Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22345 State: PUBLISHED Published: 2024-05-10T17:51:20.705Z Last Updated: 2024-08-01T22:43:34.611Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: CWE-522 Description: IBM TXSeries for Multiplatforms 8.2 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. IBM X-Force ID: 280192. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280192
CVE ID: CVE-2024-22346 State: PUBLISHED Published: 2024-03-14T18:40:54.309Z Last Updated: 2024-09-20T19:12:28.106Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-427 Description: Db2 for IBM i 7.2, 7.3, 7.4, and 7.5 infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 280203. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7140499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280203
CVE ID: CVE-2024-22347 State: PUBLISHED Published: 2025-01-20T17:41:43.506Z Last Updated: 2025-01-21T14:46:25.668Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: UrbanCode Velocity, DevOps Velocity Problem Types: CWE-327 Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7172750
CVE ID: CVE-2024-22348 State: PUBLISHED Published: 2025-01-20T17:40:31.965Z Last Updated: 2025-01-21T14:47:02.451Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: UrbanCode Velocity, DevOps Velocity Problem Types: CWE-942 Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7172750
CVE ID: CVE-2024-22349 State: PUBLISHED Published: 2025-01-20T17:42:37.885Z Last Updated: 2025-01-21T14:45:14.925Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: UrbanCode Velocity, DevOps Velocity Problem Types: CWE-525 Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7172750
CVE ID: CVE-2024-22351 State: PUBLISHED Published: 2025-04-23T22:15:49.142Z Last Updated: 2025-09-01T00:37:57.724Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-613 Description: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229921
CVE ID: CVE-2024-22352 State: PUBLISHED Published: 2024-03-05T18:51:20.251Z Last Updated: 2024-08-01T22:43:34.521Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-532 Description: IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 280361. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7117184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280361
CVE ID: CVE-2024-22353 State: PUBLISHED Published: 2024-03-31T11:43:14.045Z Last Updated: 2024-08-01T22:43:34.658Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: CWE-770 Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145365 - h
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280400
CVE ID: CVE-2024-22354 State: PUBLISHED Published: 2024-04-17T01:07:58.187Z Last Updated: 2024-08-01T22:43:34.570Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: IBM Products: WebSphere Application Server, WebSphere Application Server Liberty Problem Types: CWE-611 Description: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401. A
ive information, consume memory resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280401
CVE ID: CVE-2024-22355 State: PUBLISHED Published: 2024-03-03T12:20:59.026Z Last Updated: 2024-08-01T22:43:34.621Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Products, Cloud Pak for Security Problem Types: CWE-521 Description: IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 280781. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7129328
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7129328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280781
CVE ID: CVE-2024-22356 State: PUBLISHED Published: 2024-03-26T14:12:18.122Z Last Updated: 2024-08-05T16:34:40.409Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: App Connect Enterprise, Integration Bus Problem Types: CWE-117 Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user. IBM X-Force ID: 280893. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7145144 - https://exch
Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7145144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280893
CVE ID: CVE-2024-22357 State: PUBLISHED Published: 2024-04-12T02:28:22.476Z Last Updated: 2024-08-09T15:18:06.282Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-79 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 280894. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
ted session. IBM X-Force ID: 280894. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7148010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280894
CVE ID: CVE-2024-22358 State: PUBLISHED Published: 2024-04-12T16:53:43.381Z Last Updated: 2024-08-01T22:43:34.839Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-613 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/p
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280896
CVE ID: CVE-2024-22359 State: PUBLISHED Published: 2024-04-12T16:20:38.337Z Last Updated: 2024-08-01T22:43:34.490Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-79 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 280897. Additional
functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 280897. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280897
CVE ID: CVE-2024-22360 State: PUBLISHED Published: 2024-04-03T12:32:21.341Z Last Updated: 2025-02-27T20:10:04.609Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted query on certain columnar tables. IBM X-Force ID: 280905. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145730 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/280905 - https://security.netap
upport/pages/node/7145730 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/280905 - https://security.netapp.com/advisory/ntap-20240517-0003/
CVE ID: CVE-2024-22361 State: PUBLISHED Published: 2024-02-10T15:13:01.991Z Last Updated: 2024-08-19T16:09:36.910Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Semeru Runtime Problem Types: CWE-327 Description: IBM Semeru Runtime 8.0.302.0 through 8.0.392.0, 11.0.12.0 through 11.0.21.0, 17.0.1.0 - 17.0.9.0, and 21.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 281222. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7116431 - https://exchange.xforce.ibmcloud.com/vulner
Vulnrichment: References: - https://www.ibm.com/support/pages/node/7116431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/281222
CVE ID: CVE-2024-22362 State: PUBLISHED Published: 2024-01-16T03:39:51.445Z Last Updated: 2025-06-20T17:53:18.973Z Vendors: Drupal.org Products: Drupal Problem Types: Improper handling of structural elements Description: Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/drupal/drupal - https://www.drupal.org/ - https://www.drupal.org/about/core/policies/core-release-cycles/schedule - https://jvn.jp/en/jp/JVN63383723/
CVE ID: CVE-2024-22363 State: PUBLISHED Published: 2024-04-05T00:00:00 Last Updated: 2024-08-26T20:17:06.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/1333.html - https://git.sheetjs.com/sheetjs/sheetjs/src/tag/v0.20.2 - https://cdn.sheetjs.com/advisories/CVE-2024-22363
CVE ID: CVE-2024-22365 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-11-03T18:08:12.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/linux-pam/linux-pam - http://www.openwall.com/lists/oss-security/2024/01/18/3 - https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0 - https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb
CVE ID: CVE-2024-22366 State: PUBLISHED Published: 2024-01-24T04:35:55.337Z Last Updated: 2025-06-20T19:27:11.652Z Vendors: Yamaha Corporation Products: WLX222, WLX413, WLX212, WLX313, WLX202 Problem Types: Active debug code Description: Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered. Affected products and versions are as follows: WLX222 firmware Rev.24.00.03 and earlier, WLX413 firmware Rev.22.00.0
ed. Affected products and versions are as follows: WLX222 firmware Rev.24.00.03 and earlier, WLX413 firmware Rev.22.00.05 and earlier, WLX212 firmware Rev.21.00.12 and earlier, WLX313 firmware Rev.18.00.12 and earlier, and WLX202 firmware Rev.16.00.18 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU99896362.html - https://jvn.jp/en/vu/JVNVU99896362/
CVE ID: CVE-2024-22368 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-11-04T22:05:37.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/haile01/perl_spreadsheet_excel_rce_poc/blob/main/parse_xlsx_bomb.md - https://metacpan.org/dist/Spreadsheet-ParseXLSX/changes - http://www.openwall.com/lists/oss-security/2024
xlsx_bomb.md - https://metacpan.org/dist/Spreadsheet-ParseXLSX/changes - http://www.openwall.com/lists/oss-security/2024/01/10/2 - https://lists.debian.org/debian-lts-announce/2024/01/msg00018.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNJVC4C5C5V44DNOZ5BHVU53CDXPB2OJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6R7NYWVVZYDZIQC5YEXNHZM6VEE26SJV/ - https://security.metacpan.org/2024/02/10/vulnerable-spreadsheet-parsing-modules.html
CVE ID: CVE-2024-22369 State: PUBLISHED Published: 2024-02-20T14:58:36.291Z Last Updated: 2024-11-05T19:47:09.797Z Vendors: Apache Software Foundation Products: Apache Camel Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1 Additional Analyst Notes: - CISA ADP Vulnri
o 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/3dko781dy2gy5l3fs48p56fgp429yb0f
CVE ID: CVE-2024-22370 State: PUBLISHED Published: 2024-01-09T09:48:57.964Z Last Updated: 2025-06-17T20:59:11.270Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-79 Description: In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-22371 State: PUBLISHED Published: 2024-02-26T09:22:38.384Z Last Updated: 2024-10-31T13:03:53.000Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Camel Problem Types: Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Description: Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, fro
l.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, from 4.X through 4.3.0. Users are recommended to upgrade to version 3.21.4, 3.22.1, 4.0.4 or 4.4.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://camel.apache.org/security/CVE-2024-22371.html
CVE ID: CVE-2024-22372 State: PUBLISHED Published: 2024-01-24T04:38:20.199Z Last Updated: 2025-06-17T21:19:28.869Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ELECOM CO.,LTD. Products: WRC-X1500GS-B, WRC-X1500GSA-B, WRC-X1800GS-B, WRC-X1800GSA-B, WRC-X1800GSH-B, WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B, WRC-XE5400GS-G, WRC-XE5400GSA-G, WRC-X6000QS-G, WRC-X6000QSA-G, WRC-X6000XS-G, WRC-X6000XST-G Problem Types: CWE-78 Description: OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.
with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20240123-01/ - https://jvn.jp/en/vu/JVNVU90908488/
CVE ID: CVE-2024-22373 State: PUBLISHED Published: 2024-04-25T14:33:07.092Z Last Updated: 2025-11-04T17:14:17.202Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Grassroot DICOM Products: Grassroot DICOM Problem Types: CWE-119 Description: An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1935 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5HXUKUJ7SG3TK456SGUWVZ4Z5D7JKOL/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJA7QWWZWMY4AQFR35EA7S3CFVUTOQYG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZJ4IG7EXMSMPHTK5ZFASCW6MHSOVZOE/
CVE ID: CVE-2024-22374 State: PUBLISHED Published: 2024-08-14T13:45:35.501Z Last Updated: 2024-08-14T16:03:54.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Xeon Processors Problem Types: denial of service, CWE-691 Description: Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01073.html
CVE ID: CVE-2024-22376 State: PUBLISHED Published: 2024-08-14T13:45:25.960Z Last Updated: 2024-08-14T14:05:24.643Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: installation software for Intel(R) Ethernet Adapter Driver Pack Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0110
s: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html
CVE ID: CVE-2024-22377 State: PUBLISHED Published: 2024-07-09T23:03:27.722Z Last Updated: 2024-08-01T22:43:34.512Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-22 Description: The deploy directory in PingFederate runtime nodes is reachable to unauthorized users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083
CVE ID: CVE-2024-22378 State: PUBLISHED Published: 2024-08-14T13:45:28.772Z Last Updated: 2024-08-14T15:35:27.178Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel Unite(R) Client Extended Display Plugin software installers Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version 1.1.352.157 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel
yst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01095.html