Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-21756 State: PUBLISHED Published: 2024-04-09T14:24:24.441Z Last Updated: 2024-08-01T22:27:36.316Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-78 Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSandbox version 4.4.0 through 4.4.3 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests.. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-489
CVE ID: CVE-2024-21757 State: PUBLISHED Published: 2024-08-13T15:51:57.495Z Last Updated: 2024-08-13T17:48:37.502Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-620 Description: A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup. Additional Analyst Notes: - CISA ADP Vulnrichm
n attacker to modify admin passwords via the device configuration backup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-467
CVE ID: CVE-2024-21758 State: PUBLISHED Published: 2025-01-14T14:09:56.939Z Last Updated: 2025-02-18T21:38:54.103Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-121 Description: A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a privileged user to execute arbitrary code via specially crafted CLI commands, provided the user is able to evade FortiWeb stack protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-458
CVE ID: CVE-2024-21759 State: PUBLISHED Published: 2024-07-09T15:33:31.028Z Last Updated: 2024-08-01T22:27:36.325Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiPortal Problem Types: CWE-639 Description: An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP or HTTPS requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-011
CVE ID: CVE-2024-21760 State: PUBLISHED Published: 2025-03-18T13:56:44.525Z Last Updated: 2025-03-18T14:15:03.959Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:X/RC:X) Vendors: Fortinet Products: FortiSOAR Problem Types: CWE-94 Description: An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-420
CVE ID: CVE-2024-21761 State: PUBLISHED Published: 2024-03-12T15:09:16.653Z Last Updated: 2024-08-12T18:03:23.595Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiPortal Problem Types: CWE-285 Description: An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-24-016
CVE ID: CVE-2024-21762 State: PUBLISHED Published: 2024-02-09T08:14:25.954Z Last Updated: 2025-10-21T23:05:25.228Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:W/RC:C) Vendors: Fortinet Products: FortiProxy, FortiOS Problem Types: CWE-787 Description: A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via s
through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-24-015
CVE ID: CVE-2024-21763 State: PUBLISHED Published: 2024-02-14T16:30:25.714Z Last Updated: 2024-11-06T21:43:36.578Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-476 Description: When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffic Management Microkernel (TMM) to terminate. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000137521
CVE ID: CVE-2024-21764 State: PUBLISHED Published: 2024-02-01T23:28:32.698Z Last Updated: 2024-10-17T16:01:00.443Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rapid Software LLC Products: Rapid SCADA Problem Types: CWE-798 Description: In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03 - https://rapidscada.org/contact/
CVE ID: CVE-2024-21765 State: PUBLISHED Published: 2024-01-24T01:32:42.611Z Last Updated: 2025-06-20T19:26:21.223Z Vendors: Ministry of Land, Infrastructure, Transport and Tourism, Japan Products: Electronic Delivery Check System (Doboku), Electronic Delivery Check System (Dentsu), Electronic Delivery Check System (Kikai), Electronic delivery item Inspection Support System Problem Types: XML external entities (XXE) Description: Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electronic Delivery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and ea
ery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and earlier improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.cals-ed.go.jp/checksys-release-20231130/ - https://www.ysk.nilim.go.jp/cals/ - https://jvn.jp/en/jp/JVN77736613/
CVE ID: CVE-2024-21766 State: PUBLISHED Published: 2024-08-14T13:45:36.085Z Last Updated: 2024-08-14T18:11:23.071Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Math Kernel Library software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01072.html
CVE ID: CVE-2024-21767 State: PUBLISHED Published: 2024-03-01T20:54:48.538Z Last Updated: 2024-08-12T20:25:25.781Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Commend Products: WS203VICM Problem Types: CWE-284 Description: A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-051-01 - https://clibrary-online.commend.com/en/cyber-security/security-advisories.html
CVE ID: CVE-2024-21769 State: PUBLISHED Published: 2024-08-14T13:45:45.223Z Last Updated: 2024-08-16T04:01:32.061Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Connection I219-LM install software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-21771 State: PUBLISHED Published: 2024-02-14T16:30:21.300Z Last Updated: 2025-03-24T19:08:35.051Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-770 Description: For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic against signatures, resulting in Traffic Management Microkernel (TMM) restarting and traffic disruption. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000137595
CVE ID: CVE-2024-21772 State: PUBLISHED Published: 2024-05-16T20:47:10.809Z Last Updated: 2024-08-21T15:01:22.388Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Advisor software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01047.html
CVE ID: CVE-2024-21773 State: PUBLISHED Published: 2024-01-10T23:24:50.112Z Last Updated: 2025-06-03T14:26:17.285Z Vendors: TP-Link Products: Archer AX3000, Archer AX5400, Deco X50, Deco XE200, Archer Air R5 Problem Types: Information disclosure Description: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware - https://www.tp-lin
ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware - https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware - https://www.tp-link.com/jp/support/download/deco-x50/v1/#Firmware - https://www.tp-link.com/jp/support/download/deco-xe200/#Firmware - https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware - https://jvn.jp/en/vu/JVNVU91401812/
CVE ID: CVE-2024-21774 State: PUBLISHED Published: 2024-05-16T20:47:07.267Z Last Updated: 2024-08-01T22:27:36.320Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processor Identification Utility software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-
richment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01054.html
CVE ID: CVE-2024-21775 State: PUBLISHED Published: 2024-02-16T14:35:11.451Z Last Updated: 2024-08-21T14:44:14.705Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: Exchange Reporter Plus Problem Types: CWE-89 Description: Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-21775.html
CVE ID: CVE-2024-21777 State: PUBLISHED Published: 2024-05-16T20:47:06.188Z Last Updated: 2024-08-01T22:27:36.303Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro Edition Design software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.h
- CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html
CVE ID: CVE-2024-21778 State: PUBLISHED Published: 2024-07-08T15:25:38.672Z Last Updated: 2025-11-04T17:14:14.440Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: LevelOne, Realtek Products: WBR-6013, rtl819x Jungle SDK Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrary code execution. An attacker can upload a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vul
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1911
CVE ID: CVE-2024-21780 State: PUBLISHED Published: 2024-02-02T06:38:19.377Z Last Updated: 2025-06-16T18:27:12.694Z Vendors: KDDI CORPORATION Products: HOME SPOT CUBE2 Problem Types: Stack-based buffer overflow Description: Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service (DoS) condition. Note that the affected products are no longer supported. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/ - https://jvn.jp/en/vu/JVNVU93740658/
CVE ID: CVE-2024-21781 State: PUBLISHED Published: 2024-09-16T16:38:43.830Z Last Updated: 2025-11-03T21:53:29.387Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:H) Vendors: n/a Products: UEFI firmware for some Intel(R) Processors Problem Types: information disclosure, denial of service, CWE-20 Description: Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2024-21782 State: PUBLISHED Published: 2024-02-14T16:30:20.945Z Last Updated: 2025-05-12T15:06:26.760Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP, BIG-IQ Problem Types: CWE-78 Description: BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Contai
ions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K98606833
CVE ID: CVE-2024-21783 State: PUBLISHED Published: 2024-11-13T21:04:06.638Z Last Updated: 2024-11-14T19:47:14.554Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) VPL software Problem Types: escalation of privilege, CWE-190 Description: Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html
CVE ID: CVE-2024-21784 State: PUBLISHED Published: 2024-08-14T13:45:23.215Z Last Updated: 2024-08-19T16:52:04.555Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) IPP Cryptography software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01114.html
CVE ID: CVE-2024-21785 State: PUBLISHED Published: 2024-05-28T15:30:14.463Z Last Updated: 2025-02-13T17:33:19.226Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-489 Description: A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorized access. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TAL
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942 - https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942
CVE ID: CVE-2024-21786 State: PUBLISHED Published: 2024-11-21T14:41:19.212Z Last Updated: 2024-11-22T14:25:07.195Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: MC Technologies Products: MC LR Router Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1954
CVE ID: CVE-2024-21787 State: PUBLISHED Published: 2024-08-14T13:45:48.470Z Last Updated: 2024-08-14T14:56:03.898Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: BMRA software Problem Types: escalation of privilege, CWE-326 Description: Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00790.html
CVE ID: CVE-2024-21788 State: PUBLISHED Published: 2024-05-16T20:47:02.892Z Last Updated: 2024-08-29T20:27:13.856Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) GPA software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01067.html
CVE ID: CVE-2024-21789 State: PUBLISHED Published: 2024-02-14T16:30:24.980Z Last Updated: 2025-04-24T15:16:16.085Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-772 Description: When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000137270
CVE ID: CVE-2024-21791 State: PUBLISHED Published: 2024-05-22T18:05:23.307Z Last Updated: 2024-08-01T22:27:36.320Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2024-21792 State: PUBLISHED Published: 2024-05-16T20:46:57.208Z Last Updated: 2024-08-01T22:27:36.305Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Neural Compressor software Problem Types: information disclosure, CWE-367 Description: Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html
CVE ID: CVE-2024-21793 State: PUBLISHED Published: 2024-05-08T15:01:28.422Z Last Updated: 2025-09-18T19:52:06.787Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: BIG-IP Next Central Manager Problem Types: CWE-89 Description: An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000138732