#cisa

共收录 92 条相关情报。

← 返回所有主题
威胁情报2026-06-02 发布INFO

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2025-48595 · CVE-2022-0492

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-06-01 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2024-21182

2026年6月1日,美国网络安全与基础设施安全局(CISA)将CVE-2024-21182添加到已知被利用漏洞(KEV)目录中。该漏洞是Oracle WebLogic Server中的一个未指定漏洞,根据证据已被积极利用。CISA依据具有约

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-29 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-0257

2026年5月29日,美国网络安全和基础设施安全局(CISA)将一个新的漏洞CVE-2026-0257添加到其已知被利用漏洞(KEV)目录中,原因是存在主动利用的证据。该漏洞是Palo Alto Networks PAN-OS的身份验证绕过

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-27 发布INFO

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CVE-2026-48027 · CVE-2026-8398 · CVE-2026-45321

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of acti

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

ABB Terra AC

CVE-2025-5517

CISA发布了一份关于ABB Terra AC电动汽车充电桩漏洞的公告(ICSA-26-146-01)。该漏洞被编号为CVE-2025-5517,属于堆缓冲区溢出(CWE-122),CVSS评分为6.8(中等)。攻击者可以利用不安全的HTT

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

Eppendorf BioFlo 320

CVE-2026-7251

CISA发布了一份针对Eppendorf BioFlo 320生物反应器的ICS医疗咨询(ICSMA-26-146-01),披露了一个关键漏洞CVE-2026-7251,CVSS评分9.8。该漏洞源于VNC服务器使用了硬编码密码(CWE-2

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

ABB AC500 V2

CVE-2025-7745

CISA发布了一份关于ABB AC500 V2可编程逻辑控制器(PLC)中缓冲区超读漏洞(CVE-2025-7745)的咨询通告。该漏洞影响AC500 V2固件版本2.5.2及更早版本(版本2.5.3于2016年发布并修复了该漏洞)。漏洞由

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-48172

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

ABB Ability Camera Connect

CVE-2023-47360 · CVE-2024-46461

View CSAF Summary ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)

CVE-2025-3450

View CSAF Summary An update is available that resolves a vulnerability identified by B&Rs internal security analysis in

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

ABB LVS MConfig

CVE-2025-9970

View CSAF Summary ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as a

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

ABB AbilityTM Zenon Remote Transport Vulnerability

CVE-2025-8754

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. The vulner

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-22 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-9082

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

Hitachi Energy GMS600

CVE-2022-4304

Hitachi Energy GMS600是一款工业控制产品,CISA发布安全公告指出其使用的OpenSSL组件存在CVE-2022-4304漏洞。该漏洞为基于时序的侧信道攻击,影响RSA解密实现,攻击者可通过发送大量试验消息并记录处理时间

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2025-34291 · CVE-2026-34926

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

ABB Terra AC Wallbox

CVE-2025-10504 · CVE-2025-12143 · CVE-2025-12142

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacke

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

ABB B&R Automation Studio

CVE-2023-7104 · CVE-2020-13631 · CVE-2025-3277 · CVE-2015-6607 · CVE-2020-11655 · CVE-2020-13632 · CVE-2015-5895 · CVE-2020-15358 · CVE-2017-10989 · CVE-2018-20506 · CVE-2019-19645 · CVE-2022-35737 · CVE-2015-3717 · CVE-2015-3416 · CVE-2018-20505 · CVE-2020-11656 · CVE-2018-8740 · CVE-2020-13435 · CVE-2025-6965 · CVE-2019-8457 · CVE-2020-13434 · CVE-2019-19646 · CVE-2020-13630 · CVE-2016-6153 · CVE-2018-20346

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An updat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

ABB B&R Automation Runtime

CVE-2025-3449 · CVE-2025-11498 · CVE-2025-3448

View CSAF Summary An update is available that resolves a vulnerability identified by B&Rs internal security analysis in

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

ABB B&R PCs

CVE-2023-45237 · CVE-2023-45232 · CVE-2023-45234 · CVE-2023-45231 · CVE-2023-45230 · CVE-2023-45229 · CVE-2023-45235 · CVE-2023-45236 · CVE-2023-45233

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An updat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-20 发布INFO

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CVE-2026-45498 · CVE-2009-3459 · CVE-2010-0249 · CVE-2008-4250 · CVE-2026-41091 · CVE-2010-0806 · CVE-2009-1537

CISA于2026年5月20日将7个已知被利用的漏洞(KEV)添加到其已知被利用漏洞目录中。这些漏洞包括:CVE-2008-4250(Microsoft Windows缓冲区溢出漏洞)、CVE-2009-1537(Microsoft Dir

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories