CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-0510	Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in... Description: Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability affects Thunderbird < 128.7 and Thunderbird < 135. EPSS Score: 0.05% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-0466	Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure Description: The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message Information. EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-0451	Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in... Description: Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-0445	Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... Description: Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-0444	Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... Description: Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-0368	Banner Garden Plugin for WordPress <= 0.1.3 - Reflected XSS Description: The Banner Garden Plugin for WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users. EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2024-48445	An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters. Description: An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters. EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2024-48019	Apache Doris: allows admin users to read arbitrary files through the REST API Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to External Parties vulnerability in Apache Doris. Application administrators can read arbitrary files from the server filesystem through path traversal. Users are recommended to upgrade to version 2.1.8, 3.0.3 or later, which fixes the issue. EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2024-33601	nscd: netgroup cache may terminate daemon on memory allocation failure Description: nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. EPSS Score: 0.05% Source: CVE February 5th, 2025 (5 months ago)
CVE-2024-33411	A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to... Description: A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the my_index parameter. EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)