Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r of this vulnerability is VDB-267895. NOTE: The code maintainer explains, that "rich text is no longer maintained". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.267895 - https://vuldb.com/?ctiid.267895 - https://gitee.com/smallweigit/avue/issues/I9UQ4Q
CVE ID: CVE-2024-5830 State: PUBLISHED Published: 2024-06-11T20:58:08.980Z Last Updated: 2025-02-13T17:54:26.656Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/342456991 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VX
rg/issues/342456991 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5831 State: PUBLISHED Published: 2024-06-11T20:58:09.216Z Last Updated: 2025-02-13T17:54:27.224Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/339171223 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VX
rg/issues/339171223 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5832 State: PUBLISHED Published: 2024-06-11T20:58:09.492Z Last Updated: 2025-02-13T17:54:27.868Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/340196361 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VX
rg/issues/340196361 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5833 State: PUBLISHED Published: 2024-06-11T20:58:09.750Z Last Updated: 2025-02-13T17:54:28.764Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/342602616 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/m
chromium.org/issues/342602616 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5834 State: PUBLISHED Published: 2024-06-11T20:58:09.978Z Last Updated: 2025-02-13T17:54:29.506Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/342840932 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.
sues.chromium.org/issues/342840932 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5835 State: PUBLISHED Published: 2024-06-11T20:58:10.195Z Last Updated: 2025-02-13T17:54:30.214Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341991535 - https://lists.fedoraproje
024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341991535 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5836 State: PUBLISHED Published: 2024-06-11T20:58:10.427Z Last Updated: 2025-03-14T18:59:21.278Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341875171 - https://lists.fedoraproj
2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341875171 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5837 State: PUBLISHED Published: 2024-06-11T20:58:10.645Z Last Updated: 2025-02-13T17:54:31.625Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/342415789 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/m
chromium.org/issues/342415789 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5838 State: PUBLISHED Published: 2024-06-11T20:58:10.872Z Last Updated: 2025-02-13T17:54:32.177Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/342522151 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA3
/issues/342522151 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5839 State: PUBLISHED Published: 2024-06-11T20:58:11.106Z Last Updated: 2025-02-13T17:54:32.743Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/340122160 - https://lists.fedoraproject.org/archives/list/package-an
r-desktop.html - https://issues.chromium.org/issues/340122160 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5840 State: PUBLISHED Published: 2024-06-11T20:58:11.312Z Last Updated: 2025-03-13T17:07:25.956Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/41492103 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA
rg/issues/41492103 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5841 State: PUBLISHED Published: 2024-06-11T20:58:11.509Z Last Updated: 2025-02-13T17:54:34.026Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/326765855 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VX
rg/issues/326765855 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5842 State: PUBLISHED Published: 2024-06-11T20:58:11.715Z Last Updated: 2025-02-13T17:54:34.641Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/40062622 - https://lists.fedoraproject.org/arc
able-channel-update-for-desktop.html - https://issues.chromium.org/issues/40062622 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5843 State: PUBLISHED Published: 2024-06-11T20:58:11.921Z Last Updated: 2025-02-13T17:54:35.188Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/333940412 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje
/issues.chromium.org/issues/333940412 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5844 State: PUBLISHED Published: 2024-06-11T20:58:12.131Z Last Updated: 2025-03-13T19:36:55.516Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/331960660 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapro
://issues.chromium.org/issues/331960660 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5845 State: PUBLISHED Published: 2024-06-11T20:58:12.348Z Last Updated: 2025-02-13T17:54:36.391Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/340178596 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7
.org/issues/340178596 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5846 State: PUBLISHED Published: 2024-06-11T20:58:12.592Z Last Updated: 2025-02-13T17:54:37.049Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341095523 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
m.org/issues/341095523 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5847 State: PUBLISHED Published: 2024-06-11T20:58:12.807Z Last Updated: 2025-02-13T17:54:37.720Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341313077 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
m.org/issues/341313077 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/
CVE ID: CVE-2024-5848 State: PUBLISHED Published: 2025-02-27T07:08:07.346Z Last Updated: 2025-02-27T14:40:20.053Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 API Manager, WSO2 Open Banking AM Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable service endpoints without proper sanitization or encoding, allowing an attacker to inject malicious JavaScript. Successful exploitation could lead to UI manipulation, redirection to malicious websites, or data exfiltrat
JavaScript. Successful exploitation could lead to UI manipulation, redirection to malicious websites, or data exfiltration from the browser. While session-related sensitive cookies are protected with the httpOnly flag, mitigating session hijacking risks, the impact may vary depending on gateway-level service restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3450/
CVE ID: CVE-2024-5849 State: PUBLISHED Published: 2024-08-13T12:32:37.130Z Last Updated: 2024-08-15T14:14:42.465Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pepperl+Fuchs Products: ICDM-RX/TCP-DB9/RJ45-DIN, ICDM-RX/TCP-ST/RJ45-DIN, ICDM-RX/TCP-4DB9/2RJ45-DIN, ICDM-RX/TCP-DB9/RJ45-PM, ICDM-RX/TCP-2DB9/RJ45-DIN, ICDM-RX/TCP-2ST/RJ45-DIN, ICDM-RX/TCP-4DB9/2RJ45-PM, ICDM-RX/TCP-8DB9/2RJ45-PM, ICDM-RX/TCP-16RJ45/RJ45-RM, ICDM-RX/TCP-16DB9/RJ45-RM, ICDM-RX/TCP-32RJ45/RJ45-RM, ICDM-RX/TCP-DB9/RJ45-PM2, ICDM-RX/TCP-16RJ45/2RJ45-PM, ICDM-RX/PN-DB9/RJ45-DIN, ICDM-RX/PN-ST/RJ45-DIN, ICDM-RX/PN-4DB9/2RJ45-DIN, ICDM-RX/PN-DB9/RJ45-PM, ICDM-RX/PN-2DB9/RJ45-DIN, ICDM-RX
9/RJ45-DIN, ICDM-RX/PN-ST/RJ45-DIN, ICDM-RX/PN-4DB9/2RJ45-DIN, ICDM-RX/PN-DB9/RJ45-PM, ICDM-RX/PN-2DB9/RJ45-DIN, ICDM-RX/PN-2ST/RJ45-DIN, ICDM-RX/PN1-DB9/RJ45-PM, ICDM-RX/PN1-DB9/RJ45-DIN, ICDM-RX/PN1-ST/RJ45-DIN, ICDM-RX/PN1-2DB9/RJ45-DIN, ICDM-RX/PN1-4DB9/2RJ45-DIN, ICDM-RX/PN1-2ST/RJ45-DIN, ICDM-RX/EN-DB9/RJ45-DIN, ICDM-RX/EN-ST/RJ45-DIN, ICDM-RX/EN-4DB9/2RJ45-DIN, ICDM-RX/EN-DB9/RJ45-PM, ICDM-RX/EN-2DB9/RJ45-DIN, ICDM-RX/EN-2ST/RJ45-DIN, ICDM-RX/EN1-DB9/RJ45-PM, ICDM-RX/EN1-DB9/RJ45-DIN, ICDM-RX/EN1-ST/RJ45-DIN, ICDM-RX/EN1-2DB9/RJ45-DIN, ICDM-RX/EN1-4DB9/2RJ45-DIN, ICDM-RX/EN1-2ST/RJ45-DIN, ICDM-RX/MOD-DB9/RJ45-DIN, ICDM-RX/MOD-ST/RJ45-DIN, ICDM-RX/MOD-4DB9/2RJ45-DIN, ICDM-RX/MOD-DB9/RJ
M-RX/EN1-2ST/RJ45-DIN, ICDM-RX/MOD-DB9/RJ45-DIN, ICDM-RX/MOD-ST/RJ45-DIN, ICDM-RX/MOD-4DB9/2RJ45-DIN, ICDM-RX/MOD-DB9/RJ45-PM, ICDM-RX/MOD-2DB9/RJ45-DIN, ICDM-RX/MOD-2ST/RJ45-DIN, ICDM-RX/MOD-16RJ45/2RJ45-PM Problem Types: CWE-79 Description: An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2024-033
CVE ID: CVE-2024-5850 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:12.921Z Description: No description available.
CVE ID: CVE-2024-5851 State: PUBLISHED Published: 2024-06-11T17:31:03.912Z Last Updated: 2024-08-01T21:25:03.023Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: playSMS Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=feature_schedule&op=list of the component SMS Schedule Handler. The manipulation of the argument name/message leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The name of the patch is 7a88920f6b536c6a91512e739bcb4e8adefeed2b. It
g to version 1.4.8 is able to address this issue. The name of the patch is 7a88920f6b536c6a91512e739bcb4e8adefeed2b. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-267912. NOTE: The code maintainer was contacted early about this disclosure and was eager to prepare a fix as quickly as possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.267912 - https://vuldb.com/?ctiid.267912 - https://vuldb.com/?submit.347385 - https://github.com/playsms/playsms/commit/7a88920f6b536c6a91512e739bcb4e8adefeed2b
CVE ID: CVE-2024-5852 State: PUBLISHED Published: 2024-07-16T08:32:30.395Z Last Updated: 2024-08-01T21:25:03.088Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: nickboss Products: WordPress File Upload Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The WordPress File Upload plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.24.7 via the 'uploadpath' parameter of the wordpress_file_upload shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload limited files to arbitrary locations on the we
thenticated attackers, with Contributor-level access and above, to upload limited files to arbitrary locations on the web server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39bb69e0-fb18-4737-9eb7-bda2b5bc16a2?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3118456%40wp-file-upload&new=3118456%40wp-file-upload&sfp_email=&sfph_mail=