CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-46923	An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at... Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver. EPSS Score: 0.04% Source: CVE February 13th, 2025 (5 months ago)
CVE-2024-46922	An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at... Description: An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver. EPSS Score: 0.04% Source: CVE February 13th, 2025 (5 months ago)
CVE-2024-45461	Apache CloudStack Quota plugin: Access checks not enforced in Quota Description: The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to access and modify quota-related configurations and data. This issue affects Apache CloudStack from 4.7.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1, where the Quota feature is enabled. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Alternatively, users that do not use the Quota feature are advised to disabled the plugin by setting the global setting "quota.enable.service" to "false". EPSS Score: 0.07% Source: CVE February 13th, 2025 (5 months ago)
CVE-2024-34521	A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an... Description: A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative user to access system files with the file permissions of the privileged system user running the application. EPSS Score: 0.04% Source: CVE February 13th, 2025 (5 months ago)
CVE-2024-34520	An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an... Description: An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls. EPSS Score: 0.04% Source: CVE February 13th, 2025 (5 months ago)
CVE-2024-32838	Apache Fineract: SQL injection vulnerabilities in offices API endpoint Description: SQL Injection vulnerability in various API endpoints - offices, dashboards, etc. Apache Fineract versions 1.9 and before have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API endpoints' query parameter. Users are recommended to upgrade to version 1.10.1, which fixes this issue. A SQL Validator has been implemented which allows us to configure a series of tests and checks against our SQL queries that will allow us to validate and protect against nearly all potential SQL injection attacks. EPSS Score: 0.04% Source: CVE February 13th, 2025 (5 months ago)
	Daily Dose of Dark Web Informer - February 12th, 2025 Description: This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts. Source: DarkWebInformer February 12th, 2025 (5 months ago)
	A Threat Actor Allegedly is Selling RDWeb Access to an Unidentified Insurance Company in the USA Description: A Threat Actor Allegedly is Selling RDWeb Access to an Unidentified Insurance Company in the USA Source: DarkWebInformer February 12th, 2025 (5 months ago)
	Surge in attacks exploiting old ThinkPHP and ownCloud flaws Description: Increased hacker activity has been observed in attempts to compromise poorly maintained devices that are vulnerable to older security issues from 2022 and 2023. [...] Source: BleepingComputer February 12th, 2025 (5 months ago)
	zkLend loses $9.5M in crypto heist, asks hacker to return 90% Description: Decentralized money lender zkLend suffered a breach where threat actors exploited a smart contract flaw to steal 3,600 Ethereum, worth $9.5 million at the time. [...] Source: BleepingComputer February 12th, 2025 (5 months ago)