Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0333 State: PUBLISHED Published: 2024-01-10T21:28:12.422Z Last Updated: 2025-06-03T14:27:34.648Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_9.html - https://crbug.com/1513379 - https://lists.fedoraproject.org/archives/list/package-annou
nnel-update-for-desktop_9.html - https://crbug.com/1513379 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPYCYENYQYADCOS6XG4JITUVRZ6HTE2B/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BXC7FJIAZRY3P72XC4Z4UOW2QDA7YX7/
CVE ID: CVE-2024-0334 State: PUBLISHED Published: 2024-05-01T12:46:30.555Z Last Updated: 2024-08-01T18:04:49.440Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attribute of a link in several Elementor widgets in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contri
ization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/950e9042-1364-4200-8f57-171346075764?source=cve - https://plugins.trac.wordpress.org/changeset/3077328/jeg-elementor-kit
CVE ID: CVE-2024-0335 State: PUBLISHED Published: 2024-04-03T18:53:25.236Z Last Updated: 2024-09-19T17:35:29.362Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ABB Products: Symphony Plus S+ Operations, Symphony Plus S+ Engineering, Symphony Plus S+ Analyst Problem Types: CWE-23 Description: ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst) This issue affects Symphony Plus S+ Operations: from 3..0;0 through 3.3 SP1 RU4, from 2.1;0 through 2.1 SP2 RU3, from 2.0;0 through 2.0 SP6 TC6; Symphony Plus S+ Engi
: from 3..0;0 through 3.3 SP1 RU4, from 2.1;0 through 2.1 SP2 RU3, from 2.0;0 through 2.0 SP6 TC6; Symphony Plus S+ Engineering: from 2.1 through 2.3 RU3; Symphony Plus S+ Analyst: from 7.0.0.0 through 7.2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=7PAA002536&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-0336 State: PUBLISHED Published: 2024-06-03T13:59:25.851Z Last Updated: 2025-10-14T12:26:52.985Z Vendors: EMTA Grup Products: PDKS Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in EMTA Grup PDKS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDKS: from V3.04 before 20240603. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-0600
CVE ID: CVE-2024-0337 State: PUBLISHED Published: 2024-03-20T05:00:02.494Z Last Updated: 2024-08-01T18:18:19.215Z Vendors: Unknown Products: Travelpayouts: All Travel Brands in One Place Problem Types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Description: The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
fully trick them into performing an action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2f17a274-8676-4f4e-989f-436030527890/
CVE ID: CVE-2024-0338 State: PUBLISHED Published: 2024-02-02T09:13:40.398Z Last Updated: 2025-06-17T21:29:24.069Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Apachefriends Products: XAMPP Problem Types: CWE-119 Description: A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug argument that controls the Structured Exception Handler (SEH). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/buffer-overflow-vulnerability-xampp
CVE ID: CVE-2024-0339 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:04:51.739Z Description: No description available.
CVE ID: CVE-2024-0340 State: PUBLISHED Published: 2024-01-09T17:36:11.578Z Last Updated: 2025-11-07T17:06:21.545Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-200 Description: A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileg
guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:3618 - https://access.redhat.com/errata/RHSA-2024:3627 - https://access.redhat.com/errata/RHSA-2024:9315 - https://access.redhat.com/errata/RHSA-2025:7526 - https://access.redhat.com/security/cve/CVE-2024-0340 - https://bugzilla.redhat.com/show_bug.cgi?id=2257406 - https://lore.kernel.org/lkml/5kn47peabxjrptkqa6dwtyus35ahf4pcj4qm4pumse33kxqpjw@mec4se
hat.com/show_bug.cgi?id=2257406 - https://lore.kernel.org/lkml/5kn47peabxjrptkqa6dwtyus35ahf4pcj4qm4pumse33kxqpjw@mec4se5relrc/T/
CVE ID: CVE-2024-0341 State: PUBLISHED Published: 2024-01-09T18:55:59.518Z Last Updated: 2025-04-17T17:19:51.600Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Inis Problem Types: CWE-24 Description: A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The identifier VDB-250109 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program C
and may be used. The identifier VDB-250109 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250109 - https://vuldb.com/?ctiid.250109 - https://note.zhaoj.in/share/VYx8H9u8gyHw
CVE ID: CVE-2024-0342 State: PUBLISHED Published: 2024-01-09T19:31:03.881Z Last Updated: 2025-06-17T20:39:18.790Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Inis Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250110 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com
lnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250110 - https://vuldb.com/?ctiid.250110 - https://note.zhaoj.in/share/nWYJHrmUqv7i
CVE ID: CVE-2024-0343 State: PUBLISHED Published: 2024-01-09T19:31:04.940Z Last Updated: 2025-06-17T20:39:18.925Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: CodeAstro Products: Simple House Rental System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250111. Additional Analyst Notes: - CVE Program Container
e used. The associated identifier of this vulnerability is VDB-250111. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250111 - https://vuldb.com/?ctiid.250111 - https://drive.google.com/file/d/1NHdebIGiV8FybYFGXIqWHjdVGzZCQqAm/view?usp=sharing
CVE ID: CVE-2024-0344 State: PUBLISHED Published: 2024-01-09T21:00:05.468Z Last Updated: 2025-05-14T19:03:36.299Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: soxft Products: TimeMail Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in soxft TimeMail up to 1.1. Affected by this issue is some unknown functionality of the file check.php. The manipulation of the argument c leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vu
lity is VDB-250112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250112 - https://vuldb.com/?ctiid.250112 - https://note.zhaoj.in/share/VSutvlpgCJkD
CVE ID: CVE-2024-0345 State: PUBLISHED Published: 2024-01-09T21:00:06.585Z Last Updated: 2025-04-17T17:19:24.654Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: CodeAstro Products: Vehicle Booking System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument Full_Name/Last_Name/Address with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and ma
ross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250113 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250113 - https://vuldb.com/?ctiid.250113 - https://drive.google.com/file/d/1ihxLw4kzbAbDhHtca3UnTaB-iMWHi5DJ/view?usp=sharing
CVE ID: CVE-2024-0346 State: PUBLISHED Published: 2024-01-09T21:31:02.994Z Last Updated: 2024-09-03T20:39:37.362Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: CodeAstro Products: Vehicle Booking System Problem Types: CWE-79 Description: A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250114 is the identifier assigned to this vulnerabili
The exploit has been disclosed to the public and may be used. VDB-250114 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250114 - https://vuldb.com/?ctiid.250114 - https://drive.google.com/file/d/1bao4YK4GwvAvCdCrsW5UpJZdvREdc_Yj/view?usp=sharing
CVE ID: CVE-2024-0347 State: PUBLISHED Published: 2024-01-09T21:31:04.011Z Last Updated: 2024-11-14T16:32:26.939Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Engineers Online Portal Problem Types: CWE-521 Description: A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the pu
plexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250115. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250115 - https://vuldb.com/?ctiid.250115 - https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0
CVE ID: CVE-2024-0348 State: PUBLISHED Published: 2024-01-09T22:00:04.969Z Last Updated: 2025-06-17T20:39:19.050Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: SourceCodester Products: Engineers Online Portal Problem Types: CWE-400 Description: A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the component File Upload Handler. The manipulation leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250116. Additional Analyst Notes: - C
sclosed to the public and may be used. The identifier of this vulnerability is VDB-250116. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250116 - https://vuldb.com/?ctiid.250116 - https://mega.nz/file/HNkn2QbI#EjefwKgFoAjtWcxrQFMgBfhVQ1LAf2hq7Jg-nDsE-P4
CVE ID: CVE-2024-0349 State: PUBLISHED Published: 2024-01-09T22:31:03.824Z Last Updated: 2025-04-17T17:18:53.711Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Engineers Online Portal Problem Types: CWE-614 Description: A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used
k is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-250117 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250117 - https://vuldb.com/?ctiid.250117 - https://mega.nz/file/TU1X3TIQ#7bPvxEP0KrdoDZVg-dqinNC5fEQrG5uu58jWzPGh904
CVE ID: CVE-2024-0350 State: PUBLISHED Published: 2024-01-09T22:31:04.857Z Last Updated: 2025-06-03T14:29:32.878Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Engineers Online Portal Problem Types: CWE-613 Description: A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-250118 is the identifier
on is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-250118 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250118 - https://vuldb.com/?ctiid.250118 - https://mega.nz/file/fckFBASJ#lffaC0xY44ri9Ln-7hrUbUtq2GTiE8roiW8guR7QeVE
CVE ID: CVE-2024-0351 State: PUBLISHED Published: 2024-01-09T23:00:05.670Z Last Updated: 2025-06-17T20:08:38.762Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Engineers Online Portal Problem Types: CWE-384 Description: A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerabili
e difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250119. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250119 - https://vuldb.com/?ctiid.250119 - https://mega.nz/file/LJlBQLhR#Ix4yNMdtVtlJFQP6Ae6fbXmnyH4bXTTAWN_JT5kzXzg
CVE ID: CVE-2024-0352 State: PUBLISHED Published: 2024-01-09T23:00:06.729Z Last Updated: 2025-06-03T14:29:27.523Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: Likeshop Problem Types: CWE-434 Description: A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250120
motely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250120. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250120 - https://vuldb.com/?ctiid.250120 - https://note.zhaoj.in/share/ciwYj7QXC4sZ
CVE ID: CVE-2024-0353 State: PUBLISHED Published: 2024-02-15T07:40:24.786Z Last Updated: 2024-11-25T18:15:23.590Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ESET, spol. s r.o. Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure Problem Types: CWE-269 Description: Local privilege escalation vulnerability potentially allo
curity for Microsoft Azure Problem Types: CWE-269 Description: Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
CVE ID: CVE-2024-0354 State: PUBLISHED Published: 2024-01-09T23:31:03.874Z Last Updated: 2025-05-14T18:45:25.608Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: unknown-o Products: download-station Problem Types: CWE-24 Description: A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the file index.php. The manipulation of the argument f leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250121 was assigned to this vulnerability. Additional Analyst No
losed to the public and may be used. The identifier VDB-250121 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250121 - https://vuldb.com/?ctiid.250121 - https://note.zhaoj.in/share/nHD5xiHQgHG0
CVE ID: CVE-2024-0355 State: PUBLISHED Published: 2024-01-09T23:31:04.891Z Last Updated: 2025-04-17T17:09:04.981Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250122 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Con
nd may be used. VDB-250122 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250122 - https://vuldb.com/?ctiid.250122 - https://medium.com/@heishou/dfsms-has-sql-injection-vulnerability-e9cfbc375be8
CVE ID: CVE-2024-0356 State: PUBLISHED Published: 2024-01-10T00:00:07.336Z Last Updated: 2025-06-03T14:28:29.875Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Mandelo Products: ssm_shiro_blog Problem Types: CWE-284 Description: A vulnerability has been found in Mandelo ssm_shiro_blog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250123. Additional Analyst Notes: - CVE Program Container: - CISA
The associated identifier of this vulnerability is VDB-250123. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250123 - https://vuldb.com/?ctiid.250123 - https://medium.com/@heishou/ssm-has-a-vertical-override-vulnerability-8728da71842e