Skip to main content

Recently Updated Pages

CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728 can be exploited in a chain to allow full compromise of a SimpleHelp server

Active Exploitation of Critical Vulnera...

Threat ID:CC-4623 Threat Severity:Medium Published:14 February 2025 2:03 PM Summary CVE-2024-...

Updated 7 months ago by Quyen Tran Gia

Attack chain using CVE-2025-0108 and CVE-2025-0111 has been observed in the wild

Palo Alto Networks Releases Security Up...

Threat ID:CC-4621 Threat Severity:Medium Published:13 February 2025 3:14 PM Summary Attack ch...

Updated 7 months ago by Quyen Tran Gia

Three advisories cover vulnerabilities and weaknesses in Ivanti Cloud Services Application (CSA), Ivanti Neurons for MDM, Ivanti Connect Secure, Policy Secure, and Secure Access Client.

Ivanti Releases February 2025 Security ...

Threat ID:CC-4620 Threat Severity:Medium Published:12 February 2025 4:41 PM Summary Three adv...

Updated 7 months ago by Quyen Tran Gia

A proof-of-concept exploit has been published for CVE-2024-53704, which affects SonicWall NGFWs

SonicOS SSL VPN Authentication Bypass V...

Threat ID:CC-4619 Threat Severity:High Published:12 February 2025 3:30 PM Summary A proof-of-...

Updated 7 months ago by Quyen Tran Gia

Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited

Microsoft Releases February 2025 Securi...

Threat ID:CC-4618 Threat Severity:Medium Published:12 February 2025 12:04 PM Summary Schedule...

Updated 7 months ago by Quyen Tran Gia

Exploitation of this vulnerability could allow an attacker to read arbitrary files, including stored credentials

Proof-of-Concept Exploit for AnyDesk Vu...

Threat ID:CC-4615 Threat Severity:Medium Published:11 February 2025 3:21 PM Summary Exploitat...

Updated 7 months ago by Quyen Tran Gia

A privileged attacker could exploit CVE-2025-1002 to alter network traffic and perform a machine-in-the-middle attack

MicroDicom Releases DICOM Viewer Softwa...

Threat ID:CC-4616 Threat Severity:Medium Published:11 February 2025 3:21 PM Summary A privile...

Updated 7 months ago by Quyen Tran Gia

Nine security advisories address multiple vulnerabilities, including one critical and two high severity advisories

Cisco Releases Security Advisories for ...

Threat ID:CC-4614 Threat Severity:Medium Published:6 February 2025 3:11 PM Summary Nine secur...

Updated 7 months ago by Quyen Tran Gia

A vulnerability has been discovered in the TeamViewer Clients for Windows

TeamViewer Releases Security Updates fo...

Threat ID:CC-4613 Threat Severity:Medium Published:31 January 2025 4:13 PM Summary A vulnerab...

Updated 7 months ago by Quyen Tran Gia

CISA has found evidence of Contec CMS8000 and re-labelled Epsimed MN-120 devices beaconing to a public IP address

Potential Backdoor Embedded in Contec H...

Threat ID:CC-4612 Threat Severity:Medium Published:31 January 2025 2:34 PM Summary CISA has f...

Updated 7 months ago by Quyen Tran Gia

Security updates include remediation for an exploited zero-day privilege escalation vulnerability affecting iOS, iPadOS, and macOS

Apple Releases Security Updates for Mul...

Threat ID:CC-4611 Threat Severity:Medium Published:28 January 2025 3:31 PM Summary Security u...

Updated 7 months ago by Quyen Tran Gia

New PageObserved exploitation has involved targeted spear-phishing campaigns, using homoglyph attacks to spoof document extensions to lure users

Active Exploitation Reported for CVE-20...

Threat ID:CC-4610 Threat Severity:Medium Published:27 January 2025 4:58 PM Summary Observed e...

Updated 7 months ago by Quyen Tran Gia

Exploitation could lead to execution of arbitrary OS commands in SonicWall SMA1000 Series Appliances

Exploitation of Critical Vulnerability ...

Threat ID:CC-4609 Threat Severity:High Published:23 January 2025 2:27 PM Summary Exploitation...

Updated 7 months ago by Quyen Tran Gia

Security researchers claim CVE-2024-53691 could lead to RCE

Proof-of-Concept Exploit Released for C...

Threat ID:CC-4608 Threat Severity:Medium Published:17 January 2025 4:05 PM Summary Security r...

Updated 7 months ago by Quyen Tran Gia

Scheduled updates for Microsoft products, including security updates for 159 vulnerabilities, with three reported as actively exploited

Microsoft Releases January 2025 Securit...

Threat ID:CC-4607 Threat Severity:Medium Published:15 January 2025 4:12 PM Summary Scheduled ...

Updated 7 months ago by Quyen Tran Gia

Updates address 4 critical and 12 high severity vulnerabilities

Ivanti Releases January 2025 Updates fo...

Threat ID:CC-4606 Threat Severity:Medium Published:15 January 2025 2:27 PM Summary Updates ad...

Updated 7 months ago by Quyen Tran Gia

Exploitation of critical vulnerability CVE-2023-37936 could allow an unauthenticated attacker to perform RCE

Fortinet Releases Security Advisory for...

Threat ID:CC-4605 Threat Severity:Medium Published:15 January 2025 2:22 PM Summary Exploitati...

Updated 7 months ago by Quyen Tran Gia

CVE-2024-55591 could allow an unauthenticated remote attacker to gain super-admin privileges

Active Exploitation of Zero-Day Vulnera...

Threat ID:CC-4604 Threat Severity:High Published:14 January 2025 4:58 PM Summary CVE-2024-555...

Updated 7 months ago by Quyen Tran Gia

Updates address two critical vulnerabilities which could lead to information disclosure or privilege escalation, and fourteen others affecting multiple products

SAP Releases January 2025 Updates

Threat ID:CC-4603 Threat Severity:Medium Published:14 January 2025 3:22 PM Summary Updates ad...

Updated 7 months ago by Quyen Tran Gia

CVE-2025-0282 could allow an unauthenticated attacker to achieve RCE and is under active exploitation. Patches also fix CVE-2025-0283 which could be exploited to allow a local attacker to esc

Active Exploitation of Zero-Day Vulnera...

Threat ID:CC-4602 Threat Severity:High Published:9 January 2025 11:30 AM Summary CVE-2025-028...

Updated 7 months ago by Quyen Tran Gia