Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-29221 State: PUBLISHED Published: 2024-04-05T08:15:07.130Z Last Updated: 2024-08-02T01:10:54.523Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Improper Access Control in Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 lacked proper access control in the `/api/v4/users/me/teams` endpoint allowing a team admin to get the invite ID of their team, thus allowing them to invite users, even if the "Add Members" permission was explicitly removed from team admins. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
Members" permission was explicitly removed from team admins. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-29222 State: PUBLISHED Published: 2025-05-13T21:02:57.686Z Last Updated: 2025-05-14T14:41:21.182Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) Graphics Driver software Problem Types: Denial of Service, CWE-787 Description: Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE ID: CVE-2024-29223 State: PUBLISHED Published: 2025-02-12T21:18:41.442Z Last Updated: 2025-02-13T16:53:05.276Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QuickAssist Technology software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01124.html
CVE ID: CVE-2024-29224 State: PUBLISHED Published: 2024-11-21T14:41:52.814Z Last Updated: 2024-11-21T16:03:32.208Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GoCast Products: GoCast Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1961
CVE ID: CVE-2024-29225 State: PUBLISHED Published: 2024-04-04T00:04:52.089Z Last Updated: 2025-03-27T20:51:09.291Z Vendors: ELECOM CO.,LTD. Products: WRC-X3200GST3-B, WRC-G01-W Problem Types: Information disclosure Description: WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20240326-01/ - https://jvn.jp/en/vu/JVNVU95381465/
CVE ID: CVE-2024-29227 State: PUBLISHED Published: 2024-03-28T06:08:34.641Z Last Updated: 2025-08-01T03:46:55.183Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ted denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29228 State: PUBLISHED Published: 2024-03-28T06:13:20.333Z Last Updated: 2024-08-02T01:10:55.441Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Synology Products: Surveillance Station Problem Types: CWE-862 Description: Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29229 State: PUBLISHED Published: 2024-03-28T06:19:39.482Z Last Updated: 2024-08-12T19:09:16.394Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Synology Products: Surveillance Station Problem Types: CWE-862 Description: Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29230 State: PUBLISHED Published: 2024-03-28T06:22:54.365Z Last Updated: 2025-08-01T04:36:18.221Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE P
ct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29231 State: PUBLISHED Published: 2024-03-28T06:23:39.710Z Last Updated: 2025-08-13T13:36:05.455Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-129 Description: Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/securi
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29232 State: PUBLISHED Published: 2024-03-28T06:24:18.371Z Last Updated: 2025-08-01T04:42:43.317Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
ial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29233 State: PUBLISHED Published: 2024-03-28T06:25:27.881Z Last Updated: 2025-08-01T04:44:41.956Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
nial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29234 State: PUBLISHED Published: 2024-03-28T06:26:12.750Z Last Updated: 2025-08-01T04:46:13.156Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
CVE ID: CVE-2024-29235 State: PUBLISHED Published: 2024-03-28T06:26:32.275Z Last Updated: 2025-08-01T04:47:41.947Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program C
ed denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29236 State: PUBLISHED Published: 2024-03-28T06:27:09.078Z Last Updated: 2025-08-01T04:49:09.342Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
mited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29237 State: PUBLISHED Published: 2024-03-28T06:27:39.249Z Last Updated: 2025-08-01T04:50:52.275Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
ted denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29238 State: PUBLISHED Published: 2024-03-28T06:28:14.399Z Last Updated: 2025-08-01T04:52:14.346Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
CVE ID: CVE-2024-29239 State: PUBLISHED Published: 2024-03-28T06:28:31.235Z Last Updated: 2025-08-01T04:53:34.132Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
uct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29240 State: PUBLISHED Published: 2024-03-28T06:28:38.385Z Last Updated: 2025-08-01T04:55:21.100Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Synology Products: Surveillance Station Problem Types: CWE-862 Description: Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to conduct limited denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29241 State: PUBLISHED Published: 2024-03-28T06:28:53.632Z Last Updated: 2025-08-12T08:09:15.488Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: Synology Products: Surveillance Station Problem Types: CWE-862 Description: Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information, write sensitive configurations in DSM, and reboot or shutdown NAS via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_04
CVE ID: CVE-2024-29243 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-02T19:18:45.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at /apply.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AdamRitz/lbtvul/blob/main/t300mini-2.md
CVE ID: CVE-2024-29244 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-11-07T17:17:38.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pin_code_3g parameter at /apply.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AdamRitz/lbtvul/blob/main/t300mini-2.md
CVE ID: CVE-2024-29269 State: PUBLISHED Published: 2024-04-10T00:00:00 Last Updated: 2024-08-27T17:44:14.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wutalent/CVE-2024-29269/blob/main/index.md
CVE ID: CVE-2024-29271 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-28T14:04:35.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/givanz/VvvebJs/issues/342 - https://github.com/givanz/VvvebJs/commit/c0c0545b44b23acc288ef907fb498ce15b9b576e
CVE ID: CVE-2024-29272 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-02T01:10:54.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/givanz/VvvebJs/issues/343 - https://github.com/givanz/VvvebJs/commit/c6422cfd4d835c2fa6d512645e30015f24538ef0
CVE ID: CVE-2024-29273 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-27T20:38:27.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zyx0814/dzzoffice/issues/244
CVE ID: CVE-2024-29275 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-02T01:10:54.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/seacms-net/CMS/issues/15
CVE ID: CVE-2024-29276 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-08-20T15:08:00.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/Rainy-Day/p/18061399
CVE ID: CVE-2024-29278 State: PUBLISHED Published: 2024-03-30T00:00:00 Last Updated: 2024-08-02T01:10:55.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: funboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in "create a message ." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/funson86/funboot/issues/2 - https://github.com/QDming/cve/blob/main/cve
CVE ID: CVE-2024-29291 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-08-02T01:10:55.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. NOTE: this is disputed by multiple third parties because the owner of a Laravel Framework installation can choose to have debugging logs, but needs to set the access control appropriately for the type of data that may be logged. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/whiteman007/43bd7fa1fa0e47554b33f0cf93066784
CVE ID: CVE-2024-29292 State: PUBLISHED Published: 2024-11-20T00:00:00 Last Updated: 2024-11-27T16:39:50.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple OS Command Injection vulnerabilities affecting Kasda LinkSmart Router KW6512 <= v1.3 enable an authenticated remote attacker to execute arbitrary OS commands via various cgi parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kasdanet.com/ENHCSZ/pro_view-120.html - https://gist.github.com/QuartzDust/debfd7ddf934a9f5609d7f1a8cd71154
CVE ID: CVE-2024-29296 State: PUBLISHED Published: 2024-04-10T00:00:00 Last Updated: 2024-08-02T01:10:54.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://portainer.com - https://github.com/ThaySolis/CVE-2024-29296
CVE ID: CVE-2024-29301 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-05T15:09:18.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id= Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.strongboxit.com/ - https://packetstormsecurity.com/files/177737/Task-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2024-29302 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-02T19:04:51.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.strongboxit.com/ - https://packetstormsecurity.com/files/177737/Task-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2024-29303 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-07T20:15:22.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.strongboxit.com/ - https://packetstormsecurity.com/files/177737/Task-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2024-29309 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-13T18:01:52.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Siebene/c22e1a4a4a8b61067180475895e60858