Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47767 State: PUBLISHED Published: 2024-10-14T17:57:11.673Z Last Updated: 2024-10-15T15:36:11.946Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Enalean Products: tuleap Problem Types: CWE-280 Description: Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, users might see tracker names they should not have access to. Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue. Additional Analyst Notes: - CISA ADP Vulnrich
ise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-j342-v27q-329v - https://github.com/Enalean/tuleap/commit/16d9efccb2fad8e10343be2604e94c9058ef2c89 - https://github.com/Enalean/tuleap/commit/e5ce81279766115dc0f126a11d6b5065b5db7eec - https://github.com/Enalean/tuleap/commit/f89d7093d2c576ad5e2b35a6a096fcdaf563d1df - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=16d9efccb2fad8e10343be2604e94c9058ef2c89 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=e5ce81279766115dc0f126a11d6b5065b5db7eec - https://tuleap.net/p
//tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=e5ce81279766115dc0f126a11d6b5065b5db7eec - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=f89d7093d2c576ad5e2b35a6a096fcdaf563d1df - https://tuleap.net/plugins/tracker/?aid=39728
CVE ID: CVE-2024-47768 State: PUBLISHED Published: 2024-10-04T14:33:59.020Z Last Updated: 2024-10-04T16:02:58.471Z Vendors: Lif-Platforms Products: Lif-Auth-Server Problem Types: CWE-287 Description: Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the recovery email and entered the correct code. If the attacker knew the email of the target, they could supply the email and immediately prompt the server to update the password without ever needing the code. This issue has been patched in version 1.7.3. Additiona
the server to update the password without ever needing the code. This issue has been patched in version 1.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Lif-Platforms/Lif-Auth-Server/security/advisories/GHSA-hmv6-8fg8-7m6f - https://github.com/Lif-Platforms/Lif-Auth-Server/commit/8dbd7cad914a8b939451c652bfb716aa796f754e
CVE ID: CVE-2024-47769 State: PUBLISHED Published: 2024-10-04T14:45:41.123Z Last Updated: 2024-10-04T16:00:38.245Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: idurar Products: idurar-erp-crm Problem Types: CWE-22, CWE-23 Description: IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is accessible to an unauthenticated user. The user's input is directly appended to the join statement without additional checks. This allows an attacker to send URL encoded malicious payload. The directory structure can be escaped to rea
nal checks. This allows an attacker to send URL encoded malicious payload. The directory structure can be escaped to read system files by adding an encoded string (payload) at subpath location. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/idurar/idurar-erp-crm/security/advisories/GHSA-948g-2vm7-mfv7 - https://github.com/idurar/idurar-erp-crm/commit/949bc6fe31f3175c9e1864d30cf6c8110179ac14
CVE ID: CVE-2024-47770 State: PUBLISHED Published: 2025-02-03T21:34:06.742Z Last Updated: 2025-02-04T17:25:17.568Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: wazuh Products: wazuh Problem Types: CWE-269 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an attacker to do privilege escalation. In this case the attacker is able to view agent list on Wazuh dashboard with no privilege access. This issue has b
tion. In this case the attacker is able to view agent list on Wazuh dashboard with no privilege access. This issue has been addressed in release version 4.9.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-648q-8m78-5cwv
CVE ID: CVE-2024-47771 State: PUBLISHED Published: 2024-10-15T15:02:54.059Z Last Updated: 2024-10-15T17:28:19.064Z Vendors: element-hq Products: element-desktop Problem Types: CWE-200 Description: Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets. Addition
de to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/element-desktop/security/advisories/GHSA-963w-49j9-gxj6 - https://github.com/element-hq/element-desktop/commit/6c78684e84ba7f460aedba6f017760e2323fdf4b - https://github.com/element-hq/element-web/commit/63c8550791a0221189f495d6458fee7db601c789
CVE ID: CVE-2024-47772 State: PUBLISHED Published: 2024-10-07T20:50:33.324Z Last Updated: 2024-10-08T14:26:22.147Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: discourse Products: discourse Problem Types: CWE-79 Description: Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a maliciously crafted chat message and replying to it. This issue only affects sites with CSP disabled. This problem is patched in the latest version of Discourse. All users are advised to upgrade. Users unable to upgrade should ensure CSP is enabled on the forum. Users who do upgrade should also co
vised to upgrade. Users unable to upgrade should ensure CSP is enabled on the forum. Users who do upgrade should also consider enabling a CSP as well as a proactive measure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-67mh-xhmf-c56h - https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
CVE ID: CVE-2024-47773 State: PUBLISHED Published: 2024-10-08T18:01:14.063Z Last Updated: 2024-10-08T18:16:18.149Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: discourse Products: discourse Problem Types: CWE-610 Description: Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affects anonymous visitors of the site. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environme
upgrade. Users unable to upgrade should disable anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environment variable to a non-empty value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-58vv-9j8h-hw2v
CVE ID: CVE-2024-47774 State: PUBLISHED Published: 2024-12-11T19:15:18.259Z Last Updated: 2025-11-03T20:40:45.684Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer lea
FFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/ - https://github.com/github/securitylab-vulnerabilities/issues/1826 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch
CVE ID: CVE-2024-47775 State: PUBLISHED Published: 2024-12-11T19:15:44.607Z Last Updated: 2025-11-03T20:40:47.081Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains sufficient data before attempting to read from it, doing multiple GST_READ_UINT32_LE operations without performing boundary checks. This can lead to an OOB-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potenti
-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch - https://gstreamer.freedesktop.org/security/sa-2024-0027.html
CVE ID: CVE-2024-47776 State: PUBLISHED Published: 2024-12-11T19:16:04.573Z Last Updated: 2025-11-03T20:40:48.462Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch causes the comparison if (size < 4 + ncues * 24) to fail in some cases, allowing the subsequent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation
uent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation when clipping the chunk size based on upstream data size. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch - https://gstreamer.freedesktop.org/security/sa-2024-0027.html
CVE ID: CVE-2024-47777 State: PUBLISHED Published: 2024-12-11T19:16:33.169Z Last Updated: 2025-11-03T20:40:49.869Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is sufficient. If the buffer is too small, the function reads beyond its bounds. This vulnerability may result in reading 4 bytes out of the boundaries of the data buffer. This vulnerability is fixed in 1.24.10.
ability may result in reading 4 bytes out of the boundaries of the data buffer. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch - https://gstreamer.freedesktop.org/security/sa-2024-0027.html
CVE ID: CVE-2024-47778 State: PUBLISHED Published: 2024-12-11T19:16:58.215Z Last Updated: 2025-11-03T20:40:51.253Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory
in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch - https://gstreamer.freedesktop.org/security/sa-2024-0027.html
CVE ID: CVE-2024-47779 State: PUBLISHED Published: 2024-10-15T15:28:00.293Z Last Updated: 2024-11-12T16:07:45.332Z Vendors: element-hq Products: element-web Problem Types: CWE-200 Description: Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Note that despite superficial similarity to CVE-2024-47771, this is an entirely separate vulnerability, caused by a separate piece of code included only in
rity to CVE-2024-47771, this is an entirely separate vulnerability, caused by a separate piece of code included only in Element Web. Element Web and Element Desktop share most but not all, of their code and this vulnerability exists in the part of the code base which is not shared between the projects. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/element-hq/element-web/security/advisories/GHSA-3jm3-x98c-r34x - https://github.com/element-hq/element-web/commit/8d7f2b5c1301129a488d3597f3839bd74203ee62
CVE ID: CVE-2024-47780 State: PUBLISHED Published: 2024-10-08T17:57:21.523Z Last Updated: 2024-10-08T18:17:24.168Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: TYPO3 Products: typo3 Problem Types: CWE-863 Description: TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the prob
se pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/TYPO3/typo3/security/advisories/GHSA-rf5m-h8q9-9w6q - https://typo3.org/security/advisory/typo3-core-sa-2024-012
CVE ID: CVE-2024-47781 State: PUBLISHED Published: 2024-10-07T21:30:23.058Z Last Updated: 2024-10-08T14:13:28.705Z Vendors: miraheze Products: CreateWiki Problem Types: CWE-79 Description: CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWikiQueue, so a user can insert arbitrary HTML that is displayed in the request wiki queue when requesting a wiki. If a wiki creator comes across the XSS payload, their user session can be abused to retrieve deleted wiki requests, which typically contains private information. Likewise, this can also be abused on those with the ability to suppress requests to view sensiti
ns private information. Likewise, this can also be abused on those with the ability to suppress requests to view sensitive information. This issue has been patched with commit `693a220` and all users are advised to apply the patch. Users unable to upgrade should disable Javascript and/or prevent access to the vulnerable page (Special:RequestWikiQueue). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/CreateWiki/security/advisories/GHSA-h527-jh77-5g7j - https://github.com/miraheze/CreateWiki/commit/693a220f399ee7eb4d00e77c3c667e864b1bd306 - https://issue-tracker.miraheze.org/T12693
CVE ID: CVE-2024-47782 State: PUBLISHED Published: 2024-10-07T21:28:01.299Z Last Updated: 2024-10-08T14:11:43.995Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: miraheze Products: WikiDiscover Problem Types: CWE-79, CWE-80 Description: WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all wikis on the wiki farm. However, the special page does not make any effort to escape the wiki name or description. Therefore, if a wiki sets its name and/or description to an XSS payload, the XSS will execute whenever the wiki is shown on Special:WikiDiscover. This issue has been
ription to an XSS payload, the XSS will execute whenever the wiki is shown on Special:WikiDiscover. This issue has been patched with commit `2ce846dd93` and all users are advised to apply that patch. User unable to upgrade should block access to `Special:WikiDiscover`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/WikiDiscover/security/advisories/GHSA-wf48-rqx3-39mf - https://github.com/miraheze/WikiDiscover/commit/2ce846dd93ddb9ec86f7472c4d57fe71a09dc827 - https://issue-tracker.miraheze.org/T12697
CVE ID: CVE-2024-47783 State: PUBLISHED Published: 2024-11-12T12:49:47.188Z Last Updated: 2024-11-12T16:27:21.975Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: SIPORT Problem Types: CWE-732 Description: A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-064257.html
CVE ID: CVE-2024-47784 State: PUBLISHED Published: 2025-04-30T18:17:02.648Z Last Updated: 2025-04-30T20:04:47.051Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ABB Products: ANC, ANC-L, ANC-mini Problem Types: CWE-620 Description: Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch
CVE ID: CVE-2024-47789 State: PUBLISHED Published: 2024-10-04T12:43:45.390Z Last Updated: 2024-10-14T10:52:33.065Z Vendors: D3D Security Products: IP Camera D8801 Problem Types: CWE-319 Description: ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP packet leading to exposure of user credentials of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CIS
This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0314
CVE ID: CVE-2024-47790 State: PUBLISHED Published: 2024-10-04T12:46:35.369Z Last Updated: 2024-10-14T10:54:06.097Z Vendors: D3D Security Products: IP Camera D8801 Problem Types: CWE-862 Description: ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0314
CVE ID: CVE-2024-47791 State: PUBLISHED Published: 2024-12-06T18:16:07.652Z Last Updated: 2024-12-06T20:40:14.508Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ruijie Products: Reyee OS Problem Types: CWE-155 Description: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possible topics in Ruijie MQTT broker, and receive partial messages being sent to and from devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01
CVE ID: CVE-2024-47793 State: PUBLISHED Published: 2024-10-18T06:05:11.833Z Last Updated: 2024-10-18T16:32:09.295Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Kajitori Co.,Ltd Products: Exment Problem Types: CWE-79 Description: Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://exment.net/vulnerability-correspondence-version-6-1-5-and-5-0-12-released/ - https://exment.ne
nt: References: - https://exment.net/vulnerability-correspondence-version-6-1-5-and-5-0-12-released/ - https://exment.net/docs/#/weakness/20241010 - https://jvn.jp/en/jp/JVN74538317/