Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10634 State: PUBLISHED Published: 2025-05-15T20:06:45.345Z Last Updated: 2025-05-20T19:37:37.108Z Vendors: Unknown Products: Nokaut Offers Box Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Nokaut Offers Box WordPress plugin through 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset the Nokaut Offers Box WordPress plugin through 1.4.0 via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/97de2ca3-ee64-480b-a5b0-7549533c2936/
CVE ID: CVE-2024-10635 State: PUBLISHED Published: 2025-04-28T20:36:43.320Z Last Updated: 2025-10-06T20:51:36.637Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Proofpoint Products: Enterprise Protection Problem Types: CWE-754 Description: Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system. Additional
client, the malicious attachment could cause partial loss of integrity and confidentiality to their system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2025-0002
CVE ID: CVE-2024-10636 State: PUBLISHED Published: 2025-01-26T05:24:14.348Z Last Updated: 2025-01-27T15:04:54.454Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: AYS Pro Plugins Products: Quiz Maker Developer, Quiz Maker Agency, Quiz Maker Business Problem Types: CWE-79 Description: The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 8.8.0 (Business), up to, and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency) due to insufficient input sanitization and output escaping. This makes it possible for unauthent
luding, 31.8.0 (Agency) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6e845eae-dae9-40bb-aca9-21afaa40576d?source=cve - https://ays-pro.com/wordpress/quiz-maker - https://ays-pro.com/changelog-for-quiz-maker-pro
CVE ID: CVE-2024-10637 State: PUBLISHED Published: 2024-12-12T06:00:18.554Z Last Updated: 2024-12-12T18:46:30.219Z Vendors: Unknown Products: Gutenberg Blocks with AI by Kadence WP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.54 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/df688dcc-9617-4f58-a310-891bfaea3695/
CVE ID: CVE-2024-10638 State: PUBLISHED Published: 2025-03-25T06:00:08.951Z Last Updated: 2025-03-25T13:21:10.641Z Vendors: Unknown Products: Product Labels For Woocommerce (Sale Badges) Problem Types: CWE-89 SQL Injection Description: The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/32a7a778-2211-45b4-bdc2-528f27b7d4fe/
CVE ID: CVE-2024-10639 State: PUBLISHED Published: 2025-05-15T20:06:45.594Z Last Updated: 2025-05-20T19:37:25.707Z Vendors: Unknown Products: Auto Prune Posts Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Auto Prune Posts WordPress plugin before 3.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/efab3a36-535b-40ff-b98f-482a0e5193f1/
CVE ID: CVE-2024-10640 State: PUBLISHED Published: 2024-11-09T11:19:44.210Z Last Updated: 2024-11-11T16:11:00.337Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: realmag777 Products: FOX – Currency Switcher Professional for WooCommerce Problem Types: CWE-94 Description: The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.2.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. A
lue before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ceb0dffa-02a2-4193-b2c4-4774091eacfa?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3183018%40woocommerce-currency-switcher&old=3178647%40woocommerce-currency-switcher&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10644 State: PUBLISHED Published: 2025-02-11T15:20:46.680Z Last Updated: 2025-02-13T04:55:16.809Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure Problem Types: CWE-94 Description: Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-
s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-10645 State: PUBLISHED Published: 2024-11-16T08:35:38.355Z Last Updated: 2024-11-19T16:03:12.334Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: sudiptomahato Products: Blogger 301 Redirect Problem Types: CWE-89 Description: The Blogger 301 Redirect plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘br’ parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extrac
for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/06359274-37ae-47f5-824c-25600c5b06eb?source=cve - https://plugins.trac.wordpress.org/browser/blogger-301-redirect/trunk/bloggerredirect.php#L93
CVE ID: CVE-2024-10646 State: PUBLISHED Published: 2024-12-14T05:34:14.007Z Last Updated: 2024-12-16T17:49:03.885Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: techjewel Products: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Problem Types: CWE-79 Description: The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form's subject parameter in all versions up to, and including, 5.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra
ufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/41c2ec31-360d-4145-b0b4-77d4d1d4b8a1?source=cve - https://plugins.trac.wordpress.org/browser/fluentform/tags/5.2.4 - https://plugins.trac.wordpress.org/changeset/3203147/fluentform/trunk/boot/globals.php
CVE ID: CVE-2024-10647 State: PUBLISHED Published: 2024-11-06T02:01:56.620Z Last Updated: 2024-11-06T11:29:19.983Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: westguard Products: WS Form LITE – Drag & Drop Contact Form Builder for WordPress Problem Types: CWE-79 Description: The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.9.244. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successful
s it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6cab527f-bd67-4b67-8133-f085098d63dc?source=cve - https://plugins.trac.wordpress.org/changeset/3179725/ws-form
CVE ID: CVE-2024-10648 State: PUBLISHED Published: 2025-03-20T10:11:11.154Z Last Updated: 2025-03-20T14:21:33.649Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: gradio-app Products: gradio-app/gradio Problem Types: CWE-29 Description: A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
empty file, causing a denial of service (DOS) on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/667d664d-8189-458c-8ed7-483fe8f33c76
CVE ID: CVE-2024-10649 State: PUBLISHED Published: 2025-02-10T18:50:27.106Z Last Updated: 2025-10-15T12:50:10.025Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: wandb Products: wandb/openui Problem Types: CWE-306 Description: wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket. This can lead to multiple security issues including denial of service, stored XSS, and information disclosure. The affected endpoints are '/v1/share/{id:str}' for uploading and '/v1/share/{id:str}' for downloading JSON files. The lack of authentication allo
'/v1/share/{id:str}' for uploading and '/v1/share/{id:str}' for downloading JSON files. The lack of authentication allows any user to upload and overwrite files, potentially causing the S3 bucket to run out of space, injecting malicious scripts, and accessing sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/1025793a-3c19-4148-a26e-80cd84d4822d
CVE ID: CVE-2024-10650 State: PUBLISHED Published: 2025-03-20T10:11:29.258Z Last Updated: 2025-10-15T12:49:24.004Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-770 Description: An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for CVE-2024-7807, the issue can still be exploited by sending data in groups with 10 characters in a line, with multiple lines. This can cause the system to continuously process these characters, re
ith 10 characters in a line, with multiple lines. This can cause the system to continuously process these characters, resulting in prolonged unavailability of the service. The exploitation now requires low privilege if authentication is enabled due to a version upgrade in Gradio. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/f820371d-a878-44bf-b1fd-2d837dd58eb4
CVE ID: CVE-2024-10651 State: PUBLISHED Published: 2024-11-01T09:53:23.611Z Last Updated: 2024-11-01T13:32:30.517Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: CHANGING Information Technology Products: IDExpert Problem Types: CWE-36 Description: IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8170-48a4e-1.html - https://www.twcert.org.tw/en/cp-139-8171-29297-2.htm
ferences: - https://www.twcert.org.tw/tw/cp-132-8170-48a4e-1.html - https://www.twcert.org.tw/en/cp-139-8171-29297-2.html
CVE ID: CVE-2024-10652 State: PUBLISHED Published: 2024-11-01T09:56:32.011Z Last Updated: 2024-11-01T13:31:48.852Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: CHANGING Information Technology Products: IDExpert Problem Types: CWE-79 Description: IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8172-a02cc-1.html - https://www.twcert.org.tw/en/cp-139-8173-f8bbc-2.html
CVE ID: CVE-2024-10653 State: PUBLISHED Published: 2024-11-01T09:59:15.734Z Last Updated: 2024-11-04T06:47:22.301Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: CHANGING Information Technology Products: IDExpert Problem Types: CWE-78 Description: IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8174-a17fd-1.html - https://www.twcert.org.tw/en/cp-139-8175-57245-2.html
CVE ID: CVE-2024-10654 State: PUBLISHED Published: 2024-11-01T11:31:05.723Z Last Updated: 2024-11-05T07:04:37.847Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: TOTOLINK Products: LR350 Problem Types: CWE-639, CWE-285, CWE-266 Description: A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.3.5u.6698_B20230810 is abl
emotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.3.5u.6698_B20230810 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282667 - https://vuldb.com/?ctiid.282667 - https://vuldb.com/?submit.434801 - https://github.com/c0nyy/IoT_vuln/blob/main/TOTOLINK%20LR350%20Vuln.md - https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/231/ids/36.html - https://www.totolink.net/
CVE ID: CVE-2024-10655 State: PUBLISHED Published: 2024-11-01T13:31:04.387Z Last Updated: 2024-11-01T14:40:09.422Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file /pda/reportshop/new.php. The manipulation of the argument repid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282670 - https://vuldb.com/?ctiid.282670 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282670 - https://vuldb.com/?ctiid.282670 - https://vuldb.com/?submit.433515 - https://github.com/LvZCh/td/issues/11
CVE ID: CVE-2024-10656 State: PUBLISHED Published: 2024-11-01T14:31:04.576Z Last Updated: 2024-11-01T15:10:27.062Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown processing of the file /pda/meeting/apply.php. The manipulation of the argument mr_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282671 - https://vuldb.com/?ctiid.282671 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282671 - https://vuldb.com/?ctiid.282671 - https://vuldb.com/?submit.433517 - https://github.com/LvZCh/td/issues/12
CVE ID: CVE-2024-10657 State: PUBLISHED Published: 2024-11-01T15:00:05.165Z Last Updated: 2024-11-01T19:08:48.431Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/approve_center/prcs_info.php. The manipulation of the argument RUN_ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282672 - https://vuldb.com/?ctiid.282672 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282672 - https://vuldb.com/?ctiid.282672 - https://vuldb.com/?submit.433528 - https://github.com/LvZCh/td/issues/13
CVE ID: CVE-2024-10658 State: PUBLISHED Published: 2024-11-01T15:00:07.012Z Last Updated: 2024-11-01T19:08:18.099Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Tongda OA up to 11.10. Affected by this vulnerability is an unknown functionality of the file /pda/approve_center/check_seal.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282673 - https://vuldb.com/?ctiid.282673
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282673 - https://vuldb.com/?ctiid.282673 - https://vuldb.com/?submit.433529 - https://github.com/LvZCh/td/issues/14
CVE ID: CVE-2024-10659 State: PUBLISHED Published: 2024-11-01T15:31:12.101Z Last Updated: 2024-11-05T15:27:49.769Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282674 - https://vuldb.com/?ctiid.282674 - https://vuldb.com/?submit.434862 - https://flowus.cn/share/eaefcf21-6a72-48f8-bc18-a4889512bfe5?code=G8A6P3
CVE ID: CVE-2024-10660 State: PUBLISHED Published: 2024-11-01T15:31:15.299Z Last Updated: 2024-11-05T15:27:13.864Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282675 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282675 - https://vuldb.com/?ctiid.282675 - https://vuldb.com/?submit.434863 - https://flowus.cn/share/9d33a5d8-87b1-482b-8642-a8fcf27585ba?code=G8A6P3
CVE ID: CVE-2024-10661 State: PUBLISHED Published: 2024-11-01T16:00:13.148Z Last Updated: 2024-11-05T15:26:23.637Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC15 Problem Types: CWE-121 Description: A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282676 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282676 - https://vuldb.com/?ctiid.282676 - https://vuldb.com/?submit.434932 - https://github.com/theRaz0r/iot-mycve/blob/main/tenda_ac15_stackflow_formDLNAserver/tenda_ac15_stackflow_formDLNAserver.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-10662 State: PUBLISHED Published: 2024-11-01T16:00:16.399Z Last Updated: 2024-11-05T15:25:38.625Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC15 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282677 - https://vuldb.com/?ctiid.2
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282677 - https://vuldb.com/?ctiid.282677 - https://vuldb.com/?submit.434933 - https://github.com/theRaz0r/iot-mycve/blob/main/tenda_ac15_stackflow_formSetDeviceName/tenda_ac15_stackflow_formSetDeviceName.md - https://www.tenda.com.cn/