Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s.trac.wordpress.org/browser/shortcodes-ultimate/trunk/includes/shortcodes/feed.php#L78 - https://plugins.trac.wordpress.org/changeset/3026377/
CVE ID: CVE-2024-0793 State: PUBLISHED Published: 2024-11-17T10:45:50.457Z Last Updated: 2024-11-17T16:16:49.847Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4.12 Problem Types: CWE-20 Description: A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0741 - https://access.redhat.com/errata/RH
SA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0741 - https://access.redhat.com/errata/RHSA-2024:1267 - https://access.redhat.com/security/cve/CVE-2024-0793 - https://bugzilla.redhat.com/show_bug.cgi?id=2214402 - https://github.com/openshift/kubernetes/pull/1876
CVE ID: CVE-2024-0794 State: PUBLISHED Published: 2024-02-20T17:23:10.800Z Last Updated: 2024-10-28T20:00:48.665Z Vendors: HP Inc. Products: Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers Description: Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to Remote Code Execution due to buffer overflow when rendering fonts embedded in a PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_10174031-10174074-16/
CVE ID: CVE-2024-0795 State: PUBLISHED Published: 2024-03-02T21:16:46.411Z Last Updated: 2024-08-15T18:40:49.652Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-284 Description: If an attacked was given access to an instance with the admin or manager role there is no backend authentication that would prevent the attacked from creating a new user with an `admin` role and then be able to use this new account to have elevated privileges on the instance Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/f69e3307-7b44-4776-ac60-29
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/f69e3307-7b44-4776-ac60-2990990723ec - https://github.com/mintplex-labs/anything-llm/commit/9a237db3d1f66cdbcf5079599258f5fb251c5564
CVE ID: CVE-2024-0796 State: PUBLISHED Published: 2024-02-05T21:21:43.887Z Last Updated: 2024-08-01T18:18:18.857Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.1. This is due to missing or incorrect nonce validation on several functions corresponding to AJAX actions. This makes
6.1. This is due to missing or incorrect nonce validation on several functions corresponding to AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5069fbc4-b3c4-4c0b-892c-2c83f35dc2fe?source=cve - https://plugins.trac.wordpress.org/changeset/3029488/profit-products-tables-for-woocommerce/trunk?contextall=1&old=3005088&old_path=%2Fprofit-products-tables-for-woocommerce%2Ftrunk
CVE ID: CVE-2024-0797 State: PUBLISHED Published: 2024-02-05T21:21:32.718Z Last Updated: 2025-05-15T19:46:42.981Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Problem Types: CWE-862 Missing Authorization Description: The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 1.0.6.1. This makes it possible for subscribers and higher to execute f
functions in all versions up to, and including, 1.0.6.1. This makes it possible for subscribers and higher to execute functions intended for admin use. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a94841f-b1dd-44f4-b7a1-65a9fdf7b18d?source=cve - https://plugins.trac.wordpress.org/changeset/3029488/profit-products-tables-for-woocommerce/trunk?contextall=1&old=3005088&old_path=%2Fprofit-products-tables-for-woocommerce%2Ftrunk
CVE ID: CVE-2024-0798 State: PUBLISHED Published: 2024-02-25T16:42:19.494Z Last Updated: 2024-08-27T20:43:58.659Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-272 Description: A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'. Despite the intended restriction that prevents 'default' role users from deleting admin-uploaded documents, an attacker can exploit this vulnerability by sending a crafted DELETE request to the /api/system/remove-document endpoint. This vulnerability is due to imprope
ty by sending a crafted DELETE request to the /api/system/remove-document endpoint. This vulnerability is due to improper access control checks, enabling unauthorized document deletion and potentially leading to loss of data integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/607f03a0-ab4d-4905-b253-3d28bbbd363c - https://github.com/mintplex-labs/anything-llm/commit/d5cde8b7c27a47ab45b05b441db16751537f1733
CVE ID: CVE-2024-0799 State: PUBLISHED Published: 2024-03-13T18:57:51.441Z Last Updated: 2024-08-01T18:18:18.612Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Arcserve Products: Unified Data Protection Problem Types: CWE-287 Description: An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-07
CVE ID: CVE-2024-0800 State: PUBLISHED Published: 2024-03-13T19:03:04.017Z Last Updated: 2024-08-01T18:18:18.806Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Arcserve Products: Unified Data Protection Problem Types: CWE-434 Description: A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-07
CVE ID: CVE-2024-0801 State: PUBLISHED Published: 2024-03-13T19:04:47.968Z Last Updated: 2024-08-15T16:36:30.654Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Arcserve Products: Unified Data Protection Description: A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2024-07
CVE ID: CVE-2024-0802 State: PUBLISHED Published: 2024-03-14T23:57:07.390Z Last Updated: 2024-08-01T18:18:18.584Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC-Q Series Q03UDECPU, MELSEC-Q Series Q04UDEHCPU, MELSEC-Q Series Q06UDEHCPU, MELSEC-Q Series Q10UDEHCPU, MELSEC-Q Series Q13UDEHCPU, MELSEC-Q Series Q20UDEHCPU, MELSEC-Q Series Q26UDEHCPU, MELSEC-Q Series Q50UDEHCPU, MELSEC-Q Series Q100UDEHCPU, MELSEC-Q Series Q03UDVCPU, MELSEC-Q Series Q04UDVCPU, MELSEC-Q Series Q06UDVCPU, MELSEC-Q Series Q13UDVCPU, MELSEC-Q Series Q26UDVCPU, MELSEC-Q Series Q04UDPVCPU, MELSEC-Q Series Q06UDPVCPU, MELSEC-Q Series Q
Q Series Q13UDVCPU, MELSEC-Q Series Q26UDVCPU, MELSEC-Q Series Q04UDPVCPU, MELSEC-Q Series Q06UDPVCPU, MELSEC-Q Series Q13UDPVCPU, MELSEC-Q Series Q26UDPVCPU, MELSEC-L Series L02CPU, MELSEC-L Series L06CPU, MELSEC-L Series L26CPU, MELSEC-L Series L02CPU-P, MELSEC-L Series L06CPU-P, MELSEC-L Series L26CPU-P, MELSEC-L Series L26CPU-BT, MELSEC-L Series L26CPU-PBT Problem Types: CWE-468 Description: Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target product by sending a specially crafted packet.
information from a target product or execute malicious code on a target product by sending a specially crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf - https://jvn.jp/vu/JVNVU99690199/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14
CVE ID: CVE-2024-0803 State: PUBLISHED Published: 2024-03-14T23:59:20.916Z Last Updated: 2024-08-27T19:56:00.797Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC-Q Series Q03UDECPU, MELSEC-Q Series Q04UDEHCPU, MELSEC-Q Series Q06UDEHCPU, MELSEC-Q Series Q10UDEHCPU, MELSEC-Q Series Q13UDEHCPU, MELSEC-Q Series Q20UDEHCPU, MELSEC-Q Series Q26UDEHCPU, MELSEC-Q Series Q50UDEHCPU, MELSEC-Q Series Q100UDEHCPU, MELSEC-Q Series Q03UDVCPU, MELSEC-Q Series Q04UDVCPU, MELSEC-Q Series Q06UDVCPU, MELSEC-Q Series Q13UDVCPU, MELSEC-Q Series Q26UDVCPU, MELSEC-Q Series Q04UDPVCPU, MELSEC-Q Series Q06UDPVCPU, MELSEC-Q Series Q
Q Series Q13UDVCPU, MELSEC-Q Series Q26UDVCPU, MELSEC-Q Series Q04UDPVCPU, MELSEC-Q Series Q06UDPVCPU, MELSEC-Q Series Q13UDPVCPU, MELSEC-Q Series Q26UDPVCPU, MELSEC-L Series L02CPU, MELSEC-L Series L06CPU, MELSEC-L Series L26CPU, MELSEC-L Series L02CPU-P, MELSEC-L Series L06CPU-P, MELSEC-L Series L26CPU-P, MELSEC-L Series L26CPU-BT, MELSEC-L Series L26CPU-PBT Problem Types: CWE-190 Description: Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. Additional Analyst Notes: - CVE Program Contain
alicious code on a target product by sending a specially crafted packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-024_en.pdf - https://jvn.jp/vu/JVNVU99690199/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-14
CVE ID: CVE-2024-0804 State: PUBLISHED Published: 2024-01-23T23:53:01.190Z Last Updated: 2025-05-22T17:33:41.380Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1515137 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje
p_23.html - https://crbug.com/1515137 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0805 State: PUBLISHED Published: 2024-01-23T23:53:00.938Z Last Updated: 2025-06-20T19:06:30.663Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1514925 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/me
- https://crbug.com/1514925 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0806 State: PUBLISHED Published: 2024-01-23T23:53:00.766Z Last Updated: 2025-06-20T19:07:11.754Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1505176 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQ
ug.com/1505176 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0807 State: PUBLISHED Published: 2024-01-23T23:52:59.012Z Last Updated: 2025-06-20T19:07:53.257Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1505080 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4
/1505080 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0808 State: PUBLISHED Published: 2024-01-23T23:52:59.855Z Last Updated: 2025-05-30T14:18:00.339Z Vendors: Google Products: Chrome Problem Types: Integer underflow Description: Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1504936 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4I
1504936 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0809 State: PUBLISHED Published: 2024-01-23T23:53:01.615Z Last Updated: 2025-05-15T14:42:46.828Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1497985 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes
- https://crbug.com/1497985 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0810 State: PUBLISHED Published: 2024-01-23T23:53:00.072Z Last Updated: 2025-05-22T17:31:09.326Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1496250 - https://lists.fedoraproject.org/
log.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1496250 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0811 State: PUBLISHED Published: 2024-01-23T23:53:01.437Z Last Updated: 2025-06-16T18:31:56.329Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1494490 - https://lists.fedoraproject.org/arc
.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1494490 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/ - http://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html
CVE ID: CVE-2024-0812 State: PUBLISHED Published: 2024-01-23T23:52:59.348Z Last Updated: 2025-05-30T14:18:09.219Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1484394 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedora
esktop_23.html - https://crbug.com/1484394 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0813 State: PUBLISHED Published: 2024-01-23T23:53:00.522Z Last Updated: 2025-06-20T19:08:31.967Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1477151 - https://lists.fedoraproject.org/archives/list/packag
le-channel-update-for-desktop_23.html - https://crbug.com/1477151 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0814 State: PUBLISHED Published: 2024-01-23T23:53:00.357Z Last Updated: 2025-05-30T14:17:54.801Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://crbug.com/1463935 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSG
crbug.com/1463935 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE ID: CVE-2024-0815 State: PUBLISHED Published: 2024-03-07T03:13:50.948Z Last Updated: 2025-02-13T17:27:27.221Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: paddlepaddle Products: paddlepaddle/paddle Problem Types: CWE-78 Description: Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350
CVE ID: CVE-2024-0816 State: PUBLISHED Published: 2024-05-21T01:29:00.883Z Last Updated: 2024-08-01T18:18:18.882Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Zyxel Products: DX3300-T1 firmware Problem Types: CWE-120 Description: The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-ove
tainer: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024