Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-2596 State: PUBLISHED Published: 2024-03-18T14:01:50.741Z Last Updated: 2024-08-21T17:44:38.201Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Amssplus Products: AMSS++ Problem Types: CWE-79 Description: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/mail/main/select_send.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
ated user and steal their session cookie credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss
CVE ID: CVE-2024-2597 State: PUBLISHED Published: 2024-03-18T14:02:17.434Z Last Updated: 2025-04-10T20:24:24.645Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Amssplus Products: AMSS++ Problem Types: CWE-79 Description: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_school_person.php, in the 'b_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: -
o an authenticated user and steal their session cookie credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss
CVE ID: CVE-2024-2598 State: PUBLISHED Published: 2024-03-18T14:02:40.296Z Last Updated: 2024-08-01T19:18:48.109Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Amssplus Products: AMSS++ Problem Types: CWE-79 Description: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/select_send_2.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
icated user and steal their session cookie credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss
CVE ID: CVE-2024-2599 State: PUBLISHED Published: 2024-03-18T14:04:15.820Z Last Updated: 2024-08-12T20:43:57.207Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Amssplus Products: AMSS++ Problem Types: CWE-434 Description: File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss
CVE ID: CVE-2024-2602 State: PUBLISHED Published: 2024-07-11T08:46:13.920Z Last Updated: 2024-08-01T19:18:48.118Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: FoxRTU Station Problem Types: CWE-22 Description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-191-03&p_enDocType
VE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-191-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-191-03.pdf
CVE ID: CVE-2024-2603 State: PUBLISHED Published: 2024-04-26T05:00:03.262Z Last Updated: 2024-08-01T19:18:48.123Z Vendors: Unknown Products: Salon booking system Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin (or editor depending on Salon booking system WordPress plugin through 9.6.5 configuration) to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
r example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/b4186c03-99ee-4297-85c0-83b7053afc1c/
CVE ID: CVE-2024-2604 State: PUBLISHED Published: 2024-03-18T21:00:06.410Z Last Updated: 2025-04-10T20:22:51.100Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: File Manager App Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update-file.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257182 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vu
ic and may be used. VDB-257182 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257182 - https://vuldb.com/?ctiid.257182 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20File%20Manager%20App/Arbitrary%20File%20Upload%20-%20update-file.php.md
CVE ID: CVE-2024-2605 State: PUBLISHED Published: 2024-03-19T12:02:51.825Z Last Updated: 2025-03-13T18:16:41.217Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Windows Error Reporter could be used as a Sandbox escape vector Description: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1872920 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/
CVE ID: CVE-2024-2606 State: PUBLISHED Published: 2024-03-19T12:02:52.375Z Last Updated: 2024-10-30T15:06:14.489Z Vendors: Mozilla Products: Firefox Problem Types: Mishandling of WASM register values Description: Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1879237 - https://www.mozilla.org/security/advisories/mfsa2024-12/
CVE ID: CVE-2024-2607 State: PUBLISHED Published: 2024-03-19T12:02:52.932Z Last Updated: 2025-02-13T17:40:59.400Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: JIT code failed to save return registers on Armv7-A Description: Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1879939 - https://www.mozilla.org/
: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1879939 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2608 State: PUBLISHED Published: 2024-03-19T12:02:53.467Z Last Updated: 2025-03-13T14:40:17.491Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Integer overflow could have led to out of bounds write Description: `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1880692 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2609 State: PUBLISHED Published: 2024-03-19T12:02:54.546Z Last Updated: 2025-03-14T19:18:01.610Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Permission prompt input delay could expire when not in focus Description: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and Thunderbird < 115.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1866100 - https://lists.debian.org/debian-lts-announce/2024/04/msg
ences: - https://bugzilla.mozilla.org/show_bug.cgi?id=1866100 - https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-19/ - https://www.mozilla.org/security/advisories/mfsa2024-20/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE ID: CVE-2024-2610 State: PUBLISHED Published: 2024-03-19T12:02:55.079Z Last Updated: 2025-02-13T17:41:01.598Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Improper handling of html and body tags enabled CSP nonce leakage Description: Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1871112 - https://www.mozilla.org/security/advisories/mfsa2024-12/ -
es: - https://bugzilla.mozilla.org/show_bug.cgi?id=1871112 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2611 State: PUBLISHED Published: 2024-03-19T12:02:55.649Z Last Updated: 2025-02-13T17:41:02.264Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Clickjacking vulnerability could have led to a user accidentally granting permissions Description: A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1876675 - https://www.mozilla.org/security/advisories/mfsa2024-
ferences: - https://bugzilla.mozilla.org/show_bug.cgi?id=1876675 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2612 State: PUBLISHED Published: 2024-03-19T12:02:56.196Z Last Updated: 2025-02-13T17:41:02.934Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Self referencing object could have potentially led to a use-after-free Description: If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1879444 - https://www.mozilla.org
r: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1879444 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2613 State: PUBLISHED Published: 2024-03-19T12:02:56.741Z Last Updated: 2024-08-02T19:44:01.782Z Vendors: Mozilla Products: Firefox Problem Types: Improper handling of QUIC ACK frame data could have led to OOM Description: Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox < 124. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1875701 - https://www.mozilla.org/security/advisories/mfsa2024-12/
CVE ID: CVE-2024-2614 State: PUBLISHED Published: 2024-03-19T12:02:57.272Z Last Updated: 2025-02-13T17:41:04.244Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 Description: Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
R < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685358%2C1861016%2C1880405%2C1881093 - https://www.mozilla.org/security/advisories/mfsa2024-12/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2615 State: PUBLISHED Published: 2024-03-19T12:02:57.807Z Last Updated: 2025-03-14T15:58:52.764Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 124 Description: Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1881074%2C1882438%2C1881650 - https://www.mozilla.org/security/advisories/mfsa2024-12/
CVE ID: CVE-2024-2616 State: PUBLISHED Published: 2024-03-19T12:02:58.997Z Last Updated: 2025-02-13T17:41:08.379Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Problem Types: Improve handling of out-of-memory conditions in ICU Description: To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1846197 - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfs
?id=1846197 - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
CVE ID: CVE-2024-2617 State: PUBLISHED Published: 2024-04-30T12:57:37.143Z Last Updated: 2024-08-01T19:18:48.011Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Energy Products: RTU500 series CMU firmware Description: A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://publisher.hitachienergy.com/preview?DocumentId=8DBD000199&languageCode=en&Preview=true
CVE ID: CVE-2024-2618 State: PUBLISHED Published: 2024-05-24T04:29:58.098Z Last Updated: 2024-08-01T19:18:47.922Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: Elementor Header & Footer Builder Problem Types: CWE-87 Improper Neutralization of Alternate XSS Syntax Description: The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the size attribute in all versions up to, and including, 1.6.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages t
s it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a780ce1b-0758-42ef-88e7-ff8d921eca6e?source=cve - https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.26/inc/widgets-manager/widgets/class-page-title.php#L494 - https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.26/inc/widgets-manager/widgets/class-site-title.php#L478
CVE ID: CVE-2024-2619 State: PUBLISHED Published: 2024-05-16T20:31:04.329Z Last Updated: 2024-08-01T19:18:47.874Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: brainstormforce Products: Elementor Header & Footer Builder Problem Types: CWE-862 Missing Authorization Description: The Elementor Header & Footer Builder for WordPress is vulnerable to HTML Injection in all versions up to, and including, 1.6.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level permissions and above, to inject arbitrary HTML in pages that will be shown whenever a user accesses an injected page. Additional
ns and above, to inject arbitrary HTML in pages that will be shown whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/689eb95b-2f72-4aa4-9f21-6ae186346061?source=cve - https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.25/admin/class-hfe-admin.php#L74 - https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.25/admin/class-hfe-admin.php#L220 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3070659%40header-footer-elementor%2Ftrunk&old=3053177%40header-footer-elementor%2Ftrunk&
email=&sfph_mail=&reponame=&new=3070659%40header-footer-elementor%2Ftrunk&old=3053177%40header-footer-elementor%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-2620 State: PUBLISHED Published: 2024-03-19T01:00:06.531Z Last Updated: 2024-08-12T16:39:48.255Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Fujian Kelixin Communication Products: Command and Dispatch Platform Problem Types: CWE-89 Description: A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/down_file.php. The manipulation of the argument uuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257197 w
tack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257197 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257197 - https://vuldb.com/?ctiid.257197 - https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-down_file.pdf
CVE ID: CVE-2024-2621 State: PUBLISHED Published: 2024-03-19T01:00:08.253Z Last Updated: 2024-08-01T19:18:48.089Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Fujian Kelixin Communication Products: Command and Dispatch Platform Problem Types: CWE-89 Description: A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this issue is some unknown functionality of the file api/client/user/pwd_update.php. The manipulation of the argument uuid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257198 is the identifier ass
may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257198 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257198 - https://vuldb.com/?ctiid.257198 - https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdf