2025-01-23 - CVE Archive

CVE-2025-24034 Jan 23, 18:15 LOW Monitor

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Rated low severity (CVSS 3.2), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft

NVD GitHub

CVSS 3.1

3.2

EPSS

0.0%

CVE-2024-52328 Jan 23, 17:15 LOW POC Monitor

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. Rated low severity (CVSS 1.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Goat G1 Firmware Deebot 900 Firmware Deebot N8 Firmware Deebot T8 Firmware +11

NVD

CVSS 4.0

1.8

EPSS

0.0%

CVE-2024-42186 Jan 23, 03:15 LOW Monitor

BigFix Patch Download Plug-ins are affected by an insecure protocol support. Rated low severity (CVSS 2.8). No vendor patch available.

Information Disclosure

NVD

CVSS 3.1

2.8

EPSS

0.1%

CVE-2024-42185 Jan 23, 03:15 LOW Monitor

BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. Rated low severity (CVSS 2.5). No vendor patch available.

Authentication Bypass Denial Of Service XXE

NVD

CVSS 3.1

2.5

EPSS

0.1%

CVE-2024-42184 Jan 23, 03:15 LOW Monitor

BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. Rated low severity (CVSS 2.5). No vendor patch available.

Information Disclosure

NVD

CVSS 3.1

2.5

EPSS

0.1%

CVE-2024-42183 Jan 23, 02:15 LOW Monitor

BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. Rated low severity (CVSS 2.5). No vendor patch available.

Information Disclosure

NVD

CVSS 3.1

2.5

EPSS

0.1%

CVE-2024-42182 Jan 23, 01:15 LOW Monitor

BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability. Rated low severity (CVSS 2.5). No vendor patch available.

SSRF

NVD

CVSS 3.1

2.5

EPSS

0.1%