Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-12901 State: PUBLISHED Published: 2024-12-23T02:00:12.678Z Last Updated: 2024-12-24T02:03:30.493Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: FoxCMS Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint. The manipulation of the argument password leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289171 - https://vuldb.com/?ctiid.289171 - https://vuldb.com/?submit.467703 - https://note.zhaoj.in/share/8l4RPA2zcxRr
CVE ID: CVE-2024-12902 State: PUBLISHED Published: 2024-12-23T10:16:33.272Z Last Updated: 2024-12-24T02:01:08.577Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Global Wisdom Software Products: ANCHOR Problem Types: CWE-1392 Description: ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8314-983c9-1.html -
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8314-983c9-1.html - https://www.twcert.org.tw/en/cp-139-8315-e6069-2.html
CVE ID: CVE-2024-12903 State: PUBLISHED Published: 2024-12-23T12:41:12.704Z Last Updated: 2024-12-24T01:59:35.383Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Biamp Products: Evoko Home Service Problem Types: CWE-276 Description: Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control permissions exist on the ‘Everyone’ group (i.e. any user who has local access to the operating system regardless of their privileges). A
t on the ‘Everyone’ group (i.e. any user who has local access to the operating system regardless of their privileges). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-default-permissions-biamp-evoko-home
CVE ID: CVE-2024-12904 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:02.950Z Description: No description available.
CVE ID: CVE-2024-12905 State: PUBLISHED Published: 2025-03-27T16:25:34.410Z Last Updated: 2025-11-03T19:29:11.810Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Problem Types: CWE-59, CWE-22 Description: An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3
ith index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed - https://www.seal.security/blog/a-link-to-the-past-uncovering-a-new-vulnerability-in-tar-fs
CVE ID: CVE-2024-12907 State: PUBLISHED Published: 2025-01-02T15:59:13.377Z Last Updated: 2025-01-02T17:35:45.661Z Vendors: Kentico Products: Kentico CMS Problem Types: CWE-79 Description: Kentico CMS in version 7 is vulnerable to a Reflected XSS attacks through manipulation of a specific GET request parameter sent to /CMSMessages/AccessDenied.aspx endpoint. Notably, support for this version of Kentico ended in 2016. Version 8 was tested as well and does not contain this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/01/CVE-2024-12907
CVE ID: CVE-2024-12908 State: PUBLISHED Published: 2024-12-26T15:45:39.592Z Last Updated: 2024-12-27T14:22:58.318Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: Delinea Products: Secret Server Problem Types: CWE-94 Description: Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a remote attacker may be able to convince a user to visit a malicious web-page, or open a malicious document which could tri
mote attacker may be able to convince a user to visit a malicious web-page, or open a malicious document which could trigger the vulnerable handler, allowing them to execute arbitrary code on the user's machine. Delinea added additional validation that the downloaded installer's batch file was in the expected format. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000049.htm - https://trust.delinea.com/ - https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/
CVE ID: CVE-2024-12909 State: PUBLISHED Published: 2025-03-20T10:09:20.928Z Last Updated: 2025-03-20T18:56:10.642Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-89 Description: A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in the `run_sql_query` function of the `database_agent`. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality. The issue is fixed in version 0.3.0. Additional Ana
on (RCE) through the use of PostgreSQL's large object functionality. The issue is fixed in version 0.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/44e8177f-200a-4ba3-a12c-8bc21e313a3f - https://github.com/run-llama/llama_index/commit/5d03c175476452db9b8abcdb7d5767dd7b310a75
CVE ID: CVE-2024-12910 State: PUBLISHED Published: 2025-03-20T10:09:12.416Z Last Updated: 2025-10-15T12:50:19.185Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-674 Description: A vulnerability in the `KnowledgeBaseWebReader` class of the run-llama/llama_index repository, version latest, allows an attacker to cause a Denial of Service (DoS) by controlling a URL variable to contain the root URL. This leads to infinite recursive calls to the `get_article_urls` method, exhausting system resources and potentially crashing the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
ystem resources and potentially crashing the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/27883f22-35ff-49df-aaa5-05031c7d6ad8 - https://github.com/run-llama/llama_index/commit/159ce485a1168100bb219dc1b93133f1121579d9
CVE ID: CVE-2024-12911 State: PUBLISHED Published: 2025-03-20T10:09:44.583Z Last Updated: 2025-10-15T12:50:19.844Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-89 Description: A vulnerability in the `default_jsonalyzer` function of the `JSONalyzeQueryEngine` in the run-llama/llama_index repository allows for SQL injection via prompt injection. This can lead to arbitrary file creation and Denial-of-Service (DoS) attacks. The vulnerability affects the latest version and is fixed in version 0.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/095f9e67-311
version 0.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/095f9e67-311d-494c-99c5-5e61a0adb8f3 - https://github.com/run-llama/llama_index/commit/bf282074e20e7dafd5e2066137dcd4cd17c3fb9e
CVE ID: CVE-2024-12912 State: PUBLISHED Published: 2025-01-02T09:05:50.239Z Last Updated: 2025-01-06T20:33:30.274Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: Router Problem Types: CWE-20, CWE-77 Description: An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/content/asus-product-security-advisory/
CVE ID: CVE-2024-12913 State: PUBLISHED Published: 2025-09-16T11:39:12.275Z Last Updated: 2025-09-23T07:35:41.141Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Megatek Communication System Products: Azora Wireless Network Management Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communication System Azora Wireless Network Management allows SQL Injection.This issue affects Azora Wireless Network Management: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new info
d not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0253
CVE ID: CVE-2024-12914 State: PUBLISHED Published: 2025-09-01T12:28:06.846Z Last Updated: 2025-09-02T20:32:58.133Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Akınsoft Products: QR Menü Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akınsoft QR Menü allows Cross-Site Scripting (XSS).This issue affects QR Menü: from s1.05.05 before v1.05.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0202
CVE ID: CVE-2024-12915 State: PUBLISHED Published: 2025-06-30T15:43:59.956Z Last Updated: 2025-06-30T16:00:17.912Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Devinim Software Products: Library Software Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Devinim Software Library Software allows Reflected XSS.This issue affects Library Software: before 24.11.02. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0144
CVE ID: CVE-2024-12916 State: PUBLISHED Published: 2025-02-24T14:06:29.227Z Last Updated: 2025-02-24T16:00:11.022Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Agito Computer Products: Life4All Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Life4All allows SQL Injection.This issue affects Life4All: before 10.01.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0042
CVE ID: CVE-2024-12917 State: PUBLISHED Published: 2025-02-24T14:14:55.690Z Last Updated: 2025-02-24T16:58:24.511Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Agito Computer Products: Health4All Problem Types: CWE-552 Description: Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0042
CVE ID: CVE-2024-12918 State: PUBLISHED Published: 2025-02-24T14:18:17.909Z Last Updated: 2025-02-24T16:56:38.810Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Agito Computer Products: Health4All Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection.This issue affects Health4All: before 10.01.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0042
CVE ID: CVE-2024-12919 State: PUBLISHED Published: 2025-01-14T09:21:55.299Z Last Updated: 2025-01-14T14:43:35.557Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: madalinungureanu Products: Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction Problem Types: CWE-287 Description: The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link function using the user-controlled value supplied via the 'pms_payment_id' parameter t
the pms_pb_payment_redirect_link function using the user-controlled value supplied via the 'pms_payment_id' parameter to authenticate users without any further identity validation. This makes it possible for unauthenticated attackers with knowledge of a valid payment ID to log in as any user who has made a purchase on the targeted site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d3a4fa4d-a7d2-4890-b0f5-5fe69bc5e7ac?source=cve - https://plugins.trac.wordpress.org/changeset/3214706/paid-member-subscriptions
CVE ID: CVE-2024-12920 State: PUBLISHED Published: 2025-03-19T11:10:38.362Z Last Updated: 2025-03-19T13:33:23.126Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Chimpstudio Products: FoodBakery | Delivery Restaurant Directory WordPress Theme Problem Types: CWE-862 Description: The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the foodbakery_var_backup_file_delete, foodbakery_widget_file_delete, theme_option_save, export_widget_settings, ajax_import_widget_data, foodbakery_var_settings_backup_generate, foodbakery_var_back
tion_save, export_widget_settings, ajax_import_widget_data, foodbakery_var_settings_backup_generate, foodbakery_var_backup_file_restore, and theme_option_rest_all functions in all versions up to, and including, 4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, update theme options, export widget options, import widget options, generate backups, restore backups, and reset theme options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9af8267f-48b1-4537-8985-6af1245ceed5?source=cve - https://themeforest.net/item/food-bakery-restaurant-bakery-respo
es/id/9af8267f-48b1-4537-8985-6af1245ceed5?source=cve - https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331
CVE ID: CVE-2024-12921 State: PUBLISHED Published: 2025-01-30T05:23:00.747Z Last Updated: 2025-01-30T15:09:34.518Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ethereumicoio Products: EthereumICO Problem Types: CWE-79 Description: The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a
ontributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d964c99c-6ab6-453c-969f-66d5cd00dc8e?source=cve - https://plugins.trac.wordpress.org/changeset/3230122/ethereumico
CVE ID: CVE-2024-12922 State: PUBLISHED Published: 2025-03-19T05:22:52.303Z Last Updated: 2025-03-19T14:47:20.628Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeGoods Products: Altair Problem Types: CWE-862 Description: The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration f
site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e27971a3-f84c-4f13-81af-127e7560566a?source=cve - https://themeforest.net/item/tour-travel-agency-altair-theme/9318575 - https://themeforest.net/item/tour-travel-agency-altair-theme/9318575#item-description__changelog
CVE ID: CVE-2024-12923 State: PUBLISHED Published: 2025-08-29T17:02:32.452Z Last Updated: 2025-08-29T17:15:37.423Z Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: Photo Station 6.4.5 ( 2025/01/02 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-24
CVE ID: CVE-2024-12924 State: PUBLISHED Published: 2025-09-01T12:33:31.981Z Last Updated: 2025-09-02T13:35:37.069Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Akınsoft Products: QR Menü Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing.This issue affects QR Menü: from s1.05.05 before v1.05.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0202
CVE ID: CVE-2024-12925 State: PUBLISHED Published: 2025-09-01T12:39:26.843Z Last Updated: 2025-09-02T20:30:57.883Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Akınsoft Products: QR Menü Problem Types: CWE-297 Description: Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting.This issue affects QR Menü: from s1.05.05 before v1.05.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0202
CVE ID: CVE-2024-12926 State: PUBLISHED Published: 2024-12-25T20:00:14.726Z Last Updated: 2024-12-27T14:53:52.778Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Project Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vuln
sed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289279 - https://vuldb.com/?ctiid.289279 - https://vuldb.com/?submit.467933 - https://github.com/dawatermelon/CVE/blob/main/CodeZips%20Project%20Management%20System/README.md
CVE ID: CVE-2024-12927 State: PUBLISHED Published: 2024-12-25T23:00:17.287Z Last Updated: 2024-12-27T14:50:36.477Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Attendance Tracking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some unknown functionality of the file /faculty/check_faculty_login.php. The manipulation of the argument faculty_emailid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Not
he attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289280 - https://vuldb.com/?ctiid.289280 - https://vuldb.com/?submit.467992 - https://github.com/zzkk0173/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2024-12928 State: PUBLISHED Published: 2024-12-25T23:31:04.623Z Last Updated: 2024-12-27T14:49:35.225Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Simple Admin Panel Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument c_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289281 - https://vuldb.com/?ctiid.289281 - ht
nalyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289281 - https://vuldb.com/?ctiid.289281 - https://vuldb.com/?submit.468108 - https://code-projects.org/
CVE ID: CVE-2024-12929 State: PUBLISHED Published: 2024-12-26T00:00:12.795Z Last Updated: 2024-12-27T14:44:27.855Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Student Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. This vulnerability affects unknown code of the file /addCatController.php. The manipulation of the argument size leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289282 - https://vuldb.com/?ctiid.289282 - https://vuldb.com/?submit.468120 - https://code-projects.org/