Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-12119 State: PUBLISHED Published: 2025-03-08T05:30:08.997Z Last Updated: 2025-05-12T15:31:52.380Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bradvin Products: FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel Problem Types: CWE-79 Description: The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the default_gallery_title_size parameter in all versions up to, and including, 2.4.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with granted
to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with granted gallery and album creator roles, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2070c6e6-d830-4d1c-9408-5cb2254a00e5?source=cve - https://github.com/fooplugins/foogallery/blob/master/extensions/albums/album-default.php#L26 - https://plugins.trac.wordpress.org/browser/foogallery/tags/2.4.27/extensions/albums/album-default.php#L26
CVE ID: CVE-2024-12120 State: PUBLISHED Published: 2025-05-07T07:21:40.882Z Last Updated: 2025-05-07T14:00:55.775Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: wproyal Products: Royal Elementor Addons and Templates Problem Types: CWE-79 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget display_message_text parameter in all versions up to, and including, 1.7.1017 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will
for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1?source=cve - https://plugins.trac.wordpress.org/changeset/3236381/royal-elementor-addons/tags/1.7.1008/modules/countdown/widgets/wpr-countdown.php?old=3220755&old_path=royal-elementor-addons%2Ftags%2F1.7.1007%2Fmodules%2Fcountdown%2Fwidgets%2Fwpr-countdown.php - https://plugins.trac.wordpress.org/changeset/3285549/royal-elementor-addons/tags/1.7.1018/assets/js/front
ountdown.php - https://plugins.trac.wordpress.org/changeset/3285549/royal-elementor-addons/tags/1.7.1018/assets/js/frontend.js?old=3277554&old_path=royal-elementor-addons%2Ftags%2F1.7.1017%2Fassets%2Fjs%2Ffrontend.js
CVE ID: CVE-2024-12121 State: PUBLISHED Published: 2024-12-19T01:45:14.611Z Last Updated: 2024-12-20T17:41:32.059Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: cyberlord92 Products: Broken Link Checker | Finder Problem Types: CWE-918 Description: The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal
o arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fa52034e-3d11-4be5-ab8b-8f7256be2a3e?source=cve - https://plugins.trac.wordpress.org/changeset/3207590/broken-link-finder
CVE ID: CVE-2024-12122 State: PUBLISHED Published: 2025-01-09T11:10:53.883Z Last Updated: 2025-01-09T15:07:10.903Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: web-mv Products: ResAds Problem Types: CWE-79 Description: The ResAds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP
an successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c0a544a-b5f3-41bf-9313-28188662ea56?source=cve - https://wordpress.org/plugins/resads/#developers
CVE ID: CVE-2024-12123 State: PUBLISHED Published: 2024-12-04T03:26:00.918Z Last Updated: 2024-12-04T14:09:11.911Z Vendors: Issuetrak Products: Issuetrak Problem Types: CWE-472, CWE-837 Description: A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the original requester to another user in the same application, which the application then accepts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpcenter.issuetrak.com/home/2340
hen accepts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpcenter.issuetrak.com/home/2340-issuetrak-release-notes
CVE ID: CVE-2024-12124 State: REJECTED Published: 2025-01-07T04:22:16.840Z Last Updated: 2025-01-17T16:56:00.715Z Description: No description available.
CVE ID: CVE-2024-12125 State: PUBLISHED Published: 2025-11-06T21:50:40.704Z Last Updated: 2025-11-14T18:11:52.501Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat 3scale API Management Platform 2 Problem Types: CWE-281 Description: A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-12125 - https://bugzilla.redhat.com/show_bug.cgi?id
hment: References: - https://access.redhat.com/security/cve/CVE-2024-12125 - https://bugzilla.redhat.com/show_bug.cgi?id=2330214
CVE ID: CVE-2024-12126 State: PUBLISHED Published: 2025-01-07T04:21:57.953Z Last Updated: 2025-01-07T16:24:55.459Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: seomantis Products: SEO Keywords Problem Types: CWE-79 Description: The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘google_error’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional An
s that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/325c2350-174b-4117-bacd-ae28bf3b16bc?source=cve - https://wordpress.org/plugins/seo-keywords/#developers
CVE ID: CVE-2024-12127 State: PUBLISHED Published: 2024-12-17T09:22:41.911Z Last Updated: 2024-12-17T17:29:36.458Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mantrabrain Products: Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS Problem Types: CWE-80 Description: The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 0.0.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject
to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c0170668-65bc-4d65-a88b-9398391c98d9?source=cve - https://wordpress.org/plugins/sikshya/#developers - https://plugins.trac.wordpress.org/changeset/3207940/
CVE ID: CVE-2024-12128 State: PUBLISHED Published: 2024-12-07T09:27:06.377Z Last Updated: 2024-12-09T16:08:24.269Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: nshowketgmailcom Products: Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal Problem Types: CWE-79 Description: The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘monthly_sales_current_year’ parameter in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scri
nput sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c7d688af-649c-4858-9c63-b12933d78bc2?source=cve - https://wordpress.org/plugins/simple-e-commerce-shopping-cart/#developers
CVE ID: CVE-2024-12129 State: PUBLISHED Published: 2025-01-30T13:42:07.681Z Last Updated: 2025-01-30T14:33:28.631Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Royal-Flush Products: Royal Core Problem Types: CWE-862 Description: The Royal Core plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'royal_restore_backup' function in all versions up to, and including, 2.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role f
access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a6ca0a45-cbb3-419b-a2fd-7427935524d8?source=cve - https://themeforest.net/item/hyperx-portfolio-for-freelancers-agencies/13439786
CVE ID: CVE-2024-12130 State: PUBLISHED Published: 2024-12-05T17:47:21.917Z Last Updated: 2024-12-10T15:01:30.054Z Vendors: Rockwell Automation Products: Arena® Problem Types: CWE-125 Description: An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.roc
CVE ID: CVE-2024-12131 State: PUBLISHED Published: 2025-01-07T12:43:40.934Z Last Updated: 2025-01-07T14:29:14.208Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-639 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit resumes for ot
ey. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit resumes for other applicants when applying for jobs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b4772ab0-41cd-4b35-bda9-d72e0fd7b7a5?source=cve - https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.2.6/modules/jobapply/model.php?rev=3216415
CVE ID: CVE-2024-12132 State: PUBLISHED Published: 2025-01-03T08:22:21.179Z Last Updated: 2025-01-03T14:31:03.355Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-639 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create jobs for compa
ey. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create jobs for companies that are unaffiliated with the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d19ac6fc-029f-4f19-913e-e082acecc594?source=cve - https://plugins.trac.wordpress.org/changeset/3210251/
CVE ID: CVE-2024-12133 State: PUBLISHED Published: 2025-02-10T15:28:03.193Z Last Updated: 2025-11-20T18:22:13.618Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Discovery 1.14, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4 Problem Types: CWE-407 Description: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a ce
in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:17347 - https://access.redhat.com/errata/RHSA-2025:4049 - https://access.redhat.com/errata/RHSA-2025:7077 - https://access.redhat.com/errata/RHSA-2025:8021 - https://access.redhat.com/errata/RHSA-2025:8385 - https://access.redhat.com/security
.redhat.com/errata/RHSA-2025:8021 - https://access.redhat.com/errata/RHSA-2025:8385 - https://access.redhat.com/security/cve/CVE-2024-12133 - https://bugzilla.redhat.com/show_bug.cgi?id=2344611 - https://gitlab.com/gnutls/libtasn1/-/issues/52
CVE ID: CVE-2024-12136 State: PUBLISHED Published: 2025-03-19T08:35:14.671Z Last Updated: 2025-06-27T11:31:03.913Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Elfatek Elektronics Products: ANKA JPD-00028 Problem Types: CWE-304 Description: Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: before V.01.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0071
CVE ID: CVE-2024-12137 State: PUBLISHED Published: 2025-03-19T08:32:38.226Z Last Updated: 2025-06-27T11:30:10.384Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H) Vendors: Elfatek Elektronics Products: ANKA JPD-00028 Problem Types: CWE-294 Description: Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: before V.01.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0071
CVE ID: CVE-2024-12138 State: PUBLISHED Published: 2024-12-04T14:00:14.890Z Last Updated: 2024-12-04T14:22:19.291Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: horilla Problem Types: CWE-502, CWE-20 Description: A vulnerability classified as critical was found in horilla up to 1.2.1. This vulnerability affects the function request_new/get_employee_shift/create_reimbursement/key_result_current_value_update/create_meetings/create_skills. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
d to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286858 - https://vuldb.com/?ctiid.286858 - https://vuldb.com/?submit.451515 - https://github.com/Sp1d3rL1/horilla-RCE
CVE ID: CVE-2024-12140 State: PUBLISHED Published: 2025-01-07T04:22:18.330Z Last Updated: 2025-01-07T16:20:13.608Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: aiwp Products: Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements Problem Types: CWE-200 Description: The Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render function due to insufficient restrictions on which templates can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to
plates can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft templates that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c00d83a7-dd7a-407d-b44e-7ee0a2a1492a?source=cve - https://plugins.trac.wordpress.org/browser/ai-addons-for-elementor/tags/2.2.1/includes/widgets/accordion.php#L958 - https://plugins.trac.wordpress.org/browser/ai-addons-for-elementor/tags/2.2.1/includes/widgets/tab.php#L905
CVE ID: CVE-2024-12142 State: PUBLISHED Published: 2025-01-17T10:19:11.768Z Last Updated: 2025-02-12T16:51:46.673Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Schneider Electric Products: Modicon M340 processors (part numbers BMXP34*), BMXNOE0100, BMXNOE0110, BMXNOR0200H Problem Types: CWE-200 Description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download
and restricted functions are invoked. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-05.pdf
CVE ID: CVE-2024-12143 State: PUBLISHED Published: 2025-06-27T17:00:28.792Z Last Updated: 2025-09-23T07:38:24.948Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mobilteg Mobile Informatics Products: Mikro Hand Terminal - MikroDB Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection.This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. A
etion of the fixing process within the specified time. The CVE will be updated when new information becomes available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0142
CVE ID: CVE-2024-12144 State: PUBLISHED Published: 2025-03-06T14:05:09.395Z Last Updated: 2025-03-06T14:37:50.289Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Finder Fire Safety Products: Finder ERP/CRM (Old System) Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.This issue affects Finder ERP/CRM (Old System): before 18.12.2024. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0060
CVE ID: CVE-2024-12146 State: PUBLISHED Published: 2025-03-06T14:08:33.654Z Last Updated: 2025-10-14T12:22:56.717Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Finder Fire Safety Products: Finder ERP/CRM (New System) Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (New System) allows SQL Injection.This issue affects Finder ERP/CRM (New System): before 18.12.2024. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0060
CVE ID: CVE-2024-12147 State: PUBLISHED Published: 2024-12-04T17:31:04.826Z Last Updated: 2025-01-14T14:06:27.563Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Netgear Products: R6900 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Netgear R6900 1.0.1.26_1.0.20. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file upgrade_check.cgi of the component HTTP Header Handler. The manipulation of the argument Content-Length leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer s
exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286873 - https://vuldb.com/?ctiid.286873 - https://vuldb.com/?submit.451858 - https://github.com/upload000/Hub/blob/main/IOT/Netgear_R6900.md - https://www.netgear.com/about/eos/ - https://www.netgear.com/
CVE ID: CVE-2024-12148 State: PUBLISHED Published: 2024-12-04T17:18:21.584Z Last Updated: 2024-12-05T18:45:02.579Z Vendors: Devolutions Products: Server Problem Types: CWE-863 Description: Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2024-0017