Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23539 State: PUBLISHED Published: 2024-03-29T14:36:57.919Z Last Updated: 2025-02-13T17:39:46.405Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Apache Software Foundation Products: Apache Fineract Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/FINERACT/Apache+Fineract+Security+Report
VE Program Container: References: - https://cwiki.apache.org/confluence/display/FINERACT/Apache+Fineract+Security+Report - https://lists.apache.org/thread/g8sv1gnjv716lx2h89jbvjdgtrrjmy7h - http://www.openwall.com/lists/oss-security/2024/03/29/3
CVE ID: CVE-2024-23540 State: PUBLISHED Published: 2024-04-03T16:32:51.950Z Last Updated: 2024-08-01T23:06:25.219Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: HCL Software Products: BigFix Inventory Description: The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112015
CVE ID: CVE-2024-23550 State: PUBLISHED Published: 2024-02-03T05:32:58.107Z Last Updated: 2025-06-03T18:37:19.443Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: Launch / DevOps Deploy Description: HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110334
CVE ID: CVE-2024-23551 State: PUBLISHED Published: 2024-05-07T21:46:54.285Z Last Updated: 2024-08-01T23:06:25.195Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: BigFix Compliance Problem Types: CWE-522 Description: Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe consequences such as data breaches, unauthorized data manipulation, and compromised system integrity. Additional Analyst Notes: - CI
such as data breaches, unauthorized data manipulation, and compromised system integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112963
CVE ID: CVE-2024-23553 State: PUBLISHED Published: 2024-02-02T21:03:33.226Z Last Updated: 2025-06-03T18:36:43.190Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: HCL Software Products: BigFix Platform Description: A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209
CVE ID: CVE-2024-23554 State: PUBLISHED Published: 2024-05-17T23:31:39.585Z Last Updated: 2024-08-01T23:06:25.219Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: HCL Software Products: BigFix Platform Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140
CVE ID: CVE-2024-23556 State: PUBLISHED Published: 2024-05-17T23:40:50.064Z Last Updated: 2024-10-27T13:31:28.117Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HCL Software Products: BigFix Platform Description: SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140
CVE ID: CVE-2024-23557 State: PUBLISHED Published: 2024-04-18T18:21:18.690Z Last Updated: 2024-08-07T18:12:10.339Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Connections Description: HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112488
CVE ID: CVE-2024-23558 State: PUBLISHED Published: 2024-04-15T21:00:12.401Z Last Updated: 2024-11-01T18:35:31.536Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: DevOps Deploy / Launch Description: HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111923
CVE ID: CVE-2024-23559 State: PUBLISHED Published: 2024-04-15T17:31:17.734Z Last Updated: 2024-12-04T16:46:26.331Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: DevOps Deploy / Launch Description: HCL DevOps Deploy / Launch is generating an obsolete HTTP header. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111924
CVE ID: CVE-2024-23560 State: PUBLISHED Published: 2024-04-15T19:22:57.295Z Last Updated: 2024-11-06T21:13:17.053Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: HCL Software Products: DevOps Deploy / Launch Description: HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111925
CVE ID: CVE-2024-23561 State: PUBLISHED Published: 2024-04-15T20:20:51.157Z Last Updated: 2024-11-04T21:16:41.030Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DevOps Deploy / Launch Description: HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111926
CVE ID: CVE-2024-23562 State: PUBLISHED Published: 2024-07-08T15:57:08.805Z Last Updated: 2024-10-23T22:25:56.279Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Domino Server Description: A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthenticated attacker could exploit this vulnerability to obtain information to launch further attacks against the affected system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116923
CVE ID: CVE-2024-23563 State: PUBLISHED Published: 2025-02-12T13:47:51.296Z Last Updated: 2025-02-12T15:22:22.974Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: Connections Docs Problem Types: CWE-200 Description: HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119097
CVE ID: CVE-2024-23576 State: PUBLISHED Published: 2024-05-13T21:28:44.325Z Last Updated: 2024-08-01T23:06:25.300Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: HCL Software Products: Commerce Description: Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112907
CVE ID: CVE-2024-23579 State: PUBLISHED Published: 2024-05-28T21:25:18.110Z Last Updated: 2024-08-01T23:06:25.276Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: DRYiCE Optibot Reset Station Description: HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113496
CVE ID: CVE-2024-23580 State: PUBLISHED Published: 2024-05-28T21:29:15.698Z Last Updated: 2024-08-01T23:06:25.271Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: DRYiCE Optibot Reset Station Description: HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to recover some or all encrypted values. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113496
CVE ID: CVE-2024-23583 State: PUBLISHED Published: 2024-05-17T23:06:36.167Z Last Updated: 2024-08-01T23:06:25.252Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: BigFix Platform Problem Types: CWE-522 Description: An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113140
CVE ID: CVE-2024-23584 State: PUBLISHED Published: 2024-04-08T23:05:11.528Z Last Updated: 2025-03-13T13:26:03.706Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: BigFix Enterprise Suite Asset Discovery Description: The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112264
CVE ID: CVE-2024-23586 State: PUBLISHED Published: 2024-09-27T21:20:29.383Z Last Updated: 2024-10-04T13:56:37.356Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Nomad server on Domino Problem Types: CWE-613 Description: HCL Nomad is susceptible to an insufficient session expiration vulnerability. Under certain circumstances, an unauthenticated attacker could obtain old session information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0115264
CVE ID: CVE-2024-23588 State: PUBLISHED Published: 2024-07-05T13:08:46.782Z Last Updated: 2024-10-30T17:49:03.929Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: HCL Software Products: Nomad server on Domino Description: HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE ID: CVE-2024-23589 State: PUBLISHED Published: 2025-05-30T15:36:13.985Z Last Updated: 2025-05-30T15:57:28.013Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: HCL Glovius Cloud Problem Types: CWE-328 Description: Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dictionary attacks efficiently using modern hardware such as GPUs or ASICs Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0121015
CVE ID: CVE-2024-23590 State: PUBLISHED Published: 2024-11-04T09:27:06.050Z Last Updated: 2024-11-05T14:50:24.558Z Vendors: Apache Software Foundation Products: Apache Kylin Problem Types: CWE-384 Description: Session Fixation vulnerability in Apache Kylin. This issue affects Apache Kylin: from 2.0.0 through 4.x. Users are recommended to upgrade to version 5.0.0 or above, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/7161154h0k6zygr9917qq0g95p39szml
CVE ID: CVE-2024-23591 State: PUBLISHED Published: 2024-02-16T16:17:58.614Z Last Updated: 2025-07-23T14:23:24.383Z Severity: LOW (CVSS 2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: Lenovo Products: ThinkSystem SR670 V2 Problem Types: CWE-1269 Description: ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem sign
configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-150020
CVE ID: CVE-2024-23592 State: PUBLISHED Published: 2024-04-05T20:46:20.996Z Last Updated: 2024-09-06T20:09:15.535Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Synaptics Fingerprint Readers Problem Types: CWE-358 Description: An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-155804
CVE ID: CVE-2024-23593 State: PUBLISHED Published: 2024-04-15T18:01:13.650Z Last Updated: 2024-08-01T23:06:25.336Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Windows 7 and 8 PC Preloads Problem Types: CWE-1284 Description: A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-132277
CVE ID: CVE-2024-23594 State: PUBLISHED Published: 2024-04-15T18:01:23.230Z Last Updated: 2024-09-06T22:07:46.396Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Windows 7 and 8 PC Preloads Problem Types: CWE-121 Description: A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-132277
CVE ID: CVE-2024-23595 State: REJECTED Published: N/A Last Updated: 2024-06-07T18:16:38.723Z Description: No description available.
CVE ID: CVE-2024-23597 State: PUBLISHED Published: 2024-05-01T13:00:05.062Z Last Updated: 2024-08-01T23:06:25.320Z Vendors: TvRock Products: TvRock Problem Types: Cross-site request forgery (CSRF) Description: Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations may be performed. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN24683352/
CVE ID: CVE-2024-23599 State: PUBLISHED Published: 2024-09-16T16:38:40.858Z Last Updated: 2025-11-03T21:53:46.998Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Seamless Firmware Updates for some IntelÂ® reference platforms Problem Types: denial of service, CWE-362 Description: Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2024-23600 State: PUBLISHED Published: 2024-08-01T16:55:22.291Z Last Updated: 2024-10-31T19:02:23.103Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Ping Identity Products: PingIDM Problem Types: CWE-20 Description: Improper Input Validation of query search results for private field data in PingIDM (Query Filter module) allows for a potentially efficient brute forcing approach leading to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://backstage.forgerock.com/knowledge/kb/article/a95212747 - https://backstage.forgerock.com/docs/idcloud/latest/release-notes/regular-channel-cha
m/knowledge/kb/article/a95212747 - https://backstage.forgerock.com/docs/idcloud/latest/release-notes/regular-channel-changelog.html#changed_functionality
CVE ID: CVE-2024-23601 State: PUBLISHED Published: 2024-05-28T15:30:13.904Z Last Updated: 2025-02-13T17:39:48.000Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-345 Description: A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1943 - https://community
Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1943 - https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003ycL2AQ/sa00039 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1943
CVE ID: CVE-2024-23603 State: PUBLISHED Published: 2024-02-14T16:30:24.259Z Last Updated: 2024-08-01T23:06:25.301Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-89 Description: An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000138047
CVE ID: CVE-2024-23604 State: PUBLISHED Published: 2024-03-18T07:26:06.510Z Last Updated: 2025-03-27T19:42:26.596Z Vendors: unclebob Products: FitNesse Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with specially crafted multiple parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/unclebob/fitnesse - http://fitnesse.org/FitNesseDownload - https://github.com/unclebob/fitnesse/blob/master/SECURI
b.com/unclebob/fitnesse - http://fitnesse.org/FitNesseDownload - https://github.com/unclebob/fitnesse/blob/master/SECURITY.md - https://jvn.jp/en/jp/JVN94521208/
CVE ID: CVE-2024-23605 State: PUBLISHED Published: 2024-02-26T16:07:50.896Z Last Updated: 2025-11-04T18:28:48.752Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: llama.cpp Products: llama.cpp Problem Types: CWE-190 Description: A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1916
CVE ID: CVE-2024-23606 State: PUBLISHED Published: 2024-02-20T15:29:31.412Z Last Updated: 2025-11-04T18:28:49.927Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Biosig Project Products: libbiosig Problem Types: CWE-131 Description: An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1925
CVE ID: CVE-2024-23607 State: PUBLISHED Published: 2024-02-14T16:30:20.564Z Last Updated: 2024-08-01T23:06:25.258Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: F5OS - Appliance, F5OS - Chassis Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000132800