Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-38389	Description: There is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed. EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-38309	Description: There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and earlier), and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed. EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-31082	Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap Description: A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads. EPSS Score: 0.05% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-2199	389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c Description: A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input. EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-10896	Logo Slider < 4.5.0 - Contributor+ Stored XSS Description: The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-10510	adBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Admin+ Stored XSS Description: The adBuddy+ (AdBlocker Detection) by NetfunkDesign WordPress plugin through 1.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-10493	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
CVE-2024-10473	Logo Slider < 4.5.0 - Author+ Stored XSS Description: The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing them in pages where the Logo Slider shortcode is embed, which could allow users with a role as low as Author to perform Cross-Site Scripting attacks. EPSS Score: 0.04% Source: CVE November 29th, 2024 (5 months ago)
	Over Two Dozen Flaws Identified in Advantech Industrial Wi-Fi Access Points – Patch ASAP Description: Nearly two dozen security vulnerabilities have been disclosed in Advantech EKI industrial-grade wireless access point devices, some of which could be weaponized to bypass authentication and execute code with elevated privileges. "These vulnerabilities pose significant risks, allowing unauthenticated remote code execution with root privileges, thereby fully compromising the confidentiality, Source: TheHackerNews November 28th, 2024 (5 months ago)
	Tor needs 200 new WebTunnel bridges to fight censorship Description: The Tor Project has put out an urgent call to the privacy community asking volunteers to help deploy 200 new WebTunnel bridges by the end of the year to fight government censorship. [...] Source: BleepingComputer November 28th, 2024 (5 months ago)