Security Digest archive
January 2025
3 editorial briefs, 14 known exploited (cisa kev) additions and 14 critical advisories across 15 digest days.
Friday, January 31, 2025
- Critical 1 advisory: net.sourceforge.pmd:pmd-designer
Thursday, January 30, 2025
- Critical 1 advisory: org.openmrs:openmrs
Wednesday, January 29, 2025
- KEV CVE-2025-24085 Apple Multiple Products
- Critical 1 advisory: ai.djl:api
Tuesday, January 28, 2025
- Critical 1 advisory: ismp-grandpa
Friday, January 24, 2025
- KEV CVE-2025-23006 SonicWall SMA1000 Appliances
Thursday, January 23, 2025
- KEV CVE-2020-11023 JQuery JQuery
Tuesday, January 21, 2025
- Critical 1 advisory: org.apache.ranger:ranger
Thursday, January 16, 2025
- KEV CVE-2024-50603 Aviatrix Controllers
Wednesday, January 15, 2025
- Critical 2 advisories: islandora/crayfish, sentry
Tuesday, January 14, 2025
- Check exposure rsync: Six Flaws Incl. Daemon Heap Overflow (CVE-2024-12084)
- Check exposure FortiOS 7.0 Websocket Auth Bypass to Super-Admin
- KEV CVE-2025-21335 Microsoft Windows
- KEV CVE-2025-21334 Microsoft Windows
- KEV CVE-2025-21333 Microsoft Windows
- KEV CVE-2024-55591 Fortinet FortiOS and FortiProxy
- Critical 4 advisories: mongoose, org.xwiki.platform:xwiki-platform-realt…, gradio, rasa-pro
Monday, January 13, 2025
- KEV CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)
- KEV CVE-2023-48365 Qlik Sense
Wednesday, January 8, 2025
- Check exposure Ivanti Connect Secure Zero-Day RCE (CVE-2025-0282)
- KEV CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways
- Critical 1 advisory: org.apache.openmeetings:openmeetings-pa…
Tuesday, January 7, 2025
- KEV CVE-2024-55550 Mitel MiCollab
- KEV CVE-2024-41713 Mitel MiCollab
- KEV CVE-2020-2883 Oracle WebLogic Server
Monday, January 6, 2025
- Critical 1 advisory: gopkg.in/src-d/go-git.v4
Thursday, January 2, 2025
- Critical 1 advisory: path-sanitizer