Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53277 State: PUBLISHED Published: 2025-01-14T22:45:07.403Z Last Updated: 2025-01-15T14:52:21.490Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: silverstripe Products: silverstripe-framework Problem Types: CWE-79 Description: Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the CMS where that content doesn't get correctly sanitised prior to being included in the form message, r
e scenarios in the CMS where that content doesn't get correctly sanitised prior to being included in the form message, resulting in an XSS vulnerability. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-ff6q-3c9c-6cf5 - https://github.com/silverstripe/silverstripe-framework/commit/74904f539347b7d1f8c5b5fb9e28d62ff251ee00 - https://www.silverstripe.org/download/security-releases/cve-2024-53277
CVE ID: CVE-2024-53278 State: PUBLISHED Published: 2024-11-26T04:33:51.381Z Last Updated: 2024-11-26T14:09:26.088Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: gqevu6bsiz Products: WP Admin UI Customize Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-admin-ui-customize/#developers - htt
lyst Notes: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-admin-ui-customize/#developers - https://gqevu6bsiz.chicappa.jp/wp-admin-ui-customize-%E3%82%A2%E3%83%83%E3%83%97%E3%83%87%E3%83%BC%E3%83%881-5-14%E3%82%92%E3%81%97%E3%81%BE%E3%81%97%E3%81%9F/ - https://jvn.jp/en/jp/JVN87182660/
CVE ID: CVE-2024-53279 State: PUBLISHED Published: 2024-12-09T03:30:07.550Z Last Updated: 2025-08-01T05:23:18.529Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Ana
tive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53280 State: PUBLISHED Published: 2024-12-09T03:29:56.369Z Last Updated: 2025-08-01T05:25:42.229Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center policy route functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML.
ining non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53281 State: PUBLISHED Published: 2024-12-09T03:30:21.508Z Last Updated: 2025-08-01T05:27:09.047Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrich
mited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53282 State: PUBLISHED Published: 2024-12-09T03:30:43.432Z Last Updated: 2025-08-01T05:28:24.344Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC Filter functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Add
g non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53283 State: PUBLISHED Published: 2024-12-09T03:31:04.815Z Last Updated: 2025-08-01T05:29:28.549Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additio
n-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53284 State: PUBLISHED Published: 2024-12-09T03:32:53.245Z Last Updated: 2025-08-01T05:30:40.668Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additi
on-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53285 State: PUBLISHED Published: 2024-12-09T03:38:44.332Z Last Updated: 2025-08-01T05:31:40.190Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Anal
ive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_09
CVE ID: CVE-2024-53286 State: PUBLISHED Published: 2025-07-23T04:11:30.757Z Last Updated: 2025-07-23T15:14:26.179Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_16
CVE ID: CVE-2024-53287 State: PUBLISHED Published: 2025-07-23T04:11:51.262Z Last Updated: 2025-07-23T15:14:21.462Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/
d vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_16
CVE ID: CVE-2024-53288 State: PUBLISHED Published: 2025-07-23T04:11:58.476Z Last Updated: 2025-07-23T15:14:16.849Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/a
vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_16
CVE ID: CVE-2024-53289 State: PUBLISHED Published: 2024-12-11T07:40:46.895Z Last Updated: 2024-12-11T15:08:48.831Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Wyse Proprietary OS (Modern ThinOS) Problem Types: CWE-367 Description: Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000248475/dsa-2024-463
CVE ID: CVE-2024-53290 State: PUBLISHED Published: 2024-12-11T07:34:47.345Z Last Updated: 2024-12-11T15:06:53.223Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Wyse Proprietary OS (Modern ThinOS) Problem Types: CWE-77 Description: Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000248475/dsa-2024-463
CVE ID: CVE-2024-53291 State: PUBLISHED Published: 2024-12-25T15:02:42.544Z Last Updated: 2024-12-27T14:57:35.694Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: NativeEdge Problem Types: CWE-1230 Description: Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258904/dsa-2024-488-security-update-for-dell-nativeedge-multiple-vulnerabilities
CVE ID: CVE-2024-53292 State: PUBLISHED Published: 2024-12-11T07:55:24.383Z Last Updated: 2024-12-11T15:09:35.982Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell VxRail HCI Problem Types: CWE-256 Description: Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable component with privileges of the compromised account. Additional Analyst Notes: - CISA ADP Vulnrichment: R
he vulnerable component with privileges of the compromised account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258964/dsa-2024-492-security-update-dell-vxverify-on-vxrail-plaintext-password-storage-vulnerabilities
CVE ID: CVE-2024-53295 State: PUBLISHED Published: 2025-02-01T04:12:10.402Z Last Updated: 2025-02-04T20:55:08.939Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-1220 Description: Dell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnerabili
://www.dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnerabilities
CVE ID: CVE-2024-53296 State: PUBLISHED Published: 2025-02-01T03:56:38.147Z Last Updated: 2025-02-12T20:51:22.499Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-121 Description: Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnera
ttps://www.dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnerabilities
CVE ID: CVE-2024-53298 State: PUBLISHED Published: 2025-06-20T13:51:04.102Z Last Updated: 2025-06-24T03:55:36.640Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-862 Description: Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read, modify, and delete arbitrary files. This vulnerability is considered critical as it can be leveraged to fully compromise the system. Dell re
rbitrary files. This vulnerability is considered critical as it can be leveraged to fully compromise the system. Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000326339/dsa-2025-208-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE ID: CVE-2024-53299 State: PUBLISHED Published: 2025-01-23T08:37:05.687Z Last Updated: 2025-02-04T18:52:25.991Z Vendors: Apache Software Foundation Products: Apache Wicket Problem Types: CWE-400 Description: The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/gyp2ht00c62827y0379lxh5dbx3hhho5
CVE ID: CVE-2024-53303 State: PUBLISHED Published: 2025-04-16T00:00:00.000Z Last Updated: 2025-04-17T14:11:45.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2 after commit 123db87 allows authenticated attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/fern89/3464e8428d7675e4f0f390a6b2b2842e
CVE ID: CVE-2024-53304 State: PUBLISHED Published: 2025-04-16T00:00:00.000Z Last Updated: 2025-04-16T20:23:29.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in LRQA Nettitude PoshC2 after commit 09ee2cf allows unauthenticated attackers to connect to the C2 server and execute arbitrary commands via posing as an infected machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/fern89/3464e8428d7675e4f0f390a6b2b2842e
CVE ID: CVE-2024-53305 State: PUBLISHED Published: 2025-04-16T00:00:00.000Z Last Updated: 2025-04-16T20:22:34.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/fern89/ca5fe76ad81b4bc363e7341e523a1651 - https://github.com/benbusby/whoogle-search/commit/223f00c3c0533423114f99b30c561278bc0b42ba
CVE ID: CVE-2024-53307 State: PUBLISHED Published: 2025-03-10T00:00:00.000Z Last Updated: 2025-03-10T17:36:17.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the /mw/ endpoint of Evisions MAPS v6.10.2.267 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Xib3rR4dAr/bf754848f1cd77162f79226144b04648 - https://webhelp.evisions.com/releaseguides/maps/default.htm#6.11/6.11%20Release%20Notes.htm?TocPath=MAPS%25206.11%2520Release%2520Guide%257C_____3
CVE ID: CVE-2024-53309 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-17T18:49:18.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when an overly long string is passed to the "-f" parameter. This can lead to memory corruption, potentially allowing arbitrary code execution or causing a denial of service via specially crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53309/CVE-2024-53309.md
CVE ID: CVE-2024-53310 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-19T18:45:53.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a specially crafted file is passed to the -ff parameter. The vulnerability occurs due to improper handling of file input with overly long characters, leading to memory corruption. This can result in arbitrary code execution or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53310/
Notes: - CISA ADP Vulnrichment: References: - https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53310/CVE-2024-53310.md
CVE ID: CVE-2024-53311 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-17T18:44:06.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85 allows attackers to execute arbitrary code via a crafted input that exceeds the buffer size. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53311/CVE-2024-53311.md
CVE ID: CVE-2024-53319 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-02-03T20:01:38.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in the XML Text Escaping component of Qualisys C++ SDK commit a32a21a allows attackers to cause Denial of Service (DoS) via escaping special XML characters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qualisys/qualisys_cpp_sdk/issues/49
CVE ID: CVE-2024-53320 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-02-03T20:07:18.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveCapture, and LoadProject functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qualisys/qualisys_cpp_sdk/issues/47
CVE ID: CVE-2024-53333 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-25T21:39:57.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. This vulnerability allows an attacker to execute arbitrary commands via the "ussd" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/Totolink-EX200-Vulnerability-1/blob/main/README.md
CVE ID: CVE-2024-53334 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-21T20:25:54.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/Totolink-A810R-Vulnerability-1/blob/main/1.md
CVE ID: CVE-2024-53335 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-26T17:53:26.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/Totolink-A810R-Vulnerability-1/blob/main/2.md