Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-57233 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:34:48.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_1_vif_disable/README.md
CVE ID: CVE-2024-57234 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:33:33.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_5_apcli_cancel_wps/README.md
CVE ID: CVE-2024-57235 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:30:05.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_2_vif_enable/README.md
CVE ID: CVE-2024-57237 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-03T17:22:46.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the /reqproc/proc_get endpoint. The vulnerability arises because the cmd parameter does not properly sanitize input and the response is served with a Content-Type of text/html. This behavior allows the browser to execute injected JavaScript code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://prolink2u.com/products/dl-7203e-b - https://harryha.substack.com/p/4g-lte-mobile-wifi-dl7203e-xss-cve-2024-57237
CVE ID: CVE-2024-57238 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-12T19:13:56.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/proc_get endpoint. The vulnerability allows an attacker to manipulate SQL queries by injecting malicious SQL code into the order_by parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://prolink2u.com/products/dl-7203e-b - https://harryha.substack.com/p/4g-lte-mobile-wifi-dl7203e-sqli-cve-2024-57238
CVE ID: CVE-2024-57240 State: PUBLISHED Published: 2025-03-03T00:00:00.000Z Last Updated: 2025-03-04T16:19:17.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/devom3/43c328e23ec854090ed555a13541ca94
CVE ID: CVE-2024-57241 State: PUBLISHED Published: 2025-02-11T00:00:00.000Z Last Updated: 2025-02-18T14:04:57.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/woshidaheike/dedecms-url-redirection
CVE ID: CVE-2024-57248 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-02-11T15:22:10.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gleamtech.com/filevista - https://packetstorm.news/files/id/189021
CVE ID: CVE-2024-57249 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-02-11T15:21:05.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via exploiting a vulnerability in access control mechanisms by removing authentication-related HTTP headers, such as the Cookie header, in the request. This bypasses the authentication process and grants attackers access to sensitive image files without proper login credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gleamtech.com/filevista - https://pac
ials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gleamtech.com/filevista - https://packetstorm.news/files/id/189019
CVE ID: CVE-2024-57252 State: PUBLISHED Published: 2025-01-17T00:00:00 Last Updated: 2025-01-17T21:14:18.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitrarily. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/J-0k3r/some/blob/main/ssrf.pdf - https://github.com/J-0k3r/CVE-2024-57252
CVE ID: CVE-2024-57254 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T19:32:35.480Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: denx Products: U-Boot Problem Types: CWE-190 Description: An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.denx.de/u-boot/u-boot/-/commit/c8e929e5758999933f9e905049ef2bf3fe6b140d - https://www.openwall.com/lists/oss-security/2025/02/17/2
CVE ID: CVE-2024-57255 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T19:32:36.870Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: denx Products: U-Boot Problem Types: CWE-190 Description: An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.denx.de/u-boot/u-boot/-/commit/233945eba63e24061dffeeaeb7cd6fe985278356 - https://www.openwall.com/lists/oss-security/2025/02/17
u-boot/u-boot/-/commit/233945eba63e24061dffeeaeb7cd6fe985278356 - https://www.openwall.com/lists/oss-security/2025/02/17/2
CVE ID: CVE-2024-57256 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T19:32:38.236Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: denx Products: U-Boot Problem Types: CWE-190 Description: An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.denx.de/u-boot/u-boot/-/commit/35f75d2a46e5859138c83a75cd2f4141c5479ab9 - https://www.ope
: References: - https://source.denx.de/u-boot/u-boot/-/commit/35f75d2a46e5859138c83a75cd2f4141c5479ab9 - https://www.openwall.com/lists/oss-security/2025/02/17/2
CVE ID: CVE-2024-57257 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T19:32:39.607Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: denx Products: U-Boot Problem Types: CWE-674 Description: A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.denx.de/u-boot/u-boot/-/commit/4f5cc096bfd0a591f8a11e86999e3d90a9484c34 - https://www.openwall.com/lists/oss-security/2025/02/17/2
CVE ID: CVE-2024-57258 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T19:32:40.965Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: denx Products: U-Boot Problem Types: CWE-190 Description: Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.denx.de/u-boot/u-boot/-/commit/0a10b49206a29b4aa2f80233a3e53ca0466bb0b3 - https://source.denx.de/u-boot/u-boot/-/commit/8642b2178d2c4002c99a0b69a845a48f2ae2
49206a29b4aa2f80233a3e53ca0466bb0b3 - https://source.denx.de/u-boot/u-boot/-/commit/8642b2178d2c4002c99a0b69a845a48f2ae2706f - https://source.denx.de/u-boot/u-boot/-/commit/c17b2a05dd50a3ba437e6373093a0d6a359cdee0 - https://www.openwall.com/lists/oss-security/2025/02/17/2
CVE ID: CVE-2024-57259 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T19:32:42.329Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: denx Products: U-Boot Problem Types: CWE-193 Description: sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.denx.de/u-boot/u-boot/-/commit/048d795bb5b3d9c5701b4855f5e74bcf6849bf5e - https://www.openwall.com/lists/oss-security/2025/02/17
u-boot/u-boot/-/commit/048d795bb5b3d9c5701b4855f5e74bcf6849bf5e - https://www.openwall.com/lists/oss-security/2025/02/17/2
CVE ID: CVE-2024-57261 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-19T14:59:59.115Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Pengutronix Products: barebox Problem Types: CWE-190 Description: In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lists.infradead.org/pipermail/barebox/2024-November/048631.html - https://git.pengutronix.de/cgit/barebox/commit/?id=7cf25e0733f08f68d1bf0ca0c3cf6e2dfe51bd3c
CVE ID: CVE-2024-57262 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-19T14:59:25.422Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Pengutronix Products: barebox Problem Types: CWE-190 Description: In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue to CVE-2024-57256. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.pengutronix.de/cgit/barebox/commit/?id=a2b76550f7d8 - https://git.pengutronix.de/cgi
richment: References: - https://git.pengutronix.de/cgit/barebox/commit/?id=a2b76550f7d8 - https://git.pengutronix.de/cgit/barebox/commit/?id=a2b76550f7d87ba6f88a9ea50e71f107b514ff4e
CVE ID: CVE-2024-57272 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:45:14.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kklzzcun/Camera/blob/main/SecureSTATION%20%E5%AD%98%E5%9C%A8%E5%8F%8D%E5%B0%84%E5%BD%A2XSS%E6%BC%8F%E6%B4%9E.md
CVE ID: CVE-2024-57273 State: PUBLISHED Published: 2025-05-14T00:00:00.000Z Last Updated: 2025-05-20T14:27:40.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized "reason" field and a derivable device key generated from the public SSH key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://netgate.com - https://blog.brillantit.com/exploiting-pfsense-xss-command-inje
ISA ADP Vulnrichment: References: - http://netgate.com - https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack/ - https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2 - https://docs.netgate.com/downloads/pfSense-SA-25_03.webgui.asc
CVE ID: CVE-2024-57276 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-30T21:19:20.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges, enabling attackers to escalate privileges by replacing or placing a malicious executable in the service path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yamerooo123/CVE/blob/main/CVE-2024-
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md - https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md
CVE ID: CVE-2024-57277 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-05T16:15:07.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://youtu.be/ved96wsIYlQ - https://github.com/innocommerce/innoshop/issues/115 - https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Innocommerce/Findings.md
CVE ID: CVE-2024-57278 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-02-07T22:46:42.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in QingScan <=v1.8.0. The vulnerability is caused by improper input sanitization of the query parameter, allowing an attacker to inject malicious JavaScript payloads. When a victim accesses a crafted URL containing the malicious input, the script executes in the victim's browser context. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/78778443/QingScan/issues/41
CVE ID: CVE-2024-57279 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-02-07T22:47:33.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <= ce92321, specifically in the /setup/index.php endpoint via the returnto parameter. This vulnerability arises due to improper sanitization of user-supplied input, allowing an attacker to inject malicious JavaScript. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wheelybird/ldap-user-manager/issues/232
CVE ID: CVE-2024-57326 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T21:17:43.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57326
CVE ID: CVE-2024-57328 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T21:16:33.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57328
CVE ID: CVE-2024-57329 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T21:15:46.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57329
CVE ID: CVE-2024-57336 State: PUBLISHED Published: 2025-05-28T00:00:00.000Z Last Updated: 2025-05-30T17:03:15.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to obtain Administrator account access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.m2soft.co.kr/sub/board/news.asp?mode=view&idx=2411
CVE ID: CVE-2024-57337 State: PUBLISHED Published: 2025-05-28T00:00:00.000Z Last Updated: 2025-05-30T20:32:00.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.m2soft.co.kr/sub/board/news.asp?mode=view&idx=2411
CVE ID: CVE-2024-57338 State: PUBLISHED Published: 2025-05-28T00:00:00.000Z Last Updated: 2025-05-30T20:31:06.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.m2soft.co.kr/sub/board/news.asp?mode=view&idx=2411
CVE ID: CVE-2024-57348 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-18T20:11:47.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in PecanProject pecan through v.1.8.0 allows a remote attacker to execute arbitrary code via the crafted payload to the hostname, sitegroupid, lat, lon and sitename parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PecanProject/pecan/issues/3400
CVE ID: CVE-2024-57357 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-02-07T23:04:09.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows command injection by injecting 'devpwd'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/c10uds/tplink-wpa8630-rce-vulnerability
CVE ID: CVE-2024-57360 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T15:28:36.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: `nm --without-symbol-version` function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=32467
CVE ID: CVE-2024-57362 State: REJECTED Published: N/A Last Updated: 2025-02-03T17:15:06.619Z Description: No description available.
CVE ID: CVE-2024-57369 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-01-28T20:28:33.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clickjacking vulnerability in typecho v1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/typecho/typecho - https://typecho.org/ - https://royblume.github.io/CVE-2024-57369/
CVE ID: CVE-2024-57370 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-01-23T20:28:21.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sunnygkp10.com - https://royblume.github.io/CVE-2024-57370/ - https://github.com/sunnygkp10/Online-Exam-System-
CVE ID: CVE-2024-57372 State: PUBLISHED Published: 2025-01-17T00:00:00 Last Updated: 2025-01-17T21:24:49.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in InformationPush master version allows a remote attacker to obtain sensitive information via the title, time and msg parameters Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kaixin1995 - https://github.com/kaixin1995/InformationPush - https://royblume.github.io/CVE-2024-57372/
CVE ID: CVE-2024-57373 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-02-06T17:07:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in LifestyleStore v1.0 allows a remote attacker to execute unauthorized actions on behalf of an authenticated user, potentially leading to account modifications or data compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sajalagrawal/LifestyleStore - https://github.com/cypherdavy/CVE-2024-57373
CVE ID: CVE-2024-57375 State: PUBLISHED Published: 2025-04-25T00:00:00.000Z Last Updated: 2025-04-25T14:26:23.541Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Andamiro Products: Pump It Up Problem Types: CWE-1419 Description: Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain deselect actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://xx.piugame.com/bbs/board.php?bo_table=global_notice&wr_id=368 - https://www.youtube.com/watch?v=DXrnQpTlQs0
CVE ID: CVE-2024-57376 State: PUBLISHED Published: 2025-01-28T00:00:00.000Z Last Updated: 2025-01-29T15:39:34.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/