Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33681 State: PUBLISHED Published: 2024-04-29T06:01:17.586Z Last Updated: 2024-08-02T02:36:04.546Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sandor Kovacs Products: Regenerate post permalink Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sandor Kovacs Regenerate post permalink allows Cross-Site Scripting (XSS).This issue affects Regenerate post permalink: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/regenerate-post-permalinks/wordpress-regenerate-post-permalink-plugin-1-0-3-cross-site-r
tack.com/database/vulnerability/regenerate-post-permalinks/wordpress-regenerate-post-permalink-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33682 State: PUBLISHED Published: 2024-04-26T10:34:58.937Z Last Updated: 2024-08-02T02:36:04.609Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Cookie Information A/S Products: WP GDPR Compliance Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-gdpr-compliance/wordpress-wp-gdpr-compliance-plugin-2-0-23-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33683 State: PUBLISHED Published: 2024-04-26T10:33:17.837Z Last Updated: 2024-08-02T02:36:04.605Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Republic Products: Hide Dashboard Notifications Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Republic Hide Dashboard Notifications.This issue affects Hide Dashboard Notifications: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-hide-backed-notices/wordpress-hide-dashboard-notifications-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerab
lity/wp-hide-backed-notices/wordpress-hide-dashboard-notifications-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33684 State: PUBLISHED Published: 2024-04-29T08:17:43.039Z Last Updated: 2024-08-02T02:36:04.549Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pdfcrowd Products: Save as PDF plugin by Pdfcrowd Problem Types: CWE-862 Description: Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/save-as-pdf-by-pdfcrowd/wordpress-save-as-pdf-plugin-by-pdfcrowd-plugin-3-2-0-broken-access-control-to-stored
nerability/save-as-pdf-by-pdfcrowd/wordpress-save-as-pdf-plugin-by-pdfcrowd-plugin-3-2-0-broken-access-control-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33686 State: PUBLISHED Published: 2024-04-29T05:56:41.838Z Last Updated: 2024-08-02T02:36:04.563Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Extend Themes Products: Pathway, Hugo WP, Althea WP, Elevate WP, Brite, Colibri WP, Vertice Problem Types: CWE-862 Description: Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea WP: from n/a through 1.0.13; Elevate WP: from n/a through 1.0.15; Brite: from
5; Hugo WP: from n/a through 1.0.8; Althea WP: from n/a through 1.0.13; Elevate WP: from n/a through 1.0.15; Brite: from n/a through 1.0.11; Colibri WP: from n/a through 1.0.94; Vertice: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pathway/wordpress-pathway-theme-1-0-15-cross-site-request-forgery-csrf-vulnerability - https://patchstack.com/database/vulnerability/hugo-wp/wordpress-hugo-wp-theme-1-0-8-broken-access-control-vulnerability - https://patchstack.com/database/vulnerability/althea-wp/wordpress-althea-wp-theme-1-0-13-broken-access-control-vulnerability - https://patchstac
atabase/vulnerability/althea-wp/wordpress-althea-wp-theme-1-0-13-broken-access-control-vulnerability - https://patchstack.com/database/vulnerability/elevate-wp/wordpress-elevate-wp-theme-1-0-15-broken-access-control-vulnerability - https://patchstack.com/database/vulnerability/brite/wordpress-brite-theme-1-0-11-broken-access-control-vulnerability - https://patchstack.com/database/vulnerability/colibri-wp/wordpress-colibri-wp-theme-1-0-94-broken-access-control-vulnerability - https://patchstack.com/database/vulnerability/vertice/wordpress-vertice-theme-1-0-7-broken-access-control-vulnerability
CVE ID: CVE-2024-33687 State: PUBLISHED Published: 2024-06-24T15:03:05.467Z Last Updated: 2025-03-13T14:36:56.825Z Vendors: OMRON Corporation Products: NJ Series CPU Unit, NX Series CPU Unit Problem Types: Insufficient verification of data authenticity Description: Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-004_en.pdf - https://jvn.jp/en/vu/JV
: References: - https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-004_en.pdf - https://jvn.jp/en/vu/JVNVU92504444/
CVE ID: CVE-2024-33688 State: PUBLISHED Published: 2024-04-26T12:55:16.202Z Last Updated: 2024-08-02T02:36:04.564Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Extend Themes Products: Teluro Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/teluro/wordpress-teluro-theme-1-0-31-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33689 State: PUBLISHED Published: 2024-04-26T12:54:08.136Z Last Updated: 2024-08-02T02:36:04.611Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Tony Zeoli, Tony Hayes Products: Radio Station Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeoli, Tony Hayes Radio Station.This issue affects Radio Station: from n/a through 2.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/radio-station/wordpress-radio-station-plugin-2-5-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33690 State: PUBLISHED Published: 2024-04-26T12:52:54.367Z Last Updated: 2024-08-02T02:36:04.501Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Jegstudio Products: Financio Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jegstudio Financio.This issue affects Financio: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/financio/wordpress-financio-theme-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33691 State: PUBLISHED Published: 2024-04-26T12:50:45.959Z Last Updated: 2024-08-02T02:36:04.610Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: OptinMonster Popup Builder Team Products: OptinMonster Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in OptinMonster Popup Builder Team OptinMonster.This issue affects OptinMonster: from n/a through 2.15.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/optinmonster/wordpress-popup-builder-by-optinmonster-plugin-2-15-3-cross-site-request-forgery-csrf-notice-dismissal-vulner
tinmonster/wordpress-popup-builder-by-optinmonster-plugin-2-15-3-cross-site-request-forgery-csrf-notice-dismissal-vulnerability?_s_id=cve
CVE ID: CVE-2024-33692 State: PUBLISHED Published: 2024-04-26T12:46:12.902Z Last Updated: 2024-08-02T02:36:04.540Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Satrya Products: Smart Recent Posts Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Satrya Smart Recent Posts Widget allows Stored XSS.This issue affects Smart Recent Posts Widget: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/smart-recent-posts-widget/wordpress-smart-recent-posts-widget-plug
nces: - https://patchstack.com/database/vulnerability/smart-recent-posts-widget/wordpress-smart-recent-posts-widget-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33693 State: PUBLISHED Published: 2024-04-26T12:44:57.737Z Last Updated: 2024-08-02T02:36:04.611Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Meks Products: Meks Smart Social Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meks Meks Smart Social Widget allows Stored XSS.This issue affects Meks Smart Social Widget: from n/a through 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/meks-smart-social-widget/wordpress-meks-smart-social-widget-plugin-1-6-4-
https://patchstack.com/database/vulnerability/meks-smart-social-widget/wordpress-meks-smart-social-widget-plugin-1-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33694 State: PUBLISHED Published: 2024-04-26T12:43:50.951Z Last Updated: 2024-08-02T02:36:04.548Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Meks Products: Meks ThemeForest Smart Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meks Meks ThemeForest Smart Widget allows Stored XSS.This issue affects Meks ThemeForest Smart Widget: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/meks-themeforest-smart-widget/wordpress-meks-themeforest-sma
References: - https://patchstack.com/database/vulnerability/meks-themeforest-smart-widget/wordpress-meks-themeforest-smart-widget-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33695 State: PUBLISHED Published: 2024-04-26T12:42:27.184Z Last Updated: 2024-08-02T02:36:04.563Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemeNcode Products: Fan Page Widget by ThemeNcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode Fan Page Widget by ThemeNcode allows Stored XSS.This issue affects Fan Page Widget by ThemeNcode: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/facebook-fan-page-widget/wordpress-fan-page-widg
Container: References: - https://patchstack.com/database/vulnerability/facebook-fan-page-widget/wordpress-fan-page-widget-by-themencode-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33696 State: PUBLISHED Published: 2024-04-26T12:41:18.749Z Last Updated: 2024-08-02T02:36:04.565Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Broadstreet XPRESS Products: WordPress Ad Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet XPRESS WordPress Ad Widget allows Stored XSS.This issue affects WordPress Ad Widget: from n/a through 2.20.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ad-widget/wordpress-wordpress-ad-widget-plugin-2-20-0-cross
References: - https://patchstack.com/database/vulnerability/ad-widget/wordpress-wordpress-ad-widget-plugin-2-20-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33697 State: PUBLISHED Published: 2024-04-26T12:40:09.871Z Last Updated: 2024-08-02T02:36:04.551Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Rimes Gold Products: CF7 File Download – File Download for CF7 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rimes Gold CF7 File Download – File Download for CF7 allows Stored XSS.This issue affects CF7 File Download – File Download for CF7: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-file-dow
CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-file-download/wordpress-cf7-file-download-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33698 State: PUBLISHED Published: 2024-09-10T09:36:31.009Z Last Updated: 2025-10-14T09:15:00.448Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Opcenter Quality, Opcenter RDnL, SIMATIC PCS neo V4.0, SIMATIC PCS neo V4.1, SIMATIC PCS neo V5.0, SINEC NMS, SINEMA Remote Connect Client, Totally Integrated Automation Portal (TIA Portal) V16, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19 Problem Types: CWE-122 Description: A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter
lem Types: CWE-122 Description: A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3).
V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-039007.html
CVE ID: CVE-2024-33699 State: PUBLISHED Published: 2024-10-30T13:35:17.397Z Last Updated: 2024-10-30T15:03:14.534Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: LevelOne Products: WBR-6012 Problem Types: CWE-620 Description: The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1984
CVE ID: CVE-2024-33700 State: PUBLISHED Published: 2024-10-30T13:35:13.936Z Last Updated: 2024-10-30T15:03:15.638Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LevelOne Products: WBR-6012 Problem Types: CWE-20 Description: The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1998
CVE ID: CVE-2024-33748 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:36:04.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mvnrepository.com/artifact/net.mingsoft/ms-basic - https://github.com/Fr1ezy/Fr1ezy-ms-basic_XSS
CVE ID: CVE-2024-33749 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-14T19:10:39.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/QianGeG/CVE/issues/13
CVE ID: CVE-2024-33752 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:36:04.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md
CVE ID: CVE-2024-33753 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:36:04.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and users to be changed without authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/kklzzcun/Camera/blob/main/Camera/%E8%B6%8A%E6%9D%83%E4%BF%AE%E6%94%B9%E7%AE%A1%E7%90%86%E5%91%98%E6%88%96%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF.md
CVE ID: CVE-2024-33763 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-10-25T19:25:05.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg
CVE ID: CVE-2024-33764 State: PUBLISHED Published: 2024-05-01T00:00:00.000Z Last Updated: 2025-03-13T17:56:10.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg
CVE ID: CVE-2024-33766 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-12-04T17:06:21.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg
CVE ID: CVE-2024-33767 State: PUBLISHED Published: 2024-05-01T00:00:00.000Z Last Updated: 2025-03-14T00:28:16.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg
CVE ID: CVE-2024-33768 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:36:04.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg
CVE ID: CVE-2024-33771 State: PUBLISHED Published: 2024-05-10T14:41:55.022Z Last Updated: 2025-02-13T15:52:43.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE ID: CVE-2024-33772 State: PUBLISHED Published: 2024-05-10T14:42:33.884Z Last Updated: 2025-02-13T15:52:44.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "curTime." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE ID: CVE-2024-33773 State: PUBLISHED Published: 2024-05-10T14:44:23.326Z Last Updated: 2025-02-13T15:52:44.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE ID: CVE-2024-33774 State: PUBLISHED Published: 2024-05-10T14:45:24.479Z Last Updated: 2025-02-13T15:52:45.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE ID: CVE-2024-33775 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:36:04.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nagios.com/changelog/#nagios-xi - https://github.com/Neo-XeD/CVE-2024-33775