Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-31493 State: PUBLISHED Published: 2024-06-03T07:55:29.476Z Last Updated: 2024-08-02T01:52:57.311Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:X/RC:X) Vendors: Fortinet Products: FortiSOAR Problem Types: CWE-212 Description: An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-052
CVE ID: CVE-2024-31495 State: PUBLISHED Published: 2024-06-11T14:31:58.370Z Last Updated: 2024-08-02T01:52:57.311Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiPortal Problem Types: CWE-89 Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user to obtain unauthorized information via the report download functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-128
CVE ID: CVE-2024-31496 State: PUBLISHED Published: 2024-11-12T18:53:57.302Z Last Updated: 2024-11-12T19:24:54.914Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fort
code or commands via crafted CLI requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-098
CVE ID: CVE-2024-31497 State: PUBLISHED Published: 2024-04-15T00:00:00.000Z Last Updated: 2025-11-04T22:06:12.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. This is especially important in a scenario where an adversary is able to read messages signed by PuTTY or Pageant. The required set of signed messages may be publicly readable because they are stored in a public Git service that supports use of SSH for commit signing, and the signatures were made by Pageant through an agent-forwarding mechani
that supports use of SSH for commit signing, and the signatures were made by Pageant through an agent-forwarding mechanism. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. After a key compromise, an adversary may be able to conduct supply-chain attacks on software maintained in Git. A second, independent scenario is that the adversary is an operator of an SSH server to which the victim authenticates (for remote login or file copy), even though this server is not fully trusted by the victim, and the victim uses the same private key for SSH connections to other service
server is not fully trusted by the victim, and the victim uses the same private key for SSH connections to other services operated by other entities. Here, the rogue server operator (who would otherwise have no way to determine the victim's private key) can derive the victim's private key, and then use it for unauthorized access to those other services. If the other services include Git services, then again it may be possible to conduct supply-chain attacks on software maintained in Git. This also affects, for example, FileZilla before 3.67.0, WinSCP before 6.3.3, TortoiseGit before 2.15.0.1, and TortoiseSVN through 1.14.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Con
it before 2.15.0.1, and TortoiseSVN through 1.14.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://filezilla-project.org/versions.php - https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html - https://www.openwall.com/lists/oss-security/2024/04/15/6 - https://tartarus.org/~simon/putty-snapshots/htmldoc/Chapter9.html#pageant-forward - https://docs.ccv.brown.edu/oscar/connecting-to-oscar/ssh/ssh-agent-forwarding/key-generation-and-agent-forwarding-with-putty - https://news.ycombinator.com/item?id=40044665 - https://winscp.net/eng/news.php - https://torto
-forwarding-with-putty - https://news.ycombinator.com/item?id=40044665 - https://winscp.net/eng/news.php - https://tortoisegit.org - https://github.com/advisories/GHSA-6p4c-r453-8743 - https://bugzilla.redhat.com/show_bug.cgi?id=2275183 - https://bugzilla.suse.com/show_bug.cgi?id=1222864 - https://security-tracker.debian.org/tracker/CVE-2024-31497 - https://twitter.com/lambdafu/status/1779969509522133272 - https://git.tartarus.org/?h=c193fe9848f50a88a4089aac647fecc31ae96d27&p=simon/putty.git - https://www.reddit.com/r/sysadmin/comments/1c4wmoj/putty_vulnerability_affecting_v068_to_v08/ - https://github.com/daedalus/BreakingECDSAwithLLL - https://www.bleepingcomputer.com/news/security/putty-s
v068_to_v08/ - https://github.com/daedalus/BreakingECDSAwithLLL - https://www.bleepingcomputer.com/news/security/putty-ssh-client-flaw-allows-recovery-of-cryptographic-private-keys/ - https://twitter.com/CCBalert/status/1780229237569470549 - https://securityonline.info/cve-2024-31497-critical-putty-vulnerability-exposes-private-keys-immediate-action-required/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMJH7M663BVO3SY6MFAW2FAZWLLXAPRQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMHILY2K7HQGQRHOC375KRRG2M6625RD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists
t.org/message/MMHILY2K7HQGQRHOC375KRRG2M6625RD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZS3B37GNGWOOV7QU7B7JFK76U4TOP4V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WFDZBV7ZCAZ6AH3VCQ34SSY7L3J7VZXZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUOTQVGC4DISVHQGSPUYGXO6TLDK65LA/ - http://www.openwall.com/lists/oss-security/2024/04/15/6 - https://lists.debian.org/debian-lts-announce/2024/06/msg00014.html
CVE ID: CVE-2024-31498 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-27T19:01:16.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as Administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yubico.com/support/security-advisories/ysa-2024-01/
CVE ID: CVE-2024-31502 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T01:52:57.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/new_staff. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sahildari/cve/blob/master/CVE-2024-31502.md
CVE ID: CVE-2024-31503 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-08-19T20:21:33.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-31503.md
CVE ID: CVE-2024-31504 State: PUBLISHED Published: 2024-07-08T00:00:00 Last Updated: 2024-08-02T01:52:57.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in SILA Embedded Solutions GmbH freemodbus v.2018-09-12 allows a remtoe attacker to cause a denial of service via the LINUXTCP server component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/CAPCOMIN/a0361511068dce21a557cf9fa01d0a02
CVE ID: CVE-2024-31506 State: PUBLISHED Published: 2024-04-09T00:00:00.000Z Last Updated: 2025-03-20T18:27:18.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id" parameter in admin/admin_cs.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CveSecLook/cve/issues/4
CVE ID: CVE-2024-31507 State: PUBLISHED Published: 2024-04-09T00:00:00 Last Updated: 2024-08-02T01:52:57.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetch_gendercs.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CveSecLook/cve/issues/6
CVE ID: CVE-2024-31510 State: PUBLISHED Published: 2024-05-24T14:14:31.086Z Last Updated: 2025-02-13T15:47:51.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the /pqcrystals-dilithium-standard_ml-dsa-44-ipd_avx2/sign.c component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/open-quantum-safe/liboqs - https://github.com/liang-junkai/Fault-injection-of-ML-DSA - https://gist.github.com/liang-junkai/a9fc693f8bdf176e9d9f56773bf20703
CVE ID: CVE-2024-31525 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-06T14:40:54.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authorization mechanism is not validated on the server side and only on the client side. This can result, for example, in creating a new admin user in the system which enables persistent access for the attacker as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitio
an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/285.html - https://github.com/Peppermint-Lab/peppermint/issues/258
CVE ID: CVE-2024-31544 State: PUBLISHED Published: 2024-04-09T00:00:00 Last Updated: 2024-08-02T01:52:57.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrower_name”, “faculty_department” parameters in /classes/Master.php?f=save_record. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/emirhanmtl/vuln-research/blob/main/Stored-XSS-Computer-Laboratory-Management-System-PoC.md
CVE ID: CVE-2024-31545 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-02T01:52:57.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-4-Computer-Laboratory-Management-System-PoC.md
CVE ID: CVE-2024-31546 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:52:57.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-2-Computer-Laboratory-Management-System-PoC.md
CVE ID: CVE-2024-31547 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:52:57.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/emirhanmtl/vuln-research/blob/main/SQLi-3-Computer-Laboratory-Management-System-PoC.md
CVE ID: CVE-2024-31551 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T01:52:57.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.yuque.com/sickle-ffnce/awixr8/qu8i0p9y0h277m6u
CVE ID: CVE-2024-31552 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:52:57.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.yuque.com/sickle-ffnce/awixr8/gsu7nyi0gu9q1nl8
CVE ID: CVE-2024-31556 State: PUBLISHED Published: 2024-05-14T20:15:38.438Z Last Updated: 2025-02-13T15:47:52.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/reportico-web/reportico/issues/53
CVE ID: CVE-2024-31570 State: PUBLISHED Published: 2024-09-19T00:00:00 Last Updated: 2024-09-23T17:14:31.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/bugs/355/ - https://www.openwall.com/lists/oss-security/2024/04/11/10
CVE ID: CVE-2024-31573 State: PUBLISHED Published: 2025-10-17T00:00:00.000Z Last Updated: 2025-10-17T19:04:05.637Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: XMLUnit Products: XMLUnit for Java Problem Types: CWE-669 Description: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/advisories/GHSA-chfm-68vv-pvw5 - https://github.com/xmlunit/xmlunit/issues/264 - https://github.com/xmlunit/xmlunit/commit/b81d48b71dfd2868bdfc30a3e17ff
https://github.com/xmlunit/xmlunit/issues/264 - https://github.com/xmlunit/xmlunit/commit/b81d48b71dfd2868bdfc30a3e17ff973f32bc15b
CVE ID: CVE-2024-31574 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-10-30T16:22:59.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ysl1415926/cve/blob/main/CVE-2024-31574.md
CVE ID: CVE-2024-31576 State: REJECTED Published: N/A Last Updated: 2024-04-15T15:38:04.674591 Description: No description available.
CVE ID: CVE-2024-31578 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-11-04T17:20:09.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7 - https://gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2024-31580 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-03-28T23:47:41.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pytorch/pytorch/commit/b5c3a17c2c207ebefcb85043f0cf94be9b2fef81 - https://gist.github.com/1047524396/038c78f2f007345e6f497698ace2aa3d
CVE ID: CVE-2024-31581 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-11-04T17:20:12.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ffmpeg/ffmpeg/commit/ce0c178a408d43e71085c28a47d50dc939b60196 - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/cbs_h266_syntax_template.c#L2048 - https://gist.github.com/1047524396
://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/cbs_h266_syntax_template.c#L2048 - https://gist.github.com/1047524396/a7e9273e12553775826784035333cdd8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2024-31582 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-11-04T17:20:14.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavfilter/vf_codecview.c#L220 - https://github.com/ffmpeg/ffmpeg/commit/99debe5f823f45a482e1dc08de35879aa9c74bd2 - https://gis
ter/vf_codecview.c#L220 - https://github.com/ffmpeg/ffmpeg/commit/99debe5f823f45a482e1dc08de35879aa9c74bd2 - https://gist.github.com/1047524396/b47d5efe3bc420fb91dbb77c73c0fff3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2024-31583 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:52:57.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pytorch/pytorch/commit/9c7071b0e324f9fb68ab881283d6b8d388a4bcd2 - https://github.com/pytorch/pytorch/blob/v2.1.2/torch/csrc/jit/mobile/interpreter.cpp#L132 - https://gist.github.com/1047524396/43e19a41f2b36503a4a228c32cdbc176
CVE ID: CVE-2024-31584 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:52:57.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pytorch/pytorch/commit/7c35874ad664e74c8e4252d67521f3986eadb0e6 - https://github.com/pytorch/pytorch/blob/v2.1.2/torch/csrc/jit/mobile/flatbuffer_loader.cpp#L305
CVE ID: CVE-2024-31585 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-06-09T15:28:43.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ffmpeg/ffmpeg/commit/ab0fdaedd1e7224f7e84ea22fcbfaa4ca75a6c06 - https://github.com/FFmpeg/FFmpeg/commit/81df787b53eb5c6433731f6eaaf7f2a94d8a8c80 - https://gist.github.com/1047524396/dc2c64ffe0c3934a6176
/FFmpeg/FFmpeg/commit/81df787b53eb5c6433731f6eaaf7f2a94d8a8c80 - https://gist.github.com/1047524396/dc2c64ffe0c3934a6176bcd2c5cf5656 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/ - https://github.com/FFmpeg/FFmpeg/commit/3061bf668feffc7c1f0b244205167b3b86da8015 - https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/bf2d7b20ea1c7d15dcbaedd479f40295e5c8343
fc7c1f0b244205167b3b86da8015 - https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/bf2d7b20ea1c7d15dcbaedd479f40295e5c83430..3061bf668feffc7c1f0b244205167b3b86da8015:/libavfilter/avf_showspectrum.c - https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/aec67d3d7d2895bfea61aa1358d9d8e956f8615c..ab0fdaedd1e7224f7e84ea22fcbfaa4ca75a6c06:/libavfilter/avf_showspectrum.c