-01-15 19:34:06+00:00| seen|...

January 14, 2025—KB5050061 (Security-only update)

None None...

January 14, 2025—KB5050049 (Monthly Rollup)

None None...

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57650

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57651

creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1435 2025-01-14 01:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dh4u6f2t 2025-01-14 02:46:33+00:00| seen|...

Updated thunderbird packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...

MGASA-2025-0009 Updated firefox packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...