Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9092 State: PUBLISHED Published: 2024-09-23T00:31:05.209Z Last Updated: 2024-09-23T13:58:08.759Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Profile Registration without Reload Refresh Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add.php of the component Registration Form. The manipulation of the argument full_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other paramete
pting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278270 - https://vuldb.com/?ctiid.278270 - https://vuldb.com/?submit.412159 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Profile_Registration_add_php_XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9093 State: PUBLISHED Published: 2024-09-23T00:31:07.217Z Last Updated: 2024-09-23T14:12:17.595Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Profile Registration without Reload Refresh Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the file del.php of the component GET Parameter Handler. The manipulation of the argument list leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
e attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278271 - https://vuldb.com/?ctiid.278271 - https://vuldb.com/?submit.412210 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Profile_Registration_without_Reload_Refresh_1.0_SQLi.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9094 State: PUBLISHED Published: 2024-09-23T01:00:06.183Z Last Updated: 2024-09-23T14:05:59.424Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/update/o-.php. The manipulation of the argument bloodname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278272 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278272 - https://vuldb.com/?ctiid.278272 - https://vuldb.com/?submit.412254 - https://github.com/ByKevin1/CVE/blob/main/sql1.md - https://code-projects.org/
CVE ID: CVE-2024-9095 State: PUBLISHED Published: 2025-03-20T10:08:47.730Z Last Updated: 2025-10-15T12:50:45.746Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control, allowing any logged-in user to create a Datastream to Google BigQuery and export the entire database. This includes sensitive data such as password hashes and secret API keys. The route is protected by a config check (`config.DATA_WAREHOUSE_EXPORTS_ALLOWED`), but it does not verify the user's access level or implement any access control
config.DATA_WAREHOUSE_EXPORTS_ALLOWED`), but it does not verify the user's access level or implement any access control middleware. This vulnerability can lead to the extraction of sensitive data, disruption of services, credential compromise, and service integrity breaches. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e242a92e-da41-440d-b718-3de91e4b4eac - https://github.com/lunary-ai/lunary/commit/a8d7b2959e87c30fbafdb12af7ffa093385dcc60
CVE ID: CVE-2024-9096 State: PUBLISHED Published: 2025-03-20T10:09:42.289Z Last Updated: 2025-10-15T12:50:00.893Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: In lunary-ai/lunary version 1.4.28, the /checklists/:id route allows low-privilege users to modify checklists by sending a PATCH request. The route lacks proper access control, such as middleware to ensure that only authorized users (e.g., project owners or admins) can modify checklist data. This vulnerability allows any user associated with the project, regardless of their role, to modify checklists, including changing the slug
llows any user associated with the project, regardless of their role, to modify checklists, including changing the slug or data fields, which can lead to tampering with essential project workflows, altering business logic, and introducing errors that undermine integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/653e7109-4c21-4e33-b636-7598d3202b9a - https://github.com/lunary-ai/lunary/commit/a8d7b2959e87c30fbafdb12af7ffa093385dcc60
CVE ID: CVE-2024-9097 State: PUBLISHED Published: 2025-02-05T12:40:15.257Z Last Updated: 2025-02-12T20:51:30.048Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: ManageEngine Products: Endpoint Central Problem Types: CWE-639 Description: ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/desktop-central/cve-2024-9097.html
CVE ID: CVE-2024-9098 State: PUBLISHED Published: 2025-03-20T10:09:39.450Z Last Updated: 2025-10-15T12:50:02.094Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-863 Description: In lunary-ai/lunary before version 1.4.30, a privilege escalation vulnerability exists where admins can invite new members with billing permissions, thereby gaining unauthorized access to billing resources. This issue arises because the user creation endpoint does not restrict admins from inviting users with billing roles. As a result, admins can circumvent the intended access control, posing a risk to the organization's financia
ling roles. As a result, admins can circumvent the intended access control, posing a risk to the organization's financial resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/75d466ae-8591-44d5-9160-eea7cad0c4fc - https://github.com/lunary-ai/lunary/commit/a8d7b2959e87c30fbafdb12af7ffa093385dcc60
CVE ID: CVE-2024-9099 State: PUBLISHED Published: 2025-03-20T10:10:37.881Z Last Updated: 2025-03-20T18:18:54.916Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-1230 Description: In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to perform actions on behalf of the project, access private data, and delete resources. The private API keys are exposed in the developer
on behalf of the project, access private data, and delete resources. The private API keys are exposed in the developer tools when the endpoint is called from the frontend. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ffb84fe8-3e60-4200-ac2d-1fd1e1c93e91 - https://github.com/lunary-ai/lunary/commit/8ba1b8ba2c2c30b1cec30eb5777c1fda670cbbfc
CVE ID: CVE-2024-9100 State: PUBLISHED Published: 2024-10-03T14:17:02.797Z Last Updated: 2024-10-03T15:33:56.745Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ManageEngine Products: Analytics Plus Problem Types: CWE-22 Description: Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/analytics-plus/CVE-2024-9100.html - https://www.zoho.com/analytics/onpremise/CVE-2024-9100.html
CVE ID: CVE-2024-9101 State: PUBLISHED Published: 2024-12-19T13:41:06.610Z Last Updated: 2024-12-20T20:20:24.165Z Vendors: phpLDAPadmin Products: phpLDAPadmin Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' function. However, exploitation is limited to specific conditions where 'opener' is correctly set. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.redguard.ch/blog/2024/12/19/security
y set. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.redguard.ch/blog/2024/12/19/security-advisory-phpldapadmin/ - https://github.com/leenooks/phpLDAPadmin/commit/f713afc8d164169516c91b0988531f2accb9bce6#diff-c2d6d7678ada004e704ee055169395a58227aaec86a6f75fa74ca18ff49bca44R27 - https://github.com/leenooks/phpLDAPadmin/blob/master/htdocs/entry_chooser.php - https://sourceforge.net/projects/phpldapadmin/files/phpldapadmin-php5/1.2.1/
CVE ID: CVE-2024-9102 State: PUBLISHED Published: 2024-12-19T13:41:24.263Z Last Updated: 2025-04-16T11:41:48.766Z Vendors: phpLDAPadmin Products: phpLDAPadmin Problem Types: CWE-1236 Description: phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer's position is that it is not the intention of phpLDAPadmin to control what data Admini
not be addressed, the maintainer's position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.redguard.ch/blog/2024/12/19/security-advisory-phpldapadmin/ - https://github.com/leenooks/phpLDAPadmin/commit/ea17aadef46fd29850160987fe7740ceed1381ad#diff-93b9f3e6d4c5bdacf469ea0ec74c1e9217ca6272da9be5a1bfd711f7da16f9e3R240 - https://sourceforge.net/projects/phpldapadmin/files/phpldapadmin-php5/1.2.0 - https://github.com/leenooks/phpLDAPadmin/issues/274#issuecomment-2586859072
CVE ID: CVE-2024-9103 State: PUBLISHED Published: 2025-03-24T16:06:39.980Z Last Updated: 2025-03-24T18:43:09.484Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Forcepoint Products: Email Security Problem Types: CWE-83 Description: Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messages module) allows Stored XSS. This issue affects Email Security through 8.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.forcepoint.com/s/article/Security-Advisory-Email-Security-Gateway-Persistent-XSS-in-Blocked-Messages
CVE ID: CVE-2024-9104 State: PUBLISHED Published: 2024-10-16T02:05:03.342Z Last Updated: 2024-10-16T13:37:16.799Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Tophive Products: Ultimate AI Problem Types: CWE-703 Description: The UltimateAI plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.3. This is due to the improper empty value check and a missing default activated value check in the 'ultimate_ai_change_pass' function. This makes it possible for unauthenticated attackers to reset the password of the first user, whose account is not yet activated or the first user who activated their account, who are s
password of the first user, whose account is not yet activated or the first user who activated their account, who are subscribers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3faf976d-0763-4e47-9bc3-18c791ec4487?source=cve - https://codecanyon.net/item/ultimateai-ai-enhanced-wordpress-plugin-with-saas-for-content-code-chat-and-image-generation/51201953
CVE ID: CVE-2024-9105 State: PUBLISHED Published: 2024-10-16T02:05:10.732Z Last Updated: 2024-10-16T17:56:38.686Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Tophive Products: Ultimate AI Problem Types: CWE-288 Description: The UltimateAI plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.8.3. This is due to insufficient verification on the user being supplied in the 'ultimate_ai_register_or_login_with_google' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. Additional Analyst Notes: - CISA A
xisting user on the site, such as an administrator, if they have access to the email. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2475643-a0b4-444a-a2c6-a5c45e90e1dd?source=cve - https://codecanyon.net/item/ultimateai-ai-enhanced-wordpress-plugin-with-saas-for-content-code-chat-and-image-generation/51201953
CVE ID: CVE-2024-9106 State: PUBLISHED Published: 2024-10-01T07:30:09.212Z Last Updated: 2024-10-01T16:03:17.348Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: xunhuweb Products: Wechat Social login 微信QQ钉钉登录插件 Problem Types: CWE-288 Description: The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This is only exploitable if the app sec
user on the site, such as an administrator, if they have access to the user id. This is only exploitable if the app secret is not set, so it has a default empty value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd44471-1a9c-4465-a52a-be64d51e7ea1?source=cve - https://plugins.trac.wordpress.org/browser/wechat-social-login/trunk/add-ons/social-qq/class-xh-social-channel-qq.php?rev=2080785#L284
CVE ID: CVE-2024-9107 State: PUBLISHED Published: 2025-03-20T10:10:12.783Z Last Updated: 2025-03-20T18:24:36.444Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags in chat history uploads. Specifically, the sanitization logic fails to handle HTML tags within code blocks correctly, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScrip
locks correctly, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially leading to identity theft or other malicious actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a2972c51-4780-4f60-afbf-a7a8ee4066ea
CVE ID: CVE-2024-9108 State: PUBLISHED Published: 2024-10-01T07:30:06.675Z Last Updated: 2024-10-01T16:11:16.439Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: xunhuweb Products: Wechat Social login 微信QQ钉钉登录插件 Problem Types: CWE-434 Description: The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichm
the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/06881386-3c92-426b-948d-58e8a8bee624?source=cve - https://plugins.trac.wordpress.org/browser/wechat-social-login/trunk/includes/social/class-xh-social-wp-api.php?rev=2111074#L39
CVE ID: CVE-2024-9109 State: PUBLISHED Published: 2024-10-25T05:35:28.347Z Last Updated: 2024-10-25T20:09:15.280Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: octolize Products: WooCommerce UPS Shipping – Live Rates and Access Points Problem Types: CWE-862 Description: The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up to, and including, 2.3.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin's API key. Additional Analyst Note
authenticated attackers, with Subscriber-level access and above, to delete the plugin's API key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/699fdea9-15ae-4882-9723-9a98d7d53c74?source=cve - https://plugins.trac.wordpress.org/browser/flexible-shipping-ups/trunk/vendor_prefixed/octolize/wp-ups-oauth/src/OAuth/Ajax.php#L32 - https://plugins.trac.wordpress.org/changeset/3173845/flexible-shipping-ups/tags/3.0.0/vendor_prefixed/octolize/wp-ups-oauth/src/OAuth/Ajax.php?old=3158553&old_path=flexible-shipping-ups%2Ftags%2F2.3.11%2Fvendor_prefixed%2Foctolize%2Fwp-ups-oauth%2Fsrc%2FOAuth%2FAjax.php
CVE ID: CVE-2024-9110 State: PUBLISHED Published: 2024-10-30T16:57:39.549Z Last Updated: 2024-11-01T19:39:41.922Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: BeyondTrust Products: Privileged Identity Problem Types: CWE-79 Description: A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.beyondtrust.com/trust-center/security-advisories/bt24-09
CVE ID: CVE-2024-9111 State: PUBLISHED Published: 2024-11-21T02:06:24.812Z Last Updated: 2024-11-21T11:40:09.408Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: pickplugins Products: Product Designer Problem Types: CWE-79 Description: The Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CIS
arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/28126b4f-1cb6-4e91-b1c0-09f407d1dbf8?source=cve - https://wordpress.org/plugins/product-designer/#developers
CVE ID: CVE-2024-9112 State: PUBLISHED Published: 2024-11-22T21:33:43.532Z Last Updated: 2024-11-26T15:18:54.969Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FastStone Products: Image Viewer Problem Types: CWE-787 Description: FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files. The issue results from the l
us page or open a malicious file. The specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25102. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1273/
CVE ID: CVE-2024-9113 State: PUBLISHED Published: 2024-11-22T21:33:54.875Z Last Updated: 2024-11-26T15:18:28.187Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FastStone Products: Image Viewer Problem Types: CWE-787 Description: FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TGA files. The issue results from the l
us page or open a malicious file. The specific flaw exists within the parsing of TGA files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25140. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1274/
CVE ID: CVE-2024-9114 State: PUBLISHED Published: 2024-11-22T21:34:05.006Z Last Updated: 2024-11-22T21:48:38.107Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FastStone Products: Image Viewer Problem Types: CWE-787 Description: FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the l
us page or open a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25145. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1275/