CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-32612	HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of the... Description: HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32611	HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c. Description: HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32609	HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c. Description: HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32607	HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer. Description: HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32606	HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_str.c (called from... Description: HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_str.c (called from h5tools_dump_simple_data in tools/lib/h5tools_dump.c). EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32605	HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c). Description: HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c). EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32355	TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer... Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32354	TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer... Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32353	TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer... Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)
CVE-2024-32352	TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the... Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary. EPSS Score: 0.04% Source: CVE February 14th, 2025 (5 months ago)