Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-21794 State: PUBLISHED Published: 2024-02-01T23:25:57.523Z Last Updated: 2025-06-16T18:16:09.465Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L) Vendors: Rapid Software LLC Products: Rapid SCADA Problem Types: CWE-601 Description: In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03 - https://rapidscada.org/contact/
CVE ID: CVE-2024-21795 State: PUBLISHED Published: 2024-02-20T15:29:33.400Z Last Updated: 2025-11-04T18:22:59.634Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Biosig Project Products: libbiosig Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .egi file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1920
CVE ID: CVE-2024-21796 State: PUBLISHED Published: 2024-01-24T01:32:53.509Z Last Updated: 2024-09-10T18:01:34.579Z Vendors: Ministry of Defense Products: Electronic Deliverables Creation Support Tool (Construction Edition), Electronic Deliverables Creation Support Tool (Design & Survey Edition) Problem Types: XML external entities (XXE) Description: Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (Design & Survey Edition) prior to Ver1.0.4 improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker. Additio
ces (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dfeg.mod.go.jp/hp/contents-dfis/tool.html - https://jvn.jp/en/jp/JVN40049211/
CVE ID: CVE-2024-21797 State: PUBLISHED Published: 2025-01-14T14:21:28.740Z Last Updated: 2025-01-15T21:03:07.246Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-74 Description: A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2028
CVE ID: CVE-2024-21798 State: PUBLISHED Published: 2024-02-28T23:03:39.483Z Last Updated: 2024-11-26T08:07:04.819Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: ELECOM CO.,LTD. Products: WRC-1167GS2-B, WRC-1167GS2H-B, WRC-1167GST2, WRC-2533GS2-B, WRC-2533GS2-W, WRC-2533GS2V-B, WRC-2533GST2, WRC-X3200GST3-B, WRC-G01-W, WMC-X1800GST-B Problem Types: CWE-79 Description: ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the we
ontent. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20240220-01/ - https://jvn.jp/en/jp/JVN44166658/
CVE ID: CVE-2024-21799 State: PUBLISHED Published: 2024-11-13T21:11:45.396Z Last Updated: 2024-11-14T19:38:36.284Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Extension for Transformers software Problem Types: escalation of privilege, CWE-22 Description: Path traversal for some Intel(R) Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01190.html
CVE ID: CVE-2024-21801 State: PUBLISHED Published: 2024-08-14T13:45:36.610Z Last Updated: 2024-08-16T13:53:28.095Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) TDX module software Problem Types: denial of service, CWE-691 Description: Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01070.html
CVE ID: CVE-2024-21802 State: PUBLISHED Published: 2024-02-26T16:07:51.921Z Last Updated: 2025-11-04T18:23:00.882Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: llama.cpp Products: llama.cpp Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the GGUF library info-&gt;ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1914
CVE ID: CVE-2024-21803 State: PUBLISHED Published: 2024-01-30T07:15:33.276Z Last Updated: 2025-05-29T15:05:53.669Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: Linux Products: Linux kernel Problem Types: CWE-416 Description: Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C. This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.op
v6.8-rc1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8081
CVE ID: CVE-2024-21805 State: PUBLISHED Published: 2024-03-12T07:20:53.214Z Last Updated: 2024-08-05T17:30:00.998Z Vendors: Sky Co.,LTD. Products: SKYSEA Client View Problem Types: Improper access control Description: Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
itrary code may be executed with SYSTEM privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.skyseaclientview.net/news/240307_01/ - https://jvn.jp/en/jp/JVN54451757/
CVE ID: CVE-2024-21806 State: PUBLISHED Published: 2024-08-14T13:45:47.893Z Last Updated: 2024-08-14T13:58:23.147Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters E810 Series Problem Types: denial of service, CWE-754 Description: Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel
yst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-21807 State: PUBLISHED Published: 2024-08-14T13:45:47.339Z Last Updated: 2024-08-16T04:01:30.886Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters Problem Types: escalation of privilege, CWE-665 Description: Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.ht
CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-21808 State: PUBLISHED Published: 2024-11-13T21:04:08.359Z Last Updated: 2024-11-14T19:47:02.188Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) VPL software Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html
CVE ID: CVE-2024-21809 State: PUBLISHED Published: 2024-05-16T20:47:05.564Z Last Updated: 2024-08-29T20:27:20.773Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Lite Edition Design software Problem Types: escalation of privilege, CWE-92 Description: Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0105
r: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html
CVE ID: CVE-2024-21810 State: PUBLISHED Published: 2024-08-14T13:45:43.577Z Last Updated: 2024-08-16T04:01:25.878Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.h
- CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-21812 State: PUBLISHED Published: 2024-02-20T15:29:32.917Z Last Updated: 2025-11-04T18:23:02.134Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Biosig Project Products: libbiosig Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1921
CVE ID: CVE-2024-21813 State: PUBLISHED Published: 2024-05-16T20:47:37.177Z Last Updated: 2024-08-01T22:27:36.265Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) DTT software installers Problem Types: escalation of privilege, CWE-668 Description: Exposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00984.html
CVE ID: CVE-2024-21814 State: PUBLISHED Published: 2024-05-16T20:47:27.930Z Last Updated: 2024-08-01T22:27:36.269Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Chipset Device Software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01032.html
CVE ID: CVE-2024-21815 State: PUBLISHED Published: 2024-03-05T03:09:52.505Z Last Updated: 2024-08-01T22:27:36.314Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Gallagher Products: Command Centre Server Problem Types: CWE-522 Description: Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior. Additional Analyst Notes: - CISA ADP Vulnrichm
6 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2024-21815
CVE ID: CVE-2024-21816 State: PUBLISHED Published: 2024-03-04T06:19:14.854Z Last Updated: 2024-08-01T22:27:36.290Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-281 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-03.md
CVE ID: CVE-2024-21818 State: PUBLISHED Published: 2024-05-16T20:47:26.384Z Last Updated: 2024-08-07T19:35:38.136Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) PCM software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01035.html
CVE ID: CVE-2024-21820 State: PUBLISHED Published: 2024-11-13T20:34:17.825Z Last Updated: 2025-11-03T21:53:30.866Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/se
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html
CVE ID: CVE-2024-21821 State: PUBLISHED Published: 2024-01-10T23:25:07.433Z Last Updated: 2025-06-17T20:05:42.917Z Vendors: TP-Link Products: Archer AX3000, Archer AX5400, Archer AXE75, Archer Air R5 Problem Types: OS command injection Description: Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware - https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware - https://www.tp-link.com/jp/support/download/archer-axe75/#F
ww.tp-link.com/jp/support/download/archer-ax5400/#Firmware - https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware - https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware - https://jvn.jp/en/vu/JVNVU91401812/
CVE ID: CVE-2024-21823 State: PUBLISHED Published: 2024-05-16T20:46:57.735Z Last Updated: 2024-08-14T20:45:24.842Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors Problem Types: escalation of privilege, CWE-1264 Description: Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/
access Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01084.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ - http://www.openwall.com/lists/oss-security/2024/05/15/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/
CVE ID: CVE-2024-21824 State: PUBLISHED Published: 2024-03-18T08:01:57.734Z Last Updated: 2024-11-07T15:26:23.509Z Vendors: BROTHER INDUSTRIES, LTD., FUJIFILM Business Innovation Corp., Toshiba Tec Corporation, RICOH COMPANY, LTD. Products: Multiple printers and scanners Problem Types: Improper authentication Description: Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the infor
te an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000 - https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000 - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002 - https://www.toshibatec.com/information/20240306_01.html - https://jvn.jp/en/jp/JVN82749078/
CVE ID: CVE-2024-21825 State: PUBLISHED Published: 2024-02-26T16:07:53.031Z Last Updated: 2025-11-04T18:23:03.335Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: llama.cpp Products: llama.cpp Problem Types: CWE-190 Description: A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1
DP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1912
CVE ID: CVE-2024-21826 State: PUBLISHED Published: 2024-03-04T06:19:21.663Z Last Updated: 2024-08-01T22:27:36.324Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-922 Description: in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-03.md
CVE ID: CVE-2024-21827 State: PUBLISHED Published: 2024-06-25T14:01:26.644Z Last Updated: 2025-11-04T17:14:15.827Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tp-Link Products: ER7206 Omada Gigabit VPN Router Problem Types: CWE-489 Description: A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ta
this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947
CVE ID: CVE-2024-21828 State: PUBLISHED Published: 2024-05-16T20:47:04.497Z Last Updated: 2024-10-25T19:09:34.573Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Controller Administrative Tools software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-s
ichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01056.html
CVE ID: CVE-2024-21829 State: PUBLISHED Published: 2024-09-16T16:38:43.243Z Last Updated: 2025-11-03T21:53:32.349Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html