CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-20146	In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code... Description: In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue ID: MSV-1835. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-20145	In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker... Description: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09290940; Issue ID: MSV-2040. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-20144	In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker... Description: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056; Issue ID: MSV-2041. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-20143	In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker... Description: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056; Issue ID: MSV-2069. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-20140	In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious... Description: In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-20105	In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious... Description: In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09062027; Issue ID: MSV-1743. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-12311	Email Subscribers < 5.7.44 - Admin+ SQL Injection Description: The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-12302	Icegram Engage < 3.1.32 - Author+ Stored XSS Description: The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-11849	Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS Description: The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)
CVE-2024-11356	Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking Description: The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks. EPSS Score: 0.04% Source: CVE January 7th, 2025 (6 months ago)