Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33054 State: PUBLISHED Published: 2024-09-02T10:22:44.006Z Last Updated: 2024-09-05T03:56:10.793Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33055 State: PUBLISHED Published: 2025-01-06T10:33:16.059Z Last Updated: 2025-01-06T14:18:36.155Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while invoking IOCTL calls to unmap the DMA buffers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
CVE ID: CVE-2024-33056 State: PUBLISHED Published: 2024-12-02T10:18:46.431Z Last Updated: 2024-12-03T04:55:35.719Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33057 State: PUBLISHED Published: 2024-09-02T10:22:44.952Z Last Updated: 2024-09-03T13:23:06.795Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33058 State: PUBLISHED Published: 2025-04-07T10:15:30.276Z Last Updated: 2025-04-07T16:06:36.533Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-1220 Description: Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE ID: CVE-2024-33059 State: PUBLISHED Published: 2025-01-06T10:33:17.264Z Last Updated: 2025-01-06T14:18:36.032Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing frame command IOCTL calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
CVE ID: CVE-2024-33060 State: PUBLISHED Published: 2024-09-02T10:22:46.127Z Last Updated: 2024-09-05T03:56:12.175Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption when two threads try to map and unmap a single node simultaneously. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33061 State: PUBLISHED Published: 2025-01-06T10:33:18.402Z Last Updated: 2025-01-06T14:18:35.884Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
CVE ID: CVE-2024-33063 State: PUBLISHED Published: 2024-12-02T10:18:47.904Z Last Updated: 2024-12-02T15:40:27.584Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33064 State: PUBLISHED Published: 2024-10-07T12:58:51.325Z Last Updated: 2024-10-07T13:21:49.956Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while parsing the multiple MBSSID IEs from the beacon. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33065 State: PUBLISHED Published: 2024-10-07T12:58:52.280Z Last Updated: 2024-10-07T13:15:33.662Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while taking snapshot when an offset variable is set by camera driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33066 State: PUBLISHED Published: 2024-10-07T12:58:53.271Z Last Updated: 2024-10-07T13:14:18.810Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while redirecting log file to any file location with any file name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33067 State: PUBLISHED Published: 2025-01-06T10:33:19.592Z Last Updated: 2025-01-06T14:18:35.773Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
CVE ID: CVE-2024-33068 State: PUBLISHED Published: 2024-11-04T10:04:43.380Z Last Updated: 2024-11-04T14:38:48.207Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Transient DOS while parsing fragments of MBSSID IE from beacon frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-33069 State: PUBLISHED Published: 2024-10-07T12:58:54.222Z Last Updated: 2024-10-07T13:13:26.116Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33070 State: PUBLISHED Published: 2024-10-07T12:58:55.201Z Last Updated: 2024-10-07T13:12:48.723Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing ESP IE from beacon/probe response frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33071 State: PUBLISHED Published: 2024-10-07T12:58:56.179Z Last Updated: 2024-10-07T13:12:02.457Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33073 State: PUBLISHED Published: 2024-10-07T12:58:57.145Z Last Updated: 2024-10-07T13:11:28.250Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33078 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/HBLocker/CVE-2024-33078/
CVE ID: CVE-2024-33101 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the word parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thinksaas/ThinkSAAS/issues/34
CVE ID: CVE-2024-33102 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the code parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thinksaas/ThinkSAAS/issues/35
CVE ID: CVE-2024-33103 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-22T18:40:06.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dokuwiki/dokuwiki/issues/4267
CVE ID: CVE-2024-33109 State: PUBLISHED Published: 2024-09-19T00:00:00 Last Updated: 2024-09-20T13:10:16.586Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://tiptel.com - https://www.bdosecurity.de/en-gb/advisories/cve-2024-33109
CVE ID: CVE-2024-33110 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md
CVE ID: CVE-2024-33111 State: PUBLISHED Published: 2024-05-06T00:00:00.000Z Last Updated: 2025-03-13T18:04:24.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md
CVE ID: CVE-2024-33112 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2025-01-07T04:56:28.910Z Vendors: n/a Products: n/a Problem Types: CWE-78 Description: D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md - https://github.com/yj94/Yj_learning/blob/b597925953d8bbb286a63f0019bb547c1617cb61/Week16/D-LINK-POC.md
CVE ID: CVE-2024-33113 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md
CVE ID: CVE-2024-33117 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-12-06T21:05:53.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33117.txt
CVE ID: CVE-2024-33118 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33118.txt
CVE ID: CVE-2024-33120 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://roothub.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33120.txt
CVE ID: CVE-2024-33121 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-11-21T15:10:54.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33121.txt
CVE ID: CVE-2024-33122 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-12-09T15:18:10.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33122.txt
CVE ID: CVE-2024-33124 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function.. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33124.txt
CVE ID: CVE-2024-33139 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33139.txt
CVE ID: CVE-2024-33144 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33144.txt
CVE ID: CVE-2024-33146 State: PUBLISHED Published: 2024-05-07T00:00:00.000Z Last Updated: 2025-03-13T21:11:34.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33146.txt
CVE ID: CVE-2024-33147 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-11-04T21:31:35.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33147.txt
CVE ID: CVE-2024-33148 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-11-13T18:04:46.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33148.txt
CVE ID: CVE-2024-33149 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33149.txt
CVE ID: CVE-2024-33153 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33153.txt
CVE ID: CVE-2024-33155 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33155.txt
CVE ID: CVE-2024-33161 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33161.txt
CVE ID: CVE-2024-33164 State: PUBLISHED Published: 2024-05-07T00:00:00.000Z Last Updated: 2025-03-26T20:51:19.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33164.txt
CVE ID: CVE-2024-33180 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-02T02:27:53.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/saveParentControlInfo_1-7c9695d0251945ae8006db705b9b80ac
CVE ID: CVE-2024-33181 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-02T02:27:53.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/addWifiMacFilter_2-0f7fab42d4254867b46fe92b25dc7c40
CVE ID: CVE-2024-33182 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-02T02:27:53.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/addWifiMacFilter_1-067fa6984f0d4933b88c63efd7486479
CVE ID: CVE-2024-33209 State: PUBLISHED Published: 2024-10-02T00:00:00.000Z Last Updated: 2025-03-14T15:50:11.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/paragbagul111/CVE-2024-33209
CVE ID: CVE-2024-33210 State: PUBLISHED Published: 2024-10-02T00:00:00 Last Updated: 2024-10-02T16:09:23.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/paragbagul111/CVE-2024-33210