Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-41237 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-08T13:18:01.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/SQL%20Injection%20-%20Teacher.pdf
CVE ID: CVE-2024-41238 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-08T16:16:50.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/SQL%20Injection%20-%20Student.pdf
CVE ID: CVE-2024-41239 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-08T15:52:23.566001 Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Stored%20XSS.pd
ithub.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Stored%20XSS.pdf
CVE ID: CVE-2024-41240 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-13T14:18:18.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Reflected%20XSS%20-%20Teacher.pdf
CVE ID: CVE-2024-41241 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-09-03T18:16:30.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Reflected%20XSS%20-%20Admin.pdf
CVE ID: CVE-2024-41242 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-07T20:12:51.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Reflected%20XSS%20-%
.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Reflected%20XSS%20-%20Student.pdf
CVE ID: CVE-2024-41243 State: PUBLISHED Published: 2024-08-07T00:00:00.000Z Last Updated: 2025-03-19T20:41:35.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%2
E_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20-%20View%20Marks.pdf
CVE ID: CVE-2024-41244 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-08T14:08:50.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view CLASS details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20-%20View%20Class.pdf
CVE ID: CVE-2024-41245 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-08T14:11:50.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%2
E_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20-%20View%20Teachers.pdf
CVE ID: CVE-2024-41246 State: PUBLISHED Published: 2024-08-07T00:00:00.000Z Last Updated: 2025-03-27T15:52:22.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view administrator dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Dashboard.pdf
CVE ID: CVE-2024-41247 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-07T17:36:54.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new class entry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Master%20-%20Add%20Classes.pdf
CVE ID: CVE-2024-41248 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-07T19:58:46.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Master%20-%20Add%20Subject.pdf
CVE ID: CVE-2024-41249 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-07T19:56:43.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20-%20View%20Subjects.pdf
CVE ID: CVE-2024-41250 State: PUBLISHED Published: 2024-08-07T00:00:00.000Z Last Updated: 2025-03-14T15:53:47.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view STUDENT details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20-%20View%20Students.pdf
CVE ID: CVE-2024-41251 State: PUBLISHED Published: 2024-08-07T00:00:00.000Z Last Updated: 2025-03-13T20:19:49.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/admin_teacher_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve Teacher registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Dashboard%20
b/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Dashboard%20-%20Registered%20Teacher.pdf
CVE ID: CVE-2024-41252 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-07T18:19:35.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Re
ive-school-management-system-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Dashboard%20-%20Registered%20Student.pdf
CVE ID: CVE-2024-41253 State: PUBLISHED Published: 2024-07-31T00:00:00 Last Updated: 2024-07-31T21:13:53.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/f69d41c69a4d0751841f4d972b9745da
CVE ID: CVE-2024-41254 State: PUBLISHED Published: 2024-07-31T00:00:00 Last Updated: 2024-10-29T20:34:19.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/d857f268a53aa62402655c8dcd95c68f
CVE ID: CVE-2024-41255 State: PUBLISHED Published: 2024-07-31T00:00:00 Last Updated: 2024-08-01T14:45:04.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/c367f2ca9448810924dcf0f1af30b441
CVE ID: CVE-2024-41256 State: PUBLISHED Published: 2024-07-31T00:00:00.000Z Last Updated: 2025-03-18T17:59:41.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/a6da3fe6128b978ea1aaa5df639d5f98
CVE ID: CVE-2024-41258 State: PUBLISHED Published: 2024-07-31T00:00:00.000Z Last Updated: 2025-03-13T13:44:57.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/ed8c2ba3398c9e28cd8dbf0902bd8edf
CVE ID: CVE-2024-41259 State: PUBLISHED Published: 2024-08-01T00:00:00 Last Updated: 2024-08-02T15:23:04.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulate a user's account information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/d192af10b53a363e2d9e430068333e04
CVE ID: CVE-2024-41260 State: PUBLISHED Published: 2024-08-01T00:00:00 Last Updated: 2024-08-06T18:16:11.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: A static initialization vector (IV) in the encrypt function of netbird v0.28.4 allows attackers to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/92232108ac153e95d538bb17fc5ad636
CVE ID: CVE-2024-41262 State: PUBLISHED Published: 2024-07-31T00:00:00 Last Updated: 2024-08-01T15:49:43.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/c796ef4a0f3d93736c42022e085f78d7
CVE ID: CVE-2024-41264 State: PUBLISHED Published: 2024-08-01T00:00:00 Last Updated: 2024-08-07T20:07:02.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/33ceaccbc9b05d439a944c2b55fa1c0f
CVE ID: CVE-2024-41265 State: PUBLISHED Published: 2024-08-01T00:00:00 Last Updated: 2024-08-02T15:47:54.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/1a8237f3f9cf793c6433f08b17d1593c
CVE ID: CVE-2024-41270 State: PUBLISHED Published: 2024-08-06T00:00:00 Last Updated: 2024-08-07T14:38:53.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc
CVE ID: CVE-2024-41276 State: PUBLISHED Published: 2024-10-01T00:00:00 Last Updated: 2024-10-01T14:49:47.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their login credentials. However, the request limiting mechanism can be easily bypassed, enabling attackers to perform a brute force attack to guess the correct PIN and gain unauthorized access to the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kaiten.ru/
uthorized access to the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kaiten.ru/ - https://github.com/artemy-ccrsky/CVE-2024-41276
CVE ID: CVE-2024-41281 State: PUBLISHED Published: 2024-07-19T00:00:00 Last Updated: 2024-08-02T04:46:52.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/BuaaIOTTeam/Iot_Linksys/blob/main/Linksys_WRT54G_get_merge_mac.md
CVE ID: CVE-2024-41285 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T17:28:24.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fastcom.com.cn/product-8.html - https://github.com/Giles-one/FW300RouterCrack/ - https://gist.github.com/Giles-one/834b2becd7abebc3cabea0484301d149
CVE ID: CVE-2024-41290 State: PUBLISHED Published: 2024-10-02T00:00:00 Last Updated: 2024-10-02T18:27:48.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/paragbagul111/CVE-2024-41290
CVE ID: CVE-2024-41304 State: PUBLISHED Published: 2024-07-30T00:00:00 Last Updated: 2024-08-23T15:20:48.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/patrickdeanramos/WonderCMS-version-3.4.3-SVG-Stored-Cross-Site-Scripting
CVE ID: CVE-2024-41305 State: PUBLISHED Published: 2024-07-30T00:00:00 Last Updated: 2024-08-02T04:46:52.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/patrickdeanramos/WonderCMS-version-3.4.3-is-vulnerable-to-Server-Side-Request-Forgery
CVE ID: CVE-2024-41308 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-07T20:16:45.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Ping feature of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://the-it-wonders.blogspot.com/2024/07/enjay-crm-10-multiple-code-executions.html
CVE ID: CVE-2024-41309 State: PUBLISHED Published: 2024-08-07T00:00:00 Last Updated: 2024-08-08T14:18:36.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://the-it-wonders.blogspot.com/2024/07/enjay-crm-10-multiple-code-executions.html
CVE ID: CVE-2024-41310 State: PUBLISHED Published: 2024-08-02T00:00:00.000Z Last Updated: 2025-03-18T19:12:39.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: AndServer 2.1.12 is vulnerable to Directory Traversal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Gppp23333/f915655ff17df9a0fd1d92e3e2096cb9
CVE ID: CVE-2024-41311 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-23T00:10:12.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/1226 - https://github.com/strukturag/libheif/pull/1227 - https://github.com/strukturag/libheif/commit/a3ed1b1eb178c5d651d6ac619c8da3d71ac2be36 - https://gist.github.com/flyyee/79f1b224069842ee320115cafa5c35c0
CVE ID: CVE-2024-41314 State: PUBLISHED Published: 2024-07-22T00:00:00 Last Updated: 2024-08-02T04:46:51.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_1_vif_disable/README.md - https://gist.github.com/yanggao017/8593748d4e2de1582344b4035b2456c6
CVE ID: CVE-2024-41315 State: PUBLISHED Published: 2024-07-22T00:00:00 Last Updated: 2024-08-02T04:46:51.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_4_apcli_do_enr_pin_wps/README.md - https://gist.github.com/yanggao017/add8d85589614d09e3e8ccb1fb335f64
CVE ID: CVE-2024-41316 State: PUBLISHED Published: 2024-07-22T00:00:00 Last Updated: 2024-08-02T04:46:52.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_2_apcli_cancel_wps/README.md - https://gist.github.com/yanggao017/690f3e4b5045bbdf1209baa30fb53065