Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-31931 State: PUBLISHED Published: 2024-04-11T12:23:05.809Z Last Updated: 2024-08-02T01:59:50.587Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Products: Save as Image plugin by Pdfcrowd Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Save as Image plugin by Pdfcrowd allows Stored XSS.This issue affects Save as Image plugin by Pdfcrowd: from n/a through 3.2.1 . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/save-as-image-by-pdfcrowd/wordpress-save-as-image-plugin-by-pdfcrow
ces: - https://patchstack.com/database/vulnerability/save-as-image-by-pdfcrowd/wordpress-save-as-image-plugin-by-pdfcrowd-plugin-3-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31932 State: PUBLISHED Published: 2024-04-11T12:20:29.718Z Last Updated: 2024-08-02T01:59:50.607Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: CreativeThemes Products: Blocksy Companion Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy Companion: from n/a through 2.0.28. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/blocksy-companion/wordpress-blocksy-companion-plugin-2-0-28-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31933 State: PUBLISHED Published: 2024-04-15T09:24:06.835Z Last Updated: 2024-08-02T01:59:50.768Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Live Composer Team Products: Page Builder: Live Composer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.35. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/live-composer-page-builder/wordpress-page-builder-live-composer-plugin-1-5-35-cross-site-request-forger
se/vulnerability/live-composer-page-builder/wordpress-page-builder-live-composer-plugin-1-5-35-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31934 State: PUBLISHED Published: 2024-04-11T12:19:10.041Z Last Updated: 2024-08-02T01:59:50.568Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Link Whisper Products: Link Whisper Free Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Link Whisper Link Whisper Free.This issue affects Link Whisper Free: from n/a through 0.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/link-whisper/wordpress-link-whisper-free-plugin-0-6-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31935 State: PUBLISHED Published: 2024-04-11T12:18:03.219Z Last Updated: 2024-08-02T01:59:50.608Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: BracketSpace Products: Simple Post Notes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in BracketSpace Simple Post Notes.This issue affects Simple Post Notes: from n/a through 1.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/simple-post-notes/wordpress-simple-post-notes-plugin-1-7-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31936 State: PUBLISHED Published: 2024-04-11T12:15:46.696Z Last Updated: 2024-08-02T01:59:50.612Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AyeCode Ltd Products: UsersWP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a before 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/userswp/wordpress-userswp-front-end-login-form-user-registration-user-profile-members-directory-plugin-for-wordpress-plugin-1-2-6-cross-site-request-forgery-csrf-vulnerability?_s_
ation-user-profile-members-directory-plugin-for-wordpress-plugin-1-2-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31937 State: PUBLISHED Published: 2024-04-11T12:13:11.958Z Last Updated: 2024-08-02T01:59:50.841Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Visitor Analytics Products: TWIPLA (Visitor Analytics IO) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visitor Analytics TWIPLA (Visitor Analytics IO) allows Stored XSS.This issue affects TWIPLA (Visitor Analytics IO): from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/visitor-analytics-io/wordpress-t
t: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/visitor-analytics-io/wordpress-twipla-visitor-analytics-io-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31938 State: PUBLISHED Published: 2024-04-15T09:23:01.722Z Last Updated: 2024-08-02T01:59:50.684Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Themeinwp Products: NewsXpress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/newsxpress/wordpress-newsxpress-theme-1-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31939 State: PUBLISHED Published: 2024-04-10T19:17:54.335Z Last Updated: 2024-08-02T01:59:50.761Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Soflyy Products: Import any XML or CSV File to WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Import any XML or CSV File to WordPress.This issue affects Import any XML or CSV File to WordPress: from n/a through 3.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any-xml-or-csv-file-to-wordpress-plugin-3-7-3-cross-site-requ
.com/database/vulnerability/wp-all-import/wordpress-import-any-xml-or-csv-file-to-wordpress-plugin-3-7-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31940 State: PUBLISHED Published: 2024-04-15T09:15:47.045Z Last Updated: 2024-08-02T01:59:50.638Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: RedNao Products: Extra Product Options Builder for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in RedNao Extra Product Options Builder for WooCommerce.This issue affects Extra Product Options Builder for WooCommerce: from n/a through 1.2.104. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/additional-product-fields-for-woocommerce/wordpress-extra-product-option
- https://patchstack.com/database/vulnerability/additional-product-fields-for-woocommerce/wordpress-extra-product-options-builder-for-woocommerce-plugin-1-2-104-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31941 State: PUBLISHED Published: 2024-04-15T09:11:49.238Z Last Updated: 2024-08-02T01:59:50.623Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: CodePeople Products: CP Media Player Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/audio-and-video-player/wordpress-cp-media-player-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31942 State: PUBLISHED Published: 2024-04-15T09:10:59.100Z Last Updated: 2024-08-02T01:59:50.597Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Typps Products: Calendarista Basic Edition Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Typps Calendarista Basic Edition.This issue affects Calendarista Basic Edition: from n/a through 3.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/calendarista-basic-edition/wordpress-calendarista-basic-edition-plugin-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31943 State: PUBLISHED Published: 2024-04-10T17:41:07.108Z Last Updated: 2024-08-02T01:59:50.620Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Octolize Products: USPS Shipping for WooCommerce – Live Rates Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/flexible-shipping-usps/wordpress-usps-shipping-for-woocommerce-plugin-1-9-2-cro
://patchstack.com/database/vulnerability/flexible-shipping-usps/wordpress-usps-shipping-for-woocommerce-plugin-1-9-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31944 State: PUBLISHED Published: 2024-04-10T17:39:55.378Z Last Updated: 2024-08-02T01:59:50.639Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Octolize Products: WooCommerce UPS Shipping – Live Rates and Access Points Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/flexible-shipping-ups/wordpress-woocomme
Program Container: References: - https://patchstack.com/database/vulnerability/flexible-shipping-ups/wordpress-woocommerce-ups-shipping-plugin-2-2-4-cross-site-request-forgery-csrf-leading-to-notice-dismissal-vulnerability?_s_id=cve
CVE ID: CVE-2024-31946 State: PUBLISHED Published: 2024-07-15T00:00:00 Last Updated: 2024-10-30T16:59:21.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript, executed by the template preview. The following versions fix this: 3.7.42, 3.11.30, 4.3.25, and 4.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://advisories.stormshield.eu/2024
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://advisories.stormshield.eu/2024-007
CVE ID: CVE-2024-31947 State: PUBLISHED Published: 2024-07-12T00:00:00.000Z Last Updated: 2025-03-14T15:00:18.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://stonefly.com - https://stonefly.com/security-advisories/cve-2024-31947/
CVE ID: CVE-2024-31948 State: PUBLISHED Published: 2024-04-07T00:00:00.000Z Last Updated: 2025-11-04T16:12:07.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/15628 - https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2024-31949 State: PUBLISHED Published: 2024-04-07T00:00:00.000Z Last Updated: 2025-11-04T16:12:08.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/15640 - https://github.com/FRRouting/frr/pull/15640/commits/30a332dad86fafd2b0b6c61d23de59ed969a219b - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2024-31950 State: PUBLISHED Published: 2024-04-07T00:00:00 Last Updated: 2024-11-20T21:29:29.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/15674/ - https://github.com/FRRouting/frr/pull/15674/commits/6b84541df71772f697a7f9e6b2aaf72536aab775
CVE ID: CVE-2024-31951 State: PUBLISHED Published: 2024-04-07T00:00:00 Last Updated: 2024-11-04T16:35:33.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/15674/ - https://github.com/FRRouting/frr/pull/15674/commits/344fb4be2bc27316c74b17003c05ea40be395836
CVE ID: CVE-2024-31952 State: PUBLISHED Published: 2024-05-09T17:38:00.946Z Last Updated: 2025-02-13T15:48:00.745Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via arbitrary file permission writes. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://se
vilege escalation.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31952/
CVE ID: CVE-2024-31953 State: PUBLISHED Published: 2024-05-09T17:42:07.902Z Last Updated: 2025-02-13T15:48:01.281Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.) Additional Analyst Notes: - CISA ADP Vulnrichment: -
ed during the program installation stage for privilege escalation.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31953/
CVE ID: CVE-2024-31954 State: PUBLISHED Published: 2024-05-09T17:45:33.660Z Last Updated: 2025-02-13T15:48:01.868Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (An attacker must already have user privileges) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-su
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31954/
CVE ID: CVE-2024-31955 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-30T16:22:20.606Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AC:H/AV:P/A:N/C:N/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through Electromagnetic Fault Injection allows an attacker to successfully authenticate and write to the RPMB (Replay Protected Memory Block) area without possessing secret information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-31956 State: PUBLISHED Published: 2024-06-13T00:00:00.000Z Last Updated: 2025-03-14T16:17:11.911Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length checking, which can result in an Out-of-Bounds Write. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-31957 State: PUBLISHED Published: 2024-07-09T00:00:00.000Z Last Updated: 2025-03-25T16:49:49.969Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoS(Denial of Service) attack by unmapping an invalid length. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/q
emiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31957/
CVE ID: CVE-2024-31958 State: PUBLISHED Published: 2024-06-07T00:00:00 Last Updated: 2024-10-29T20:23:31.572Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in an Out-of-Bounds Write. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-31959 State: PUBLISHED Published: 2024-06-07T00:00:00 Last Updated: 2024-08-02T01:59:50.688Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-31960 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T19:33:58.391Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31960/
CVE ID: CVE-2024-31961 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-02T01:59:50.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parameter. Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - https://bugs.sonic-technology.com/cve-2024-31961.html
CVE ID: CVE-2024-31963 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T01:59:50.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE P
execute arbitrary commands within the context of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006
CVE ID: CVE-2024-31964 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T01:59:50.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication control. A successful exploit could allow an attacker to modify system configuration settings and potentially cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0007