Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-44667 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-10-29T16:04:11.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://shenzhen.com - https://medium.com/%40sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd
CVE ID: CVE-2024-44674 State: PUBLISHED Published: 2024-10-07T00:00:00 Last Updated: 2024-10-07T19:37:51.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/REYu6/iot/blob/21e59c0cf491a9663423c515370c4fcb43436ae0/CVE/dlink/Covr-3902/2600R.md
CVE ID: CVE-2024-44676 State: PUBLISHED Published: 2024-09-10T00:00:00.000Z Last Updated: 2025-04-14T15:15:53.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/elunez/eladmin - https://github.com/jcxj/jcxj/blob/master/source/_posts/eladmin-%E5%A4%8D%E7%8E%B0.md - https://github.com/l1uyi/cve-list/blob/main/cve-list/eladmin-CVE-2024-44676_CVE-2024-44677.md
CVE ID: CVE-2024-44677 State: PUBLISHED Published: 2024-09-10T00:00:00.000Z Last Updated: 2025-04-08T20:41:52.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/elunez/eladmin - https://github.com/jcxj/jcxj/blob/master/source/_posts/eladmin-%E5%A4%8D%E7%8E%B0.md - https://github.com/l1uyi/cve-list/blob/main/cve-list/eladmin-CVE-2024-44676_CVE-2024-44677.md
CVE ID: CVE-2024-44678 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-26T14:09:19.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.newegg.com/gigastone-tr1/p/0E6-008K-00004 - https://www.bridewell.com/insights/blogs/detail/cve-2024-44678-identified-vulnerability-in-gigastone-wi-fi-range-extenders
CVE ID: CVE-2024-44682 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-03-14T15:25:56.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing POST parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/147536951/Qianyi/blob/main/xss.md
CVE ID: CVE-2024-44683 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-03-20T20:52:47.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/147536951/Qianyi/blob/main/Seacms.md
CVE ID: CVE-2024-44684 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-03-19T17:30:06.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/147536951/Qianyi/blob/main/Tp_xss.md
CVE ID: CVE-2024-44685 State: PUBLISHED Published: 2024-09-13T00:00:00 Last Updated: 2024-09-13T18:39:28.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-cve-2024-44685 - https://github.com/ShellFighter/Reports/blob/main/Titan%20MFT%20Server.md
CVE ID: CVE-2024-44711 State: REJECTED Published: N/A Last Updated: 2024-10-10T13:25:57.422263 Description: No description available.
CVE ID: CVE-2024-44716 State: PUBLISHED Published: 2024-08-29T00:00:00.000Z Last Updated: 2025-03-13T13:41:40.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Jingyi-u/DedeBIZ - https://gitee.com/DedeBIZ/DedeV6/releases/tag/6.3.0
CVE ID: CVE-2024-44717 State: PUBLISHED Published: 2024-08-29T00:00:00.000Z Last Updated: 2025-03-13T15:06:20.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/DedeBIZ/DedeV6/releases/tag/6.3.0 - https://github.com/Jingyi-u/DedeBIZ2
CVE ID: CVE-2024-44720 State: PUBLISHED Published: 2024-09-09T00:00:00 Last Updated: 2024-09-09T17:03:31.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/seacms-net/CMS/issues/22
CVE ID: CVE-2024-44721 State: PUBLISHED Published: 2024-09-09T00:00:00 Last Updated: 2024-09-09T17:09:58.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/seacms-net/CMS/issues/23
CVE ID: CVE-2024-44724 State: PUBLISHED Published: 2024-09-09T00:00:00 Last Updated: 2024-09-09T20:44:51.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Hebing123/cve/issues/68
CVE ID: CVE-2024-44725 State: PUBLISHED Published: 2024-09-09T00:00:00 Last Updated: 2024-09-09T20:42:01.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Hebing123/cve/issues/69
CVE ID: CVE-2024-44727 State: PUBLISHED Published: 2024-09-05T00:00:00 Last Updated: 2024-09-05T17:54:21.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Sourcecodehero%20Event%20Management%20System/CVE-2024-44727.MD
CVE ID: CVE-2024-44728 State: PUBLISHED Published: 2024-09-05T00:00:00 Last Updated: 2024-09-05T17:51:14.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Sourcecodehero%20Event%20Management%20System/CVE-2024-44728.md
CVE ID: CVE-2024-44729 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-16T18:47:50.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated attackers without presenter privileges to arbitrarily eject users from a meeting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miroslavpejic85/mirotalk - https://github.com/miroslavpejic85 - https://aware7.com/de/blog/schwachstellen-in-videokonferenzsystemen/ - https://github.com/miroslavpejic85/mirotalksfu/blob/main/SECURITY.md
CVE ID: CVE-2024-44730 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-16T18:49:03.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miroslavpejic85/mirotalk - https://github.com/miroslavpejic85 - https://aware7.com/de/blog/schwachstellen-in-videokonferenzsystemen/ - https://github.com/miroslavpejic85/mirotalksfu/blob/main/SECURITY.md
CVE ID: CVE-2024-44731 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-11-04T19:41:44.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary code via sending crafted payloads in messages to other users over RTC connections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miroslavpejic85/mirotalk - https://github.com/miroslavpejic85 - https://aware7.com/de/blog/schwachstellen-in-videokonferenzsystemen/ - https://github.com/miroslavpejic85/mirotalksfu/blob/main/SECURITY.md
CVE ID: CVE-2024-44734 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-16T18:31:30.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miroslavpejic85/mirotalk - https://github.com/miroslavpejic85 - https://aware7.com/de/blog/schwachstellen-in-videokonferenzsystemen/ - https://github.com/miroslavpejic85/mirotalksfu/blob/main/SECURITY.md
CVE ID: CVE-2024-44739 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-06T14:37:41.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manage_user&id=. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zach341/Cve_report/blob/main/simple-forum-website/SQLi-1.md
CVE ID: CVE-2024-44744 State: PUBLISHED Published: 2024-10-01T00:00:00 Last Updated: 2024-10-04T19:10:17.947180 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Malwarebytes Premium Security v5.0.0.883 allows attackers to execute arbitrary code via placing crafted binaries into unspecified directories. NOTE: Malwarebytes argues that this issue requires admin privileges and that the contents cannot be altered by non-admin users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://googleprojectzero.blogspot.com/2016/02/the-definitive-guide-on-win32-to-nt.html - https://medium.com/%40danielshaulov01/malwarebytes-premium-security-av-bypass-cve-2024-4474
-guide-on-win32-to-nt.html - https://medium.com/%40danielshaulov01/malwarebytes-premium-security-av-bypass-cve-2024-44744-97bb6192ed4a
CVE ID: CVE-2024-44754 State: PUBLISHED Published: 2025-02-28T00:00:00.000Z Last Updated: 2025-03-06T20:42:13.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cryptographic key extraction from internal flash in Minut M2 with firmware version #15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://minut.com - https://www.amlisoft.se/sec_20241114.html
CVE ID: CVE-2024-44756 State: PUBLISHED Published: 2024-11-18T00:00:00.000Z Last Updated: 2025-03-20T14:16:34.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/M9ERP/M9ERP-sqli.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44756.md
CVE ID: CVE-2024-44757 State: PUBLISHED Published: 2024-11-18T00:00:00 Last Updated: 2024-11-21T16:51:49.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/M9ERP/M9ERP-filedown-Basics.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44757.md
CVE ID: CVE-2024-44758 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-27T17:16:05.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/M9ERP/M9ERP-upload.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44758.md
CVE ID: CVE-2024-44759 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T15:59:25.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/M9ERP/M9ERP-filedown-Doc.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44759.md
CVE ID: CVE-2024-44760 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-11-15T19:14:36.503112 Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allows attackers to access sensitive information regarding the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/SunmoEMS/SunmoEMS-info.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44760.md
CVE ID: CVE-2024-44761 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-11-18T17:50:48.803810 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/EQ/EQEMS.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44761.md
CVE ID: CVE-2024-44762 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-17T16:39:31.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://senscybersecurity.nl/cve-2024-44762-explained/
CVE ID: CVE-2024-44765 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-18T14:03:37.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://mgt-commerce.com - https://github.com/EagleTube/CloudPanel/tree/main/CVE-2024-44765
CVE ID: CVE-2024-44771 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:37:25.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigId PrivacyPortal v179 is vulnerable to Cross Site Scripting (XSS) via the "Label" field in the Report template function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bigid.com/privacy/privacy-portal-app/ - https://www.appgate.com/blog/cross-site-scripting-xss-in-bigid-privacy-portal
CVE ID: CVE-2024-44775 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T18:23:11.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service(DoS) via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/pengwGit/26fd8630392af5d8829c2e220091ac4f
CVE ID: CVE-2024-44776 State: PUBLISHED Published: 2024-08-29T00:00:00.000Z Last Updated: 2025-03-25T16:10:43.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://vtiger.com - https://packetstormsecurity.com/files/180461/vTiger-CRM-7.4.0-Open-Redirection.html
CVE ID: CVE-2024-44777 State: PUBLISHED Published: 2024-08-29T00:00:00 Last Updated: 2024-08-29T19:07:31.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://vtiger.com - https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html
CVE ID: CVE-2024-44778 State: PUBLISHED Published: 2024-08-29T00:00:00 Last Updated: 2024-08-29T19:05:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://vtiger.com - https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html
CVE ID: CVE-2024-44779 State: PUBLISHED Published: 2024-08-29T00:00:00 Last Updated: 2024-08-29T19:03:08.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://vtiger.com - https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html
CVE ID: CVE-2024-44786 State: PUBLISHED Published: 2024-11-22T00:00:00.000Z Last Updated: 2025-03-13T14:24:47.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/luluhackme/8356703c7295d03d6e68a1ca652441b9
CVE ID: CVE-2024-44793 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T20:18:53.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the torrents parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://gazelle.com - https://github.com/WhatCD/Gazelle - https://github.com/WhatCD/Gazelle/issues/131
CVE ID: CVE-2024-44794 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-27T13:40:24.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://picuploader.com - https://github.com/xiebruce/PicUploader - https://github.com/xiebruce/PicUploader/issues/91
CVE ID: CVE-2024-44795 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T20:34:33.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://gazelle.com - https://github.com/WhatCD/Gazelle - https://github.com/WhatCD/Gazelle/issues/129
CVE ID: CVE-2024-44796 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-09-06T23:04:32.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://picuploader.com - https://github.com/xiebruce/PicUploader - https://github.com/xiebruce/PicUploader/issues/90
CVE ID: CVE-2024-44797 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-27T14:12:10.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the view parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://gazelle.com - https://github.com/WhatCD/Gazelle - https://github.com/WhatCD/Gazelle/issues/130
CVE ID: CVE-2024-44798 State: PUBLISHED Published: 2024-09-13T00:00:00 Last Updated: 2024-09-13T18:01:01.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting (XSS) in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shouvikdutta1998/Bus_management