Security Digest archive
March 2025
6 editorial briefs, 32 known exploited (cisa kev) additions and 49 critical advisories across 20 digest days.
Monday, March 31, 2025
- KEV CVE-2024-20439 Cisco Smart Licensing Utility
- Critical 1 advisory: github.com/beego/beego/v2
Thursday, March 27, 2025
- KEV CVE-2025-2783 Google Chromium Mojo
Wednesday, March 26, 2025
- KEV CVE-2019-9875 Sitecore CMS and Experience Platform (XP)
- KEV CVE-2019-9874 Sitecore CMS and Experience Platform (XP)
Tuesday, March 25, 2025
- Most can relax Chrome CVE-2025-2783: Mojo Sandbox Escape Zero-Day
Monday, March 24, 2025
- Check exposure IngressNightmare: ingress-nginx Cluster Takeover RCE
- KEV CVE-2025-30154 reviewdog action-setup GitHub Action
- Critical 2 advisories: org.opendaylight.sfc:sfc-parent, k8s.io/ingress-nginx
Friday, March 21, 2025
- Check exposure CrushFTP Auth Bypass CVE-2025-31161 Exploited in the Wild
- Check exposure Next.js Middleware Authorization Bypass (CVE-2025-29927)
- Critical 2 advisories: InvokeAI, next
Thursday, March 20, 2025
- Critical 22 advisories: llama-index-packs-finchat, github.com/kcp-dev/kcp, dbgpt, vllm, horovod, agentscope, dbgpt, dbgpt, h2o, vllm, agentscope, agentscope …
Wednesday, March 19, 2025
- KEV CVE-2025-1316 Edimax IC-7100 IP Camera
- KEV CVE-2024-48248 NAKIVO Backup and Replication
- KEV CVE-2017-12637 SAP NetWeaver
- Critical 1 advisory: vllm
Tuesday, March 18, 2025
- KEV CVE-2025-30066 tj-actions changed-files GitHub Action
- KEV CVE-2025-24472 Fortinet FortiOS and FortiProxy
Friday, March 14, 2025
- Check exposure tj-actions/changed-files: GitHub Action Leaked CI Secrets
- Critical 5 advisories: xml-crypto, camaleon_cms, xml-crypto, flowise, qiskit-terra
Thursday, March 13, 2025
- KEV CVE-2025-24201 Apple Multiple Products
- KEV CVE-2025-21590 Juniper Junos OS
- Critical 2 advisories: flowise, github.com/cheqd/cheqd-node
Wednesday, March 12, 2025
- Critical 5 advisories: graphql, omniauth-saml, ruby-saml, github.com/cosmos/ibc-go, ruby-saml
Tuesday, March 11, 2025
- KEV CVE-2025-26633 Microsoft Windows
- KEV CVE-2025-24993 Microsoft Windows
- KEV CVE-2025-24991 Microsoft Windows
- KEV CVE-2025-24985 Microsoft Windows
- KEV CVE-2025-24984 Microsoft Windows
- KEV CVE-2025-24983 Microsoft Windows
- Critical 1 advisory: github.com/cheqd/cheqd-node
Monday, March 10, 2025
- Most can relax Apache Tomcat Partial PUT RCE (CVE-2025-24813)
- KEV CVE-2025-25181 Advantive VeraCore
- KEV CVE-2024-57968 Advantive VeraCore
- KEV CVE-2024-13161 Ivanti Endpoint Manager (EPM)
- KEV CVE-2024-13160 Ivanti Endpoint Manager (EPM)
- KEV CVE-2024-13159 Ivanti Endpoint Manager (EPM)
- Critical 2 advisories: org.apache.tomcat:tomcat-catalina, plotai
Friday, March 7, 2025
- Critical 1 advisory: com.xwiki.confluencepro:application-con…
Thursday, March 6, 2025
- Critical 1 advisory: github.com/fleetdm/fleet/v4
Wednesday, March 5, 2025
- Critical 2 advisories: org.lucee:lucee, livewire/volt
Tuesday, March 4, 2025
- KEV CVE-2025-22226 VMware ESXi, Workstation, and Fusion
- KEV CVE-2025-22225 VMware ESXi
- KEV CVE-2025-22224 VMware ESXi and Workstation
- KEV CVE-2024-50302 Linux Kernel
- Critical 1 advisory: github.com/zitadel/zitadel/v2
Monday, March 3, 2025
- KEV CVE-2024-4885 Progress WhatsUp Gold
- KEV CVE-2023-20118 Cisco Small Business RV Series Routers
- KEV CVE-2022-43939 Hitachi Vantara Pentaho Business Analytics (BA) Server
- KEV CVE-2022-43769 Hitachi Vantara Pentaho Business Analytics (BA) Server
- KEV CVE-2018-8639 Microsoft Windows
Sunday, March 2, 2025
- Critical 1 advisory: oxidized-web