Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22551 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-05-29T15:17:47.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /site/default/search. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176314/WhatACart-2.0.7-Cross-Site-Scripting.html
CVE ID: CVE-2024-22559 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-05-29T15:10:57.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eddy8/LightCMS/issues/34
CVE ID: CVE-2024-22562 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-16T18:13:31.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/210
CVE ID: CVE-2024-22563 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-02T15:02:43.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openvswitch/ovs-issues/issues/315
CVE ID: CVE-2024-22567 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-06-17T14:59:25.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h3ak/MCMS-CVE-Request/
CVE ID: CVE-2024-22568 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-20T18:14:23.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kayo-zjq/myc/blob/main/1.md
CVE ID: CVE-2024-22569 State: PUBLISHED Published: 2024-01-31T00:00:00.000Z Last Updated: 2025-05-30T18:44:31.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /index.php?c=install&m=index&step=2&is_install_db=0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/issues/12
CVE ID: CVE-2024-22570 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-06-20T19:45:36.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/issues/11
CVE ID: CVE-2024-22588 State: PUBLISHED Published: 2024-05-24T14:55:55.079Z Last Updated: 2025-02-13T15:47:02.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kwik commit 745fd4e2 does not discard unused encryption keys. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ptrd/kwik/issues/31 - https://www.rfc-editor.org/rfc/rfc9001#name-discarding-unused-keys - https://gist.github.com/QUICTester/29a1851c2b2a406411f688735526fe2e
CVE ID: CVE-2024-22590 State: PUBLISHED Published: 2024-05-28T16:07:49.749Z Last Updated: 2025-02-13T15:47:02.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/QUICTester/ea3eb2ac736bb63e47c654e14e3ec556
CVE ID: CVE-2024-22591 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-20T18:15:10.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ysuzhangbin/cms2/blob/main/1.md
CVE ID: CVE-2024-22592 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-02T15:05:01.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ysuzhangbin/cms2/blob/main/2.md
CVE ID: CVE-2024-22593 State: PUBLISHED Published: 2024-01-18T00:00:00 Last Updated: 2024-08-30T15:21:15.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ysuzhangbin/cms2/blob/main/3.md
CVE ID: CVE-2024-22601 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-20T18:15:48.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ljw11e/cms/blob/main/5.md
CVE ID: CVE-2024-22603 State: PUBLISHED Published: 2024-01-18T00:00:00 Last Updated: 2024-08-29T20:57:22.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ljw11e/cms/blob/main/4.md
CVE ID: CVE-2024-22611 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-04T15:34:59.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/baolqinfosec/CVE-Reseach/blob/main/OpenERM_CVE-2024-22611.md
CVE ID: CVE-2024-22625 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-04T21:17:08.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_category.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-1.md
CVE ID: CVE-2024-22626 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-04T21:04:08.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-2.md
CVE ID: CVE-2024-22627 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-20T17:54:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_distributor.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-3.md
CVE ID: CVE-2024-22628 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-02T15:12:41.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end= Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GaoZzr/CVE_report/blob/main/budget-and-expense-tracker-system/SQLi-1.md
CVE ID: CVE-2024-22632 State: PUBLISHED Published: 2024-04-26T00:00:00.000Z Last Updated: 2025-03-26T20:54:27.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tomiodarim.io/posts/cve-2024-22632-3/
CVE ID: CVE-2024-22633 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-08T15:38:57.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tomiodarim.io/posts/cve-2024-22632-3/
CVE ID: CVE-2024-22635 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-06-20T19:36:03.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176365/WebCalendar-1.3.0-Cross-Site-Scripting.html
CVE ID: CVE-2024-22636 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-05-30T14:15:47.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: PluXml Blog v5.8.9 was discovered to contain a remote code execution (RCE) vulnerability in the Static Pages feature. This vulnerability is exploited via injecting a crafted payload into the Content field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/capture0x/PluXml-RCE/blob/main/PluXml.txt
CVE ID: CVE-2024-22637 State: PUBLISHED Published: 2024-01-25T00:00:00 Last Updated: 2024-09-10T17:53:20.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176403/Form-Tools-3.1.1-Cross-Site-Scripting.html
CVE ID: CVE-2024-22638 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-05-30T14:15:40.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: liveSite v2019.1 was discovered to contain a remote code execution (RCE) vulenrabiity via the component /livesite/edit_designer_region.php or /livesite/add_email_campaign.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176420/liveSite-2019.1-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/51936
CVE ID: CVE-2024-22639 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-05-29T15:19:55.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Titre (Title) field in the editing interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176411/iGalerie-3.0.22-Cross-Site-Scripting.html
CVE ID: CVE-2024-22640 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:14:19.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tecnickcom/TCPDF - https://github.com/zunak/CVE-2024-22640 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LIB3R2WB7XPW2I4PGVMZ3VLFLRHOK4RB/
CVE ID: CVE-2024-22641 State: PUBLISHED Published: 2024-05-28T20:17:22.952Z Last Updated: 2025-11-03T19:29:22.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/zunak/CVE-2024-22641
CVE ID: CVE-2024-22643 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-05-30T19:28:40.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cassis-sec/CVE/tree/main/2024/CVE-2024-22643
CVE ID: CVE-2024-22646 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-06-04T21:10:47.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cassis-sec/CVE/tree/main/2024/CVE-2024-22646
CVE ID: CVE-2024-22647 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-05-29T15:06:59.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cassis-sec/CVE/tree/main/2024/CVE-2024-22647
CVE ID: CVE-2024-22648 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-06-20T19:53:14.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cassis-sec/CVE/tree/main/2024/CVE-2024-22648
CVE ID: CVE-2024-22651 State: PUBLISHED Published: 2024-01-24T00:00:00 Last Updated: 2024-09-10T20:25:11.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/goldds96/Report/blob/main/DLink/DIR-815/CI.md
CVE ID: CVE-2024-22653 State: PUBLISHED Published: 2025-05-29T00:00:00.000Z Last Updated: 2025-05-29T14:37:43.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/247 - https://gist.github.com/TimChan2001/03e5792b15d0a34bfaad970e37c17660
CVE ID: CVE-2024-22654 State: PUBLISHED Published: 2025-05-29T00:00:00.000Z Last Updated: 2025-05-30T15:00:02.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/827 - https://gist.github.com/TimChan2001/4f25915b9952e8e3453db5cf72185b88
CVE ID: CVE-2024-22660 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-20T19:09:32.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Covteam/iot_vuln/tree/main/setLanguageCfg
CVE ID: CVE-2024-22662 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-20T19:10:12.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Covteam/iot_vuln/tree/main/setParentalRules
CVE ID: CVE-2024-22663 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-05-30T14:21:18.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Covteam/iot_vuln/tree/main/setOpModeCfg2
CVE ID: CVE-2024-22667 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-11-04T22:05:40.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47 - https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt - https://lists.fedoraproject.org/archiv
2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/ - https://security.netapp.com/advisory/ntap-20240223-0008/
CVE ID: CVE-2024-22682 State: REJECTED Published: 2024-01-30T00:00:00 Last Updated: 2024-07-19T18:17:04.066304 Description: No description available.
CVE ID: CVE-2024-22699 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-05T16:08:40.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/biantaibao/cms/blob/main/1.md
CVE ID: CVE-2024-22705 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-05T19:45:17.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.10 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d10c77873ba1e9e6b91905018e29e196fd5f
.10 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d10c77873ba1e9e6b91905018e29e196fd5f863d
CVE ID: CVE-2024-22714 State: PUBLISHED Published: 2024-01-17T00:00:00.000Z Last Updated: 2025-06-20T17:55:32.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RumblingIsOccupied/cms/blob/main/2.md
CVE ID: CVE-2024-22715 State: PUBLISHED Published: 2024-01-17T00:00:00.000Z Last Updated: 2025-06-20T20:49:14.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RumblingIsOccupied/cms/blob/main/1.md
CVE ID: CVE-2024-22717 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-12-05T20:29:55.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE ID: CVE-2024-22718 State: PUBLISHED Published: 2024-04-11T00:00:00.000Z Last Updated: 2025-03-13T21:16:58.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE ID: CVE-2024-22719 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-11-07T16:31:17.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/
CVE ID: CVE-2024-22720 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-05T16:11:42.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cupc4k3.medium.com/html-injection-vulnerability-in-kanboard-group-management-d9fe5154bb1b
CVE ID: CVE-2024-22721 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-11-04T14:24:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/