CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-2284	Santesoft Sante PACS Server Access of Uninitialized Pointer DoS Description: A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe". CVSS: HIGH (7.5) EPSS Score: 0.06% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-2265	Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation Description: The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte CVSS: HIGH (7.8) EPSS Score: 0.01% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-2264	Santesoft Sante PACS Server Path Traversal Information Disclosure Description: A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. CVSS: HIGH (7.5) EPSS Score: 56.51% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-2079	Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could... Description: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions. CVSS: HIGH (8.7) EPSS Score: 0.05% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-1652	MODEL File Parsing Out-of-Bounds Read Vulnerability Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-1651	MODEL File Parsing Heap-Based Buffer Overflow Vulnerability Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-1650	CATPRODUCT File Parsing Uninitialized Variable Vulnerability Description: A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-1649	CATPRODUCT File Parsing Uninitialized Variable Vulnerability Description: A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-1433	MODEL File Parsing Out-of-Bounds Read Vulnerability Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: CVE March 13th, 2025 (4 months ago)
CVE-2025-1432	3DM File Parsing Use-After-Free Vulnerability Description: A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: CVE March 13th, 2025 (4 months ago)