Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he internal network to the AirTunes / AirPlay service. With prepared HTTP requests, an attacker can cause the Car Play service to fail. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2024-37603 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-02-18T14:08:30.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible type confusion exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2024-37605 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-17T17:10:11.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://docs.google.com/document/d/1cWlVLaVvr_xzkqbKIXY7EW89hNHE89SSlNtesv6lzl8/edit?usp=sharing - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10397
CVE ID: CVE-2024-37606 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-17T17:09:42.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10247 - https://docs.google.com/document/d/1qWJh2jgEhmyeW3OefMQNsrlKdATMSU6Twjkk1p3qfAs/edit?usp=sharing
CVE ID: CVE-2024-37607 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-17T17:09:19.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer overflow vulnerability in D-Link DAP-2555 REVA_FIRMWARE_1.20 allows remote attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://docs.google.com/document/d/1haRDAIN8SbAF8qKNHAm1awnI_LCAPauR8T_pbFREnMM/edit?usp=sharing - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10232
CVE ID: CVE-2024-37619 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-02T03:57:39.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id parameter at /spec/index.blade.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/45 - https://www.strongshop.cn/
CVE ID: CVE-2024-37620 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-11-05T20:49:32.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPVOD v4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /view/admin/view.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpvod.com/ - https://github.com/Hebing123/cve/issues/46
CVE ID: CVE-2024-37621 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-02T03:57:39.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/47 - https://www.strongshop.cn
CVE ID: CVE-2024-37622 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-02T03:57:39.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rainrocka/xinhu/issues/4
CVE ID: CVE-2024-37623 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-02T03:57:39.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rainrocka/xinhu/issues/5
CVE ID: CVE-2024-37624 State: PUBLISHED Published: 2024-06-17T00:00:00.000Z Last Updated: 2025-03-17T21:35:02.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php. component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rainrocka/xinhu/issues/6
CVE ID: CVE-2024-37625 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-20T16:42:10.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zhimengzhe/iBarn - https://github.com/zhimengzhe/iBarn/issues/20
CVE ID: CVE-2024-37626 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T03:57:39.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/ - http://a6000r.com - https://github.com/lakemoon602/vuln/blob/main/totolink/TOTOlink%20A6000R%20vif_enable.md
CVE ID: CVE-2024-37629 State: PUBLISHED Published: 2024-06-12T00:00:00.000Z Last Updated: 2025-10-07T19:38:35.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/summernote/summernote/issues/4642 - https://grumpz.net/cve-2024-37629-simple-xss-payload-exploits-0day-vulnerability-in-10000-web-apps - https://github.com/summernote/summernote/releases/tag/v0.9.1
CVE ID: CVE-2024-37630 State: PUBLISHED Published: 2024-06-13T00:00:00 Last Updated: 2024-09-06T16:40:42.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/D-link/DIR-605L/README.md
CVE ID: CVE-2024-37631 State: PUBLISHED Published: 2024-06-13T00:00:00 Last Updated: 2024-08-02T03:57:39.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/UploadCustomModule/README.md
CVE ID: CVE-2024-37632 State: PUBLISHED Published: 2024-06-13T00:00:00.000Z Last Updated: 2025-03-13T17:21:53.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/loginAuth/README.md
CVE ID: CVE-2024-37633 State: PUBLISHED Published: 2024-06-13T00:00:00 Last Updated: 2024-08-02T03:57:39.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiGuestCfg/README.md
CVE ID: CVE-2024-37634 State: PUBLISHED Published: 2024-06-13T00:00:00.000Z Last Updated: 2025-03-13T13:43:55.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiEasyCfg/README.md
CVE ID: CVE-2024-37635 State: PUBLISHED Published: 2024-06-13T00:00:00 Last Updated: 2024-08-13T14:48:37.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWiFiBasicCfg/README.md
CVE ID: CVE-2024-37637 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setWizardCfg/README.md
CVE ID: CVE-2024-37639 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK/A3700R/setIpPortFilterRules/README.md
CVE ID: CVE-2024-37640 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/tree/main/TOTOLINK/A3700R/setWiFiEasyGuestCfg
CVE ID: CVE-2024-37641 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TRENDnet/TEW-814DAP/formNewSchedule/README.md
CVE ID: CVE-2024-37642 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability via the ipv4_ping, ipv6_ping parameter at /formSystemCheck . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TRENDnet/TEW-814DAP/formSystemCheck/README.md
CVE ID: CVE-2024-37643 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formPasswordAuth . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TRENDnet/TEW-814DAP/formPasswordAuth/README.md
CVE ID: CVE-2024-37644 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TRENDnet/TEW-814DAP/hardcode/README.md
CVE ID: CVE-2024-37645 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T03:57:39.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formSysLog . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TRENDnet/TEW-814DAP/formSysLog/README.md
CVE ID: CVE-2024-37649 State: PUBLISHED Published: 2024-12-18T00:00:00 Last Updated: 2024-12-31T19:45:17.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obtain sensitive information via the modification of user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kklzzcun/SecureSTATION-/blob/main/The%20SecureSTATION%20.md
CVE ID: CVE-2024-37654 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-11-21T18:45:43.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05SD, AA-07BD, AA-07BDI, BA-04BD, BA-04MD, BA-08BD, BA-08MD, BA-12BD, BA-12MD, CR-02BD before 3.9.2 allows a remote attacker to obtain sensitive information via a crafted HTTP GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DrieVlad/BAS-IP-vulnerabi
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DrieVlad/BAS-IP-vulnerabilities
CVE ID: CVE-2024-37656 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-07-08T17:36:32.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gnuboard/gnuboard5/issues/318
CVE ID: CVE-2024-37657 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-07-08T17:36:23.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via thebbs/login.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gnuboard/gnuboard5/issues/320 - https://sir.kr/g5_pds/7205
CVE ID: CVE-2024-37658 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-07-08T17:36:16.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the bbs/member_confirm.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sir.kr/g5_pds/7205 - https://github.com/gnuboard/gnuboard5/issues/319
CVE ID: CVE-2024-37661 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-11-04T18:48:46.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/tl-7dr5130-redirect.md
CVE ID: CVE-2024-37662 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-14T14:05:06.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md
CVE ID: CVE-2024-37663 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-11-22T15:23:00.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/redmi-rb03-redirect.md
CVE ID: CVE-2024-37664 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-11-22T15:22:11.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/redmi-rb03-nat-rst.md
CVE ID: CVE-2024-37665 State: PUBLISHED Published: 2024-06-12T00:00:00 Last Updated: 2024-08-21T14:07:11.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/guipi01/WVP-GB28181 - https://github.com/648540858/wvp-GB28181-pro
CVE ID: CVE-2024-37671 State: PUBLISHED Published: 2024-06-21T00:00:00.000Z Last Updated: 2025-03-14T15:47:14.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://docubase.com - http://tessi.com - https://github.com/MohamedAzizMSALLEMI/Docubase_Security/blob/main/CVE-2024-37671.md
CVE ID: CVE-2024-37672 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-10-28T20:59:49.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://docubase.com - http://tessi.com - https://github.com/MohamedAzizMSALLEMI/Docubase_Security/blob/main/CVE-2024-37672.md
CVE ID: CVE-2024-37673 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-08-02T03:57:39.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the filename parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://docubase.com - http://tessi.com - https://github.com/MohamedAzizMSALLEMI/Docubase_Security/blob/main/CVE-2024-37673.md
CVE ID: CVE-2024-37674 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T03:57:39.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://moodle.com - https://github.com/MohamedAzizMSALLEMI/Moodle_Security/blob/main/CVE-2024-37674.md
CVE ID: CVE-2024-37675 State: PUBLISHED Published: 2024-06-21T00:00:00.000Z Last Updated: 2025-03-18T15:03:48.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter "sectionContent" related to the functionality of adding notes to an uploaded file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://docubase.com - http://tessi.com - https://github.com/MohamedAzizMSALLEMI/Docubase_Security/blob/main/CVE-2024-37675.md
CVE ID: CVE-2024-37676 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T03:57:39.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://htop.com - https://github.com/htop-dev/htop - https://gist.github.com/Cirno9-dev/0109cde3bdbe7eccc6770515106740b7
CVE ID: CVE-2024-37677 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-02T03:57:39.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Shenzhen Weitillage Industrial Co., Ltd the access management specialist V6.62.51215 allows a remote attacker to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dabaizhizhu/123/issues/2
CVE ID: CVE-2024-37678 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-02T03:57:39.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dabaizhizhu/123/issues/3