Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23897 State: PUBLISHED Published: 2024-01-24T17:52:22.842Z Last Updated: 2025-10-21T23:05:25.971Z Vendors: Jenkins Project Products: Jenkins Description: Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314 - https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical
o/security/advisory/2024-01-24/#SECURITY-3314 - https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins/ - http://www.openwall.com/lists/oss-security/2024/01/24/6 - http://packetstormsecurity.com/files/176839/Jenkins-2.441-LTS-2.426.3-CVE-2024-23897-Scanner.html - http://packetstormsecurity.com/files/176840/Jenkins-2.441-LTS-2.426.3-Arbitrary-File-Read.html
CVE ID: CVE-2024-23898 State: PUBLISHED Published: 2024-01-24T17:52:23.492Z Last Updated: 2025-06-20T19:28:50.201Z Vendors: Jenkins Project Products: Jenkins Description: Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315 - https://www.sonarsource.com/blog/excessive-expansion
ttps://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315 - https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins/ - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23899 State: PUBLISHED Published: 2024-01-24T17:52:24.131Z Last Updated: 2025-06-04T14:34:33.599Z Vendors: Jenkins Project Products: Jenkins Git server Plugin Description: Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read content from arbitrary files on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3319 - http://www.openwall.com/
ulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3319 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23900 State: PUBLISHED Published: 2024-01-24T17:52:24.770Z Last Updated: 2025-06-16T19:32:35.214Z Vendors: Jenkins Project Products: Jenkins Matrix Project Plugin Description: Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file system with content not controllable by the attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3289 - http://www.openwall.com/lists/oss-
t: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3289 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23901 State: PUBLISHED Published: 2024-01-24T17:52:25.415Z Last Updated: 2025-05-30T14:16:37.683Z Vendors: Jenkins Project Products: Jenkins GitLab Branch Source Plugin Description: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3040 - http://www.openwall.com/lists/oss-security/2024
: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3040 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23902 State: PUBLISHED Published: 2024-01-24T17:52:26.044Z Last Updated: 2025-05-30T14:16:31.521Z Vendors: Jenkins Project Products: Jenkins GitLab Branch Source Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3251 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23903 State: PUBLISHED Published: 2024-01-24T17:52:26.696Z Last Updated: 2025-02-13T17:39:59.383Z Vendors: Jenkins Project Products: Jenkins GitLab Branch Source Plugin Description: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-2871 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23904 State: PUBLISHED Published: 2024-01-24T17:52:27.324Z Last Updated: 2025-06-20T19:30:22.525Z Vendors: Jenkins Project Products: Jenkins Log Command Plugin Description: Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary files on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3334 - http://www.openwall.com/lists/oss-security/2024/01
https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3334 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23905 State: PUBLISHED Published: 2024-01-24T17:52:27.960Z Last Updated: 2025-06-20T19:33:21.796Z Vendors: Jenkins Project Products: Jenkins Red Hat Dependency Analytics Plugin Description: Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3322 - http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE ID: CVE-2024-23906 State: PUBLISHED Published: 2024-09-11T04:02:29.333Z Last Updated: 2024-09-11T13:38:21.448Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L) Vendors: Gallagher Products: Controller 6000 and Controller 7000 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller configuration during an authenticated Operator's session. This issue affects: Controller 6000 and Controller 7000 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)),
ior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-23906
CVE ID: CVE-2024-23907 State: PUBLISHED Published: 2024-08-14T13:45:23.799Z Last Updated: 2024-08-14T16:08:18.947Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) High Level Synthesis Compiler software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01113.html
CVE ID: CVE-2024-23908 State: PUBLISHED Published: 2024-08-14T13:45:25.425Z Last Updated: 2024-08-16T13:59:02.864Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Flexlm License Daemons for Intel(R) FPGA software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01107.html
CVE ID: CVE-2024-23909 State: PUBLISHED Published: 2024-08-14T13:45:27.023Z Last Updated: 2024-08-14T14:03:27.123Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) FPGA SDK for OpenCL(TM) software technology Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html
CVE ID: CVE-2024-23910 State: PUBLISHED Published: 2024-02-28T23:07:02.324Z Last Updated: 2025-04-22T15:54:59.591Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ELECOM CO.,LTD. Products: WRC-1167GS2-B, WRC-1167GS2H-B, WRC-1167GST2, WRC-2533GS2-B, WRC-2533GS2-W, WRC-2533GS2V-B, WRC-2533GST2, WRC-X3200GST3-B, WRC-G01-W, WMC-X1800GST-B, WSC-X1800GS-B Problem Types: CWE-352 Description: Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-
e authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit "WMC-2LX-B". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20240220-01/ - https://jvn.jp/en/jp/JVN44166658/
CVE ID: CVE-2024-23911 State: PUBLISHED Published: 2024-04-15T10:46:29.583Z Last Updated: 2024-08-01T23:13:08.598Z Vendors: DMG MORI Digital Co., LTD. and NEXT Co., Ltd. Products: Cente IPv6, Cente IPv6 SNMPv2, Cente IPv6 SNMPv3 Problem Types: Out-of-bounds read Description: Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cente.jp/obstacle/4960/ - https://jvn.jp/en/vu/JVN
ADP Vulnrichment: - CVE Program Container: References: - https://www.cente.jp/obstacle/4960/ - https://jvn.jp/en/vu/JVNVU94016877/
CVE ID: CVE-2024-23912 State: PUBLISHED Published: 2024-05-03T08:14:47.798Z Last Updated: 2024-08-01T23:13:08.328Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Merative Products: Merge DICOM Toolkit C/C++ Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_File() function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23912
CVE ID: CVE-2024-23913 State: PUBLISHED Published: 2024-05-03T08:15:19.724Z Last Updated: 2024-12-06T18:07:33.702Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Merative Products: Merge DICOM Toolkit C/C++ Problem Types: Use of Out-of-range Pointer Offset Description: Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows. When deprecated MC_XML_To_Message() function is used to read a malformed DICOM XML file, it might result in memory access violation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23913
CVE ID: CVE-2024-23914 State: PUBLISHED Published: 2024-05-03T08:15:32.389Z Last Updated: 2024-08-01T23:13:08.679Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Merative Products: Merge DICOM Toolkit C/C++ Problem Types: CWE-134 Description: Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nozominetworks.com/labs/vulnerability-adviso
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914
CVE ID: CVE-2024-23915 State: PUBLISHED Published: 2024-09-18T13:53:04.303Z Last Updated: 2024-09-18T15:27:12.117Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::of13::InstructionSet::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23915
CVE ID: CVE-2024-23916 State: PUBLISHED Published: 2024-09-18T13:53:35.102Z Last Updated: 2024-09-18T15:26:29.449Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Networking Foundation (ONF) Products: libfluid Problem Types: CWE-690 Description: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionSet::unpack. This issue affects libfluid: 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23916
CVE ID: CVE-2024-23917 State: PUBLISHED Published: 2024-02-06T09:21:31.957Z Last Updated: 2024-08-01T23:13:08.604Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: JetBrains Products: TeamCity Problem Types: CWE-288 Description: In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-23918 State: PUBLISHED Published: 2024-11-13T20:34:16.216Z Last Updated: 2025-11-03T21:53:48.443Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX Problem Types: escalation of privilege, CWE-92 Description: Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/securit
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html
CVE ID: CVE-2024-23919 State: PUBLISHED Published: 2024-11-13T21:06:00.324Z Last Updated: 2024-11-14T19:46:26.388Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Graphics software Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01132.html
CVE ID: CVE-2024-23920 State: PUBLISHED Published: 2025-01-31T00:15:11.427Z Last Updated: 2025-07-01T13:35:46.718Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ChargePoint Products: Home Flex Problem Types: CWE-284 Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee module. The issue results from improper access control. An attacker can leverage this vulnerability to execute code in the context of root. Additional Analyst Notes: - CISA ADP Vul
ttacker can leverage this vulnerability to execute code in the context of root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1048/
CVE ID: CVE-2024-23921 State: PUBLISHED Published: 2025-01-31T00:17:52.652Z Last Updated: 2025-07-01T13:34:34.362Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ChargePoint Products: Home Flex Problem Types: CWE-94 Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wlanapp module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute
a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1049/
CVE ID: CVE-2024-23922 State: PUBLISHED Published: 2024-09-23T14:23:00.351Z Last Updated: 2024-09-23T16:40:14.490Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sony Products: XAV-AX5500 Problem Types: CWE-345 Description: Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue results from the lack of proper validation of software update packages. An
the handling of software updates. The issue results from the lack of proper validation of software update packages. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-22939 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-874/ - https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax5500/software/00274156
CVE ID: CVE-2024-23923 State: PUBLISHED Published: 2024-09-28T06:22:22.014Z Last Updated: 2024-10-03T14:18:13.418Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Alpine Products: Halo9 Problem Types: CWE-416 Description: Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prh_l2_sar_data_ind function. The issue results from the lack of validating the existence of an object prior to performing operations
ta_ind function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22945 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-844/
CVE ID: CVE-2024-23924 State: PUBLISHED Published: 2024-09-28T06:18:57.554Z Last Updated: 2024-10-03T14:18:02.755Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Alpine Products: Halo9 Problem Types: CWE-78 Description: Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPDM_wemCmdCreatSHA256Hash function. The issue results from the lack of proper validation of a user-supplied string befo
UPDM_wemCmdCreatSHA256Hash function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23105 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-846/
CVE ID: CVE-2024-23928 State: PUBLISHED Published: 2025-01-31T00:09:46.661Z Last Updated: 2025-07-01T13:38:31.405Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Pioneer Products: DMH-WT7600NEX Problem Types: CWE-295 Description: This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telematics functionality, which operates over HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leve
S. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1045/ - https://jpn.pioneer/ja/car/dl/dmh-sz700_sf700/