CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2024-50623 |
Description: In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
CVSS: LOW (0.0) EPSS Score: 96.92%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-47577 |
Description: Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an attacker impersonating as authorized admin visits such server logs, then they get access to the customer data. The amount of leaked confidential data however is extremely limited, and the attacker has no control over what data is leaked.
CVSS: LOW (2.7) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-47576 |
Description: SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is loaded from the computer running SAP Product Lifecycle Costing Client application. That particular DLL could be replaced by a malicious one, that could execute commands as being part of SAP Product Lifecycle Costing Client Application. On a successful attack, it can cause a low impact to confidentiality but no impact to the integrity and availability of the application.
CVSS: LOW (3.3) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-46657 |
Description: Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVSS: LOW (0.0) EPSS Score: 0.05%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-46442 |
Description: An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack.
CVSS: LOW (0.0) EPSS Score: 0.05%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-46341 |
Description: TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.
CVSS: LOW (0.0) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-46340 |
Description: TP-Link TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.
CVSS: LOW (0.0) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-45494 |
Description: An issue was discovered in MSA Safety FieldServer Gateways and Embedded Modules with build revisions before 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected firmware versions.
CVSS: LOW (0.0) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-45493 |
Description: An issue was discovered in MSA Safety FieldServer Gateways and Embedded Modules with build revisions before 7.0.0. The FieldServer Gateway has internal users, whose access is supposed to be restricted to login locally on the device. However, an attacker can bypass the check for this, which might allow them to authenticate with an internal user account from the network (if they know their password).
CVSS: LOW (0.0) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|
|
CVE-2024-45476 |
Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted WRL files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS: LOW (3.3) EPSS Score: 0.04%
December 11th, 2024 (6 months ago)
|