Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-461.html
CVE ID: CVE-2024-31150 State: PUBLISHED Published: 2025-05-13T21:03:01.090Z Last Updated: 2025-05-14T14:40:27.177Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Graphics Driver software Problem Types: Information Disclosure, CWE-125 Description: Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE ID: CVE-2024-31151 State: PUBLISHED Published: 2024-10-30T13:35:20.113Z Last Updated: 2025-11-03T21:54:37.008Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: LevelOne Products: WBR-6012 Problem Types: CWE-798 Description: A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The password string can be found at addresses 0x 803cdd0f and 0x803da3e6: 803cdd0f 41 72 69 65 ds "AriesSerenaCairryNativitaMegan" 73 53 65 72 65 6e 61 43 ... It is refer
03cdd0f and 0x803da3e6: 803cdd0f 41 72 69 65 ds "AriesSerenaCairryNativitaMegan" 73 53 65 72 65 6e 61 43 ... It is referenced by the function at 0x800b78b0 and simplified in the pseudocode below: if (is_equal = strcmp(password,"AriesSerenaCairryNativitaMegan"){ ret = 3;} Where 3 is the return value to user-level access (0 being fail and 1 being admin/backdoor). While there's no legitimate functionality to change this password, once authenticated it is possible manually make a change by taking advantage of TALOS-2024-XXXXX using HTTP POST paramater "Pu" (new user password) in place of "Pa" (new admin password). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
n place of "Pa" (new admin password). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1979
CVE ID: CVE-2024-31152 State: PUBLISHED Published: 2024-10-30T13:35:18.599Z Last Updated: 2024-10-30T15:03:09.071Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: LevelOne Products: WBR-6012 Problem Types: CWE-400 Description: The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1982
CVE ID: CVE-2024-31153 State: PUBLISHED Published: 2025-02-12T21:18:45.294Z Last Updated: 2025-02-13T15:24:23.575Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) QuickAssist Technology software Problem Types: Denial of Service, CWE-20 Description: Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01124.html
CVE ID: CVE-2024-31154 State: PUBLISHED Published: 2024-11-13T21:10:46.031Z Last Updated: 2024-11-14T19:42:29.440Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server S2600BPBR Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE ID: CVE-2024-31155 State: PUBLISHED Published: 2025-02-12T21:19:16.141Z Last Updated: 2025-02-19T14:03:13.236Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: Escalation of Privilege, CWE-119 Description: Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01198.html
CVE ID: CVE-2024-31156 State: PUBLISHED Published: 2024-05-08T15:01:27.734Z Last Updated: 2024-08-02T01:46:04.426Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000138636
CVE ID: CVE-2024-31157 State: PUBLISHED Published: 2025-02-12T21:19:34.634Z Last Updated: 2025-11-03T20:37:13.887Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Processors Problem Types: Information Disclosure, CWE-665 Description: Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
CVE ID: CVE-2024-31158 State: PUBLISHED Published: 2024-11-13T21:10:44.385Z Last Updated: 2024-11-14T19:42:37.226Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board S2600BP Family Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE ID: CVE-2024-31159 State: PUBLISHED Published: 2024-06-14T03:25:03.735Z Last Updated: 2024-08-02T01:46:04.534Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: ASUS Products: Download Master Problem Types: CWE-79 Description: The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7861-1a06f-1.html - https://www.twcert.org.tw/en/cp-139-7862-e43e4-2.ht
eferences: - https://www.twcert.org.tw/tw/cp-132-7861-1a06f-1.html - https://www.twcert.org.tw/en/cp-139-7862-e43e4-2.html
CVE ID: CVE-2024-31160 State: PUBLISHED Published: 2024-06-14T03:41:21.402Z Last Updated: 2024-08-02T01:46:04.470Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: ASUS Products: Download Master Problem Types: CWE-79 Description: The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7863-49a2d-1.html - https://www.twcert.org.tw/en/cp-139-7864-d7a0d-2.html
CVE ID: CVE-2024-31161 State: PUBLISHED Published: 2024-06-14T03:53:51.560Z Last Updated: 2024-08-02T01:46:04.773Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: Download Master Problem Types: CWE-434 Description: The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload malicious web page files to the website directory, allowing arbitrary system commands to be executed upon browsing the webpage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
ted upon browsing the webpage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7865-d3823-1.html - https://www.twcert.org.tw/en/cp-139-7866-469e0-2.html
CVE ID: CVE-2024-31162 State: PUBLISHED Published: 2024-06-14T06:35:07.192Z Last Updated: 2024-08-02T01:46:04.365Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: Download Master Problem Types: CWE-78 Description: The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7867-8fad9-1.html - https://www.twcert.org.tw/en/cp-139-7868-8a760-2.ht
eferences: - https://www.twcert.org.tw/tw/cp-132-7867-8fad9-1.html - https://www.twcert.org.tw/en/cp-139-7868-8a760-2.html
CVE ID: CVE-2024-31163 State: PUBLISHED Published: 2024-06-14T06:52:50.331Z Last Updated: 2024-08-02T01:46:04.321Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: Download Master Problem Types: CWE-121 Description: ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7869-3db1d-1.html - https://www.twcert.org.tw/en/cp-139-7870-befb5-2.html
CVE ID: CVE-2024-31164 State: PUBLISHED Published: 2024-09-18T13:54:42.073Z Last Updated: 2024-09-18T15:25:44.875Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionList::unpack13. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31164
CVE ID: CVE-2024-31165 State: PUBLISHED Published: 2024-09-18T13:54:49.938Z Last Updated: 2024-09-18T15:24:52.864Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31165
CVE ID: CVE-2024-31166 State: PUBLISHED Published: 2024-09-18T13:54:58.816Z Last Updated: 2024-09-18T17:22:31.187Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::HelloElemVersionBitmap::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31166
CVE ID: CVE-2024-31167 State: PUBLISHED Published: 2024-09-18T13:55:08.993Z Last Updated: 2024-09-18T17:22:00.402Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack13. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31167
CVE ID: CVE-2024-31168 State: PUBLISHED Published: 2024-09-18T13:55:29.012Z Last Updated: 2024-09-18T17:21:28.437Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::EchoCommon::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31168
CVE ID: CVE-2024-31169 State: PUBLISHED Published: 2024-09-18T13:55:35.569Z Last Updated: 2024-09-18T17:20:51.841Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31169
CVE ID: CVE-2024-31170 State: PUBLISHED Published: 2024-09-18T13:55:49.141Z Last Updated: 2024-09-18T17:20:13.655Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyQueue::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31170
CVE ID: CVE-2024-31171 State: PUBLISHED Published: 2024-09-18T13:55:55.797Z Last Updated: 2024-09-18T17:16:56.067Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyPort::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31171
CVE ID: CVE-2024-31172 State: PUBLISHED Published: 2024-09-18T13:56:04.027Z Last Updated: 2024-09-18T17:16:08.429Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyTable::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31172
CVE ID: CVE-2024-31173 State: PUBLISHED Published: 2024-09-18T13:56:11.685Z Last Updated: 2024-09-18T17:15:29.669Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyFlow::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31173
CVE ID: CVE-2024-31174 State: PUBLISHED Published: 2024-09-18T13:56:19.235Z Last Updated: 2024-09-18T17:14:56.200Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::FeaturesReply::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31174
CVE ID: CVE-2024-31175 State: PUBLISHED Published: 2024-09-18T13:56:26.450Z Last Updated: 2024-09-18T15:24:02.640Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TablePropertiesList::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31175
CVE ID: CVE-2024-31176 State: PUBLISHED Published: 2024-09-18T13:56:33.963Z Last Updated: 2024-09-18T17:19:39.056Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropOXM::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31176
CVE ID: CVE-2024-31177 State: PUBLISHED Published: 2024-09-18T13:56:40.883Z Last Updated: 2024-09-18T17:18:53.574Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). This vulnerability is associated with program routines fluid_msg::of13::TableFeaturePropActions::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31177
CVE ID: CVE-2024-31178 State: PUBLISHED Published: 2024-09-18T13:56:49.123Z Last Updated: 2024-09-18T17:18:17.010Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropNextTables::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31178
CVE ID: CVE-2024-31179 State: PUBLISHED Published: 2024-09-18T13:56:57.810Z Last Updated: 2024-09-18T17:17:44.670Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropInstruction::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31179
CVE ID: CVE-2024-31180 State: PUBLISHED Published: 2024-09-18T13:57:06.338Z Last Updated: 2024-09-18T17:14:14.942Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupDesc::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31180
CVE ID: CVE-2024-31181 State: PUBLISHED Published: 2024-09-18T13:57:13.375Z Last Updated: 2024-09-18T17:13:42.767Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupStats::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31181
CVE ID: CVE-2024-31182 State: PUBLISHED Published: 2024-09-18T13:57:21.605Z Last Updated: 2024-09-18T15:22:59.108Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack10. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31182
CVE ID: CVE-2024-31183 State: PUBLISHED Published: 2024-09-18T13:57:28.799Z Last Updated: 2024-09-18T17:13:10.082Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::Hello::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31183