Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-50993 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:18:23.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_39/39.md
CVE ID: CVE-2024-50994 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:17:19.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, and ipv6_lan_length parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_36/36.md
CVE ID: CVE-2024-50995 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:17:54.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_40/40.md
CVE ID: CVE-2024-50996 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:13:22.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_37/37.md
CVE ID: CVE-2024-50997 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:12:54.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_43/43.md
CVE ID: CVE-2024-50998 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:16:37.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_service_port and openvpn_service_port_tun parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_44/44.md
CVE ID: CVE-2024-50999 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:16:09.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_38/38.md
CVE ID: CVE-2024-51000 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:15:38.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmode_an, and opmode_an_2 parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_35/35.md
CVE ID: CVE-2024-51001 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:15:09.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_41/41.md
CVE ID: CVE-2024-51002 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:46:46.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_42/42.md
CVE ID: CVE-2024-51003 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:45:37.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_49/49.md
CVE ID: CVE-2024-51004 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:57:28.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_51/51.md
CVE ID: CVE-2024-51005 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:59:32.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_50/50.md
CVE ID: CVE-2024-51006 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:00:28.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_46/46.md
CVE ID: CVE-2024-51007 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:56:32.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_54/54.md
CVE ID: CVE-2024-51008 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:56:05.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at wiz_dyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_53/53.md
CVE ID: CVE-2024-51009 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:01:18.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_47/47.md
CVE ID: CVE-2024-51010 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:44:00.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_48/48.md
CVE ID: CVE-2024-51011 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:42:08.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_52/52.md
CVE ID: CVE-2024-51012 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T16:02:00.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_45/45.md
CVE ID: CVE-2024-51013 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:39:40.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_64/64.md
CVE ID: CVE-2024-51014 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:54:13.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_56/56.md
CVE ID: CVE-2024-51015 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:39:18.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_62/62.md
CVE ID: CVE-2024-51016 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:53:56.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_58/58.md
CVE ID: CVE-2024-51017 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:39:00.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_59/59.md
CVE ID: CVE-2024-51018 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:38:37.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_60/60.md
CVE ID: CVE-2024-51019 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:38:18.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_61/61.md
CVE ID: CVE-2024-51020 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:38:00.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_63/63.md
CVE ID: CVE-2024-51021 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:41:19.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_57/57.md
CVE ID: CVE-2024-51022 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T15:53:19.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_55/55.md
CVE ID: CVE-2024-51023 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T20:30:41.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi1/my_vuln/blob/main/D-link4/vuln_42/42.md
CVE ID: CVE-2024-51024 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-05T19:59:47.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi1/my_vuln/blob/main/D-link4/vuln_43/43.md
CVE ID: CVE-2024-51026 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-12T18:10:32.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/BrotherOfJhonny/CVE-2024-51026_Overview
CVE ID: CVE-2024-51027 State: PUBLISHED Published: 2024-11-13T00:00:00 Last Updated: 2024-11-25T19:32:19.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi/networksafe.php via the province parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zty-1995/SmartGateway/blob/cd56e1d00c56589accddb63b465b31f6387b51c2/NBR800G_networksafe/README.md - https://gist.github.com/zty-1995/29464500cd474f70a78e23ca68791cdd
CVE ID: CVE-2024-51030 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-21T16:16:44.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html - https://github.com/vighneshnair7/CVE-2024-51030
CVE ID: CVE-2024-51031 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-20T22:56:12.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html - https://github.com/vighneshnair7/CVE-2024-51031
CVE ID: CVE-2024-51032 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-20T22:43:07.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html - https://github.com/Shree-Chandragiri/CVE-2024-51032
CVE ID: CVE-2024-51037 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-18T19:11:02.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://kodbox.com - https://github.com/kalcaddle/kodbox - https://www.tommonkey.cn/2024/11/13/CVE-2024-51037-Disclosed/
CVE ID: CVE-2024-51051 State: PUBLISHED Published: 2024-11-18T00:00:00 Last Updated: 2024-11-19T15:02:26.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/avscms/avscms/blob/main/include/config.local.php - https://binqqer.com/posts/CVE-2024-51051/
CVE ID: CVE-2024-51053 State: PUBLISHED Published: 2024-11-18T00:00:00 Last Updated: 2024-11-19T15:06:14.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulners.com/packetstorm/PACKETSTORM:173122 - https://binqqer.com/posts/CVE-2024-51053/
CVE ID: CVE-2024-51054 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-12T19:14:28.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Marriage%20Registration/Reflected%20Cross%20Site%20Scriptng%20o.pdf
CVE ID: CVE-2024-51055 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-13T21:04:45.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/havok89/Hoosk/issues/66