cisa-kev-update-part-i-–-january-2025

CISA KEV UPDATE Part I – January 2025

The US CISA has added 3 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on the evidence of active exploitation. CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability Description:This vulnerability affects the Mitel MiCollab application. It allows an attacker to perform a path traversal attack, which involves manipulating file paths to access files and directories that […]

CISA adds PaloAlto CVE-2024-3393 to its KEV Catalog

thecyberthrone.in - 31/12/2024 02:50

The Cybersecurity and Infrastructure Security Agency (CISA) recently added CVE-2024-3393 to its Known Exploited Vulnerabilities (KEV) Catalog. This...

CISA warns of critical Oracle, Mitel flaws exploited in attacks

bleepingcomputer.com - 07/Jan 18:45

CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems...

CVE-2024-11944: TrueNAS CORE has Severe Directory Traversal Flaw

thecyberthrone.in - 04/Jan 05:23

CVE-2024-11944 is a vulnerability identified in iXsystems TrueNAS CORE. This vulnerability is classified as a Directory Traversal and Remote Code...

Redis was affected by CVE-2024-51741 and CVE-2024-46981

thecyberthrone.in - 07/Jan 13:33

CVE-2024-51741 Description:This vulnerability affects Redis, an open-source in-memory data structure store used as a database, cache, and message...

Exploit code released for Microsoft CVE-2024-30085

thecyberthrone.in - 28/12/2024 03:53

CVE-2024-30085 is a high-severity vulnerability identified in the Windows Cloud Files Mini Filter Driver (cldflt.sys). This vulnerability arises from...

CISA Warns of Palo Alto Networks PAN-OS Vulnerability Exploited in Wild

itsecuritynews.info - 31/12/2024 13:07

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert on a critical vulnerability in Palo Alto Networks...

CVE-2024-12987 affecting DrayTek Routers

thecyberthrone.in - 01/Jan 09:58

CVE-2024-12987 is a critical security vulnerability identified in the DrayTek Vigor2960 and Vigor300B routers, specifically affecting firmware version...

CVE-2024-3393 DoS Vulnerability in Palo Alto PAN-OS

thecyberthrone.in - 27/12/2024 22:42

CVE-2024-3393 is a high-severity Denial of Service (DoS) vulnerability discovered in the DNS Security feature of Palo Alto Networks’ PAN-OS...

Palo Alto Networks Alerts on Exploit Causing Firewall Vulnerabilities

itsecuritynews.info - 02/Jan 15:31

Palo Alto Networks has issued a warning about the active exploitation of the CVE-2024-3393 denial of service (DoS) vulnerability, which attackers...

IT Security News Hourly Summary 2024-12-31 18h : 4 posts

itsecuritynews.info - 31/12/2024 17:05

4 posts were published in the last hour 17:2 : CISA Adds One Known Exploited Vulnerability to Catalog 16:32 : Hacking campaign compromised at least 16...

Rubriques :