New Guidance for SIEM and SOAR Implementation

Today, CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre ASD’s ACSC and other international and U.S. partners, released new guidance for organizations seeking to procure Security Information and Event Management SIEM and Security Orchestration,...

CVE-2025-40665

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17564 2025-05-26 14:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3eb24njm2a...

CVE-2024-48848

creationtimestamp| type| source ---|---|--- 2025-05-23 01:13:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpshazhzba2k...

CVE-2025-5076

creationtimestamp| type| source ---|---|--- 2025-05-22 15:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprhnpk2uk2k 2025-05-22 21:25:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114553594339819076...

CVE-2025-5075

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17299 2025-05-22 15:28:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprgkzjmei22...

CVE-2013-1615

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

CVE-2013-1614

Multiple cross-site scripting XSS vulnerabilities in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1613

SQL injection vulnerability in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0160

creationtimestamp| type| source ---|---|--- 2025-05-21 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lppir3lkrw2i...

CVE-2025-5033

creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17157 2025-05-21 22:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppndktzkz2l...

CVE-2025-48416

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anee3t2p...

CVE-2025-48201

creationtimestamp| type| source ---|---|--- 2025-05-21 15:42:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17131 2025-05-21 17:18:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4aoucj72n...

CVE-2025-37907

No description is available for this CVE...

CVE-2025-37922

No description is available for this CVE...

The vulnerability in the XMLRPC software of the UserGate Next-Generation Firewall (NGFW), a unified management center called the UserGate Management Center (UGMC), the UserGate Log Analyzer (LogAn) system for log collection, the UserGate Security Information and Event Management (SIEM) system, and the UserGate Web Application Firewall (WAF) allows attackers to disclose protected information.

The vulnerability of the XMLRPC software on the UserGate Next-Generation Firewall NGFW, as well as the UserGate Management Center UGMC and the UserGate Log Analyzer LogAn system, is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

CVE-2025-48018

creationtimestamp| type| source ---|---|--- 2025-05-20 16:28:13+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmix7zrbf52...

CVE-2025-30193

creationtimestamp| type| source ---|---|--- 2025-05-20 11:18:38+00:00| seen| https://bsky.app/profile/powerdns.bsky.social/post/3lplxoi5dlk2e 2025-05-20 11:18:55+00:00| seen| https://bsky.app/profile/powerdns.bsky.social/post/3lplxozplrk2e 2025-05-20 11:40:19+00:00| seen|...

CVE-2025-4917

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16832 2025-05-19 09:13:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7zsu2l2v...

CGA-J53W-6WGV-HFW4

Bulletin has no description...

CVE-2025-4833

creationtimestamp| type| source ---|---|--- 2025-05-17 18:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpf73ryhze2h 2025-05-17 20:27:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfevg76yid2...