Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6268 State: PUBLISHED Published: 2024-06-23T09:31:04.178Z Last Updated: 2024-08-01T21:33:05.341Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. Affected by this issue is some unknown functionality of the file login.php of the component Login Page. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269480.
tely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269480. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269480 - https://vuldb.com/?ctiid.269480 - https://vuldb.com/?submit.362805 - https://powerful-bulb-c36.notion.site/SQL-injection-to-authorization-bypass-af95fa2c72b84b4297e3d61c17cd7cdb?pvs=4 - https://github.com/lahirudanushka/School-Management-System---PHP-MySQL/issues/2
CVE ID: CVE-2024-6269 State: PUBLISHED Published: 2024-06-23T11:31:04.090Z Last Updated: 2024-08-01T21:33:05.348Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Ruijie Products: RG-UAC Problem Types: CWE-77 Description: A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function get_ip.addr_details of the file /view/vpn/autovpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument indevice leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269482 is the identifier assigned to this vulnerability. NOTE:
it has been disclosed to the public and may be used. VDB-269482 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269482 - https://vuldb.com/?ctiid.269482 - https://vuldb.com/?submit.358202 - https://github.com/charliecatsec/cve1/issues/1
CVE ID: CVE-2024-6270 State: PUBLISHED Published: 2024-08-05T06:00:07.727Z Last Updated: 2024-08-05T13:22:38.228Z Vendors: Unknown Products: Community Events Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3d0a6edc-61e8-42fb-8b93-ef083146bd9c/
CVE ID: CVE-2024-6271 State: PUBLISHED Published: 2024-07-22T06:00:06.608Z Last Updated: 2024-08-01T21:33:05.310Z Vendors: Unknown Products: Community Events Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/44d9d085-34cb-490f-a3f5-f9eafae85ab8/
CVE ID: CVE-2024-6272 State: PUBLISHED Published: 2024-07-31T06:00:02.822Z Last Updated: 2024-08-01T15:00:41.459Z Vendors: Unknown Products: SpiderContacts Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The SpiderContacts WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/146b94df-7fc6-4da3-9ef1-d2875ae3fa9e/
CVE ID: CVE-2024-6273 State: PUBLISHED Published: 2024-06-23T22:00:05.608Z Last Updated: 2024-08-01T21:33:05.333Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Clinic Queuing System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function save_patient of the file patient_side.php. The manipulation of the argument Full Name/Contact/Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269485 was assigned to this vulnerabili
The exploit has been disclosed to the public and may be used. The identifier VDB-269485 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269485 - https://vuldb.com/?ctiid.269485 - https://vuldb.com/?submit.362873 - https://docs.google.com/document/d/14ExrgXqPQlgvjw2poqNzYzAOi-C5tda-XBJF513yzag/edit?usp=sharing - https://github.com/sgr-xd/CVEs/blob/main/CVE-2024-6273.md
CVE ID: CVE-2024-6274 State: PUBLISHED Published: 2024-06-24T01:00:06.163Z Last Updated: 2024-08-01T21:33:05.313Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-26
The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269487. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269487 - https://vuldb.com/?ctiid.269487 - https://vuldb.com/?submit.362872 - https://powerful-bulb-c36.notion.site/sql-injection-1-6b3c66351180485ea764561a47239907
CVE ID: CVE-2024-6275 State: PUBLISHED Published: 2024-06-24T01:00:08.387Z Last Updated: 2024-08-01T21:33:05.335Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in lahirudanushka School Management System 1.0.0/1.0.1. This vulnerability affects unknown code of the file parent.php of the component Parent Page. The manipulation of the argument update leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269488. Additional Analyst Notes:
disclosed to the public and may be used. The identifier of this vulnerability is VDB-269488. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269488 - https://vuldb.com/?ctiid.269488 - https://vuldb.com/?submit.362876 - https://powerful-bulb-c36.notion.site/sql-injection-2-bd75eb9250214c2e95e57965d9ea392a
CVE ID: CVE-2024-6276 State: PUBLISHED Published: 2024-06-24T01:31:04.502Z Last Updated: 2024-08-01T21:33:05.331Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. This issue affects some unknown processing of the file teacher.php of the component Teacher Page. The manipulation of the argument update leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269489 was assigned to this vulnerabi
. The exploit has been disclosed to the public and may be used. The identifier VDB-269489 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269489 - https://vuldb.com/?ctiid.269489 - https://vuldb.com/?submit.362877 - https://powerful-bulb-c36.notion.site/sql-injection-3-52ce387faca74869b441eb1bf4cec27a
CVE ID: CVE-2024-6277 State: PUBLISHED Published: 2024-06-24T02:00:06.068Z Last Updated: 2024-08-01T21:33:05.316Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Affected is an unknown function of the file student.php of the component Student Page. The manipulation of the argument update leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-269490 is the identifier assigned to this vulnerability. Add
ploit has been disclosed to the public and may be used. VDB-269490 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269490 - https://vuldb.com/?ctiid.269490 - https://vuldb.com/?submit.362882 - https://powerful-bulb-c36.notion.site/sql-injection-4-a2545288ad9244009ff1097df19ee635
CVE ID: CVE-2024-6278 State: PUBLISHED Published: 2024-06-24T02:31:04.878Z Last Updated: 2024-08-01T21:33:05.248Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability i
emotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269491. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269491 - https://vuldb.com/?ctiid.269491 - https://vuldb.com/?submit.362883 - https://powerful-bulb-c36.notion.site/sql-injection-5-f0e968979e3c47049ed5965ca3a7ed7e
CVE ID: CVE-2024-6279 State: PUBLISHED Published: 2024-06-24T02:31:06.972Z Last Updated: 2024-08-01T21:33:05.341Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: lahirudanushka Products: School Management System Problem Types: CWE-89 Description: A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file examresults-par.php of the component Exam Results Page. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269492
motely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269492. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269492 - https://vuldb.com/?ctiid.269492 - https://vuldb.com/?submit.362886 - https://powerful-bulb-c36.notion.site/sql-injection-6-cb069f55445545e19212a7b1ae489a72
CVE ID: CVE-2024-6280 State: PUBLISHED Published: 2024-06-24T03:00:05.504Z Last Updated: 2024-08-01T21:33:05.311Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269493 was assigned to this vulnerability. Add
loit has been disclosed to the public and may be used. The identifier VDB-269493 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269493 - https://vuldb.com/?ctiid.269493 - https://vuldb.com/?submit.363054 - https://github.com/Isfulou/cve/blob/main/upload.md
CVE ID: CVE-2024-6281 State: PUBLISHED Published: 2024-07-20T03:19:25.663Z Last Updated: 2025-10-15T12:50:33.120Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: parisneo Products: parisneo/lollms Problem Types: CWE-22 Description: A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/0a62f2fb-4e62-4128-
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/0a62f2fb-4e62-4128-9dc4-e8f1d959ac61 - https://github.com/parisneo/lollms/commit/26a3ff35acf152b49e1087d5698ad4864c7b6092
CVE ID: CVE-2024-6282 State: PUBLISHED Published: 2024-09-10T11:30:30.953Z Last Updated: 2024-09-10T13:21:27.444Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: litonice13 Products: Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor Problem Types: CWE-79 Description: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up to, and including 2.0.6.4 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible fo
.0.6.4 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8bab0acc-5a5d-4dd4-9201-199b7f5aaa69?source=cve - https://plugins.trac.wordpress.org/browser/master-addons/tags/2.0.6.2/assets/js/master-addons-scripts.js#L3398 - https://plugins.trac.wordpress.org/changeset/3146230/
CVE ID: CVE-2024-6283 State: PUBLISHED Published: 2024-06-27T04:38:47.998Z Last Updated: 2024-08-01T21:33:05.519Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: detheme Products: DethemeKit For Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL parameter of the De Gallery widget in all versions up to and including 2.1.5 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-
n and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9b2083f9-79d0-43f6-b7ae-a5817dc561b0?source=cve - https://plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php#L2565 - https://plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php#L2900
CVE ID: CVE-2024-6284 State: PUBLISHED Published: 2024-07-03T22:58:17.340Z Last Updated: 2025-09-08T09:36:50.396Z Vendors: Google Products: https://github.com/google/nftables Problem Types: CWE-1286, CWE-1389 Description: In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects: https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/nftables@v0.2.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
om/google/nftables@v0.2.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/nftables/issues/225 - https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 - https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596
CVE ID: CVE-2024-6285 State: PUBLISHED Published: 2024-06-24T15:32:13.776Z Last Updated: 2024-08-01T21:33:05.317Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Renesas Products: rcar_gen3_v2.5 Problem Types: CWE-191 Description: Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b - https://asrg
s: - https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b - https://asrg.io/security-advisories/cve-2024-6285/
CVE ID: CVE-2024-6286 State: PUBLISHED Published: 2024-07-10T20:25:21.414Z Last Updated: 2024-08-01T21:33:05.352Z Vendors: Citrix Products: Citrix Workspace app for Windows Description: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.citrix.com/article/CTX678036
CVE ID: CVE-2024-6287 State: PUBLISHED Published: 2024-06-24T15:37:15.953Z Last Updated: 2024-08-01T21:33:05.333Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Renesas Products: rcar_gen3_v2.5 Problem Types: CWE-682 Description: Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot. Additional Analyst Notes: - CI
age partly or completely, which could result in code execution and bypass of secure boot. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/renesas-rcar/arm-trusted-firmware/commit/954d488a9798f8fda675c6b57c571b469b298f04 - https://asrg.io/security-advisories/cve-2024-6287/
CVE ID: CVE-2024-6288 State: PUBLISHED Published: 2024-06-28T06:57:47.429Z Last Updated: 2025-07-01T17:57:35.405Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: tatvic Products: Conversios: Google Analytics 4 (GA4), Google Ads, Microsoft Ads, and Multi-Channel Conversion Tracking Problem Types: CWE-79 Description: The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tiktok_user_id’ parameter in all versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate
d including, 7.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f668c3cd-bf64-4e95-8d75-70e4f12cabce?source=cve - https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for-woocommerce-store/tags/7.1.0/admin/partials/wizard-productfeed-even.php?rev=3105213#L371 - https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for
rtials/wizard-productfeed-even.php?rev=3105213#L371 - https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for-woocommerce-store/tags/7.1.0/admin/partials/wizard-productfeed-odd.php?rev=3105213#L368 - https://plugins.trac.wordpress.org/changeset/3108037/
CVE ID: CVE-2024-6289 State: PUBLISHED Published: 2024-07-15T06:00:06.081Z Last Updated: 2025-08-27T12:00:54.025Z Vendors: Unknown Products: WPS Hide Login Problem Types: CWE-203 Observable Discrepancy Description: The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/fd6d0362-df1d-4416-b8b5-6e5d0ce84793/
CVE ID: CVE-2024-6290 State: PUBLISHED Published: 2024-06-24T21:46:54.076Z Last Updated: 2025-03-13T20:37:01.228Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/342428008 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65
issues/342428008 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65HWXYSYMH55VDO6N36EOZFUNL4O/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHV5WTU27YOIBIM2CON42SHWY6J2HPRS/
CVE ID: CVE-2024-6291 State: PUBLISHED Published: 2024-06-24T21:46:54.505Z Last Updated: 2025-02-13T17:54:42.312Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/40942995 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
um.org/issues/40942995 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65HWXYSYMH55VDO6N36EOZFUNL4O/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHV5WTU27YOIBIM2CON42SHWY6J2HPRS/