Feb 4, 2025
3 new incidents, 0 with updates.
Started
- ClosedPatched
Apache OFBiz: OFBiz Forced Browsing Vulnerability
Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access. Added to CISA KEV on 2025-02-04.
Apache OFBizClosed Feb 4, 2025
- ClosedPatched
Paessler PRTG Network Monitor: 2 exploited vulnerabilities (CVE-2018-19410, CVE-2018-9276)
CVE-2018-19410: Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator). CVE-2018-9276: Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console. Added to CISA KEV on 2025-02-04.
Paessler PRTG Network MonitorClosed Feb 4, 2025
- ClosedPatched
Microsoft .NET Framework: .NET Framework Information Disclosure Vulnerability
Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution. Added to CISA KEV on 2025-02-04.
Microsoft .NET FrameworkClosed Feb 4, 2025
