Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33780 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:36:04.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/SEGV-SlientPprf-3
CVE ID: CVE-2024-33781 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-10-25T19:11:42.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/stack-buffer-overflow-octetStream
CVE ID: CVE-2024-33782 State: PUBLISHED Published: 2024-05-07T00:00:00.000Z Last Updated: 2025-03-27T14:37:58.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/stack-buffer-overflow-OTExtensionWithMatrix
CVE ID: CVE-2024-33783 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:36:04.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/SEGV-SlientPprf
CVE ID: CVE-2024-33786 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T02:36:04.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jiankeguyue/VulnerabilityReport/blob/main/zhongcheng_kexin_ticketing_management_platform.md
CVE ID: CVE-2024-33787 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-06T15:01:35.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hengan Weighing Management Information Query Platform 2019-2021 53.25 was discovered to contain a SQL injection vulnerability via the tuser_Number parameter at search_user.aspx. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jiankeguyue/VulnerabilityReport/blob/main/hengan_weighing_management_information_query_platform.md
CVE ID: CVE-2024-33788 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:36:04.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ymkyu/CVE/tree/main/CVE-2024-33788
CVE ID: CVE-2024-33789 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T02:36:04.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ymkyu/CVE/tree/main/CVE-2024-33789
CVE ID: CVE-2024-33791 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T02:36:04.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the getTimeZone function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ymkyu/CVE/tree/main/CVE-2024-33791
CVE ID: CVE-2024-33792 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T02:36:04.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ymkyu/CVE/tree/main/CVE-2024-33792
CVE ID: CVE-2024-33793 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T02:36:04.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ymkyu/CVE/tree/main/CVE-2024-33793
CVE ID: CVE-2024-33799 State: PUBLISHED Published: 2024-05-28T15:46:40.588Z Last Updated: 2025-02-13T15:52:46.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2018.pdf
CVE ID: CVE-2024-33800 State: PUBLISHED Published: 2024-05-28T15:47:31.694Z Last Updated: 2025-02-13T15:52:46.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2015.pdf
CVE ID: CVE-2024-33801 State: PUBLISHED Published: 2024-05-28T15:48:22.517Z Last Updated: 2025-02-13T15:52:47.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2017.pdf
CVE ID: CVE-2024-33802 State: PUBLISHED Published: 2024-05-28T15:49:09.545Z Last Updated: 2025-02-13T15:52:47.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2014.pdf
CVE ID: CVE-2024-33803 State: PUBLISHED Published: 2024-05-28T15:50:00.259Z Last Updated: 2025-02-13T15:52:48.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2011.pdf
CVE ID: CVE-2024-33804 State: PUBLISHED Published: 2024-05-28T15:50:22.900Z Last Updated: 2025-02-13T15:52:49.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2016.pdf
CVE ID: CVE-2024-33805 State: PUBLISHED Published: 2024-05-28T15:50:45.809Z Last Updated: 2025-02-13T15:52:49.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2013.pdf
CVE ID: CVE-2024-33806 State: PUBLISHED Published: 2024-05-28T15:51:29.163Z Last Updated: 2025-02-13T15:52:50.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2012.pdf
CVE ID: CVE-2024-33807 State: PUBLISHED Published: 2024-05-28T15:51:52.990Z Last Updated: 2025-02-13T15:52:50.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2019.pdf
CVE ID: CVE-2024-33808 State: PUBLISHED Published: 2024-05-28T15:52:38.753Z Last Updated: 2025-02-13T15:52:51.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2020.pdf
CVE ID: CVE-2024-33809 State: PUBLISHED Published: 2024-05-24T14:53:21.286Z Last Updated: 2025-03-13T14:38:44.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pingcap/tidb/issues/52159 - https://gist.github.com/GaranR/f17b53fe3dd0a834c3acd288ed19b622
CVE ID: CVE-2024-33818 State: PUBLISHED Published: 2024-05-10T16:39:27.972Z Last Updated: 2025-03-27T15:27:58.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40rajput.thakur/insecure-direct-object-references-cve-2024-33818-86785aa8c969
CVE ID: CVE-2024-33819 State: PUBLISHED Published: 2024-05-10T17:00:27.851Z Last Updated: 2025-02-13T15:52:53.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Globitel KSA SpeechLog v8.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Save Query function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40rajput.thakur/speechlog-v-8-1-stored-cross-site-scripting-cve-2024-33819-1b1164fb0ecd
CVE ID: CVE-2024-33820 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:42:59.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they exploit the length of the wlan_ssid field triggers the overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Swind1er/ee095fbfe13f77a5b45b39a5aa82bd17
CVE ID: CVE-2024-33829 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:42:59.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=updateWebCache. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xyaly163/cms/blob/main/1.md
CVE ID: CVE-2024-33830 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:42:58.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xyaly163/cms/blob/main/2.md
CVE ID: CVE-2024-33831 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:42:59.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/YMFE/yapi/issues/2745
CVE ID: CVE-2024-33832 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:42:59.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /index.php?c=api&method=get_link_info. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/helloxz/onenav/issues/186
CVE ID: CVE-2024-33835 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:42:59.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/isBigChen/iot/blob/main/tenda/formSetSafeWanWebMan.md
CVE ID: CVE-2024-33836 State: PUBLISHED Published: 2024-06-19T00:00:00 Last Updated: 2024-08-02T02:42:58.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php. In version 6.X, the method `JmarketplaceproductModuleFrontController::init()` and in version 8.X, the method `JmarketplaceSellerproductModuleFrontController::init()` allow upload of .php files, which will lead to a critical vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/friends-of-presta/security-advisories/
CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-jamarketplace.md
CVE ID: CVE-2024-33844 State: PUBLISHED Published: 2024-05-03T00:00:00.000Z Last Updated: 2025-03-13T20:34:02.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT command with a wrong MAV_MISSION_TYPE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://anafi.com - http://nvd-cwe-other.com - https://forum.developer.parrot.com/t/cve-2024-33844-bugs-in-anafi-thermal-usa-firmware/22501 - https://forum.developer.parrot.com/t/cv
developer.parrot.com/t/cve-2024-33844-bugs-in-anafi-thermal-usa-firmware/22501 - https://forum.developer.parrot.com/t/cve-2024-33844-bugs-in-anafi-thermal-usa-firmware/22501/1
CVE ID: CVE-2024-33847 State: PUBLISHED Published: 2024-06-24T13:56:48.723Z Last Updated: 2025-05-04T09:05:12.910Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extra_attr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file - f2fs_io setflags compression /mnt/f2fs/file - dd if=/dev/zero of=/mnt/f2fs/file bs=4k count=4 - f2fs_io release_cblocks /mnt/f2fs/file - truncate -s 8192 /mnt/f2fs/file - umount /mnt/f2fs - fsck.f2fs /dev/vdb [ASSERT] (fsck_chk_inode_blk:1256) -
f2fs/file - truncate -s 8192 /mnt/f2fs/file - umount /mnt/f2fs - fsck.f2fs /dev/vdb [ASSERT] (fsck_chk_inode_blk:1256) --> ino: 0x5 has i_blocks: 0x00000002, but has 0x3 blocks [FSCK] valid_block_count matching with CP [Fail] [0x4, 0x5] [FSCK] other corrupted bugs [Fail] The reason is: partial truncation assume compressed inode has reserved blocks, after partial truncation, valid block count may change w/o .i_blocks and .total_valid_block_count update, result in corruption. This patch only allow cluster size aligned truncation on released compress inode for fixing. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b8962c
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b8962cf98595d1ec62f40f23667de830567ec8bc - https://git.kernel.org/stable/c/8acae047215024d1ac499b3c8337ef1b952f160b - https://git.kernel.org/stable/c/3ccf5210dc941a7aa0180596ac021568be4d35ec - https://git.kernel.org/stable/c/9f9341064a9b5246a32a7fe56b9f80c6f7f3c62d - https://git.kernel.org/stable/c/5268241b41b1c5d0acca75e9b97d4fd719251c8c - https://git.kernel.org/stable/c/29ed2b5dd521ce7c5d8466cd70bf0cc9d07afeee
CVE ID: CVE-2024-33848 State: PUBLISHED Published: 2024-09-16T16:38:37.034Z Last Updated: 2024-09-16T17:43:38.355Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) RAID Web Console software Problem Types: denial of service, CWE-248 Description: Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html
CVE ID: CVE-2024-33849 State: PUBLISHED Published: 2024-05-28T15:22:07.680Z Last Updated: 2025-02-13T15:52:53.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ci-solution.com/produkte/ps-out-of-office.html - https://www.syss.de/pentest-blog/rechteausweitung-durch-unsichere-standardkonfiguration-im-ci-out-of-office-manager-syss-2024-013
CVE ID: CVE-2024-33850 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-11-21T20:04:23.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2024-33851 State: PUBLISHED Published: 2024-04-27T00:00:00 Last Updated: 2024-11-04T15:09:12.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition. (This is related to phpecc/phpecc on GitHub, and the Matyas Danter ECC library.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/paragonie/phpecc/releases/tag/v2.0.1
CVE ID: CVE-2024-33852 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-23T16:36:49.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3744
CVE ID: CVE-2024-33853 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-23T16:37:07.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3744
CVE ID: CVE-2024-33854 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-27T19:10:58.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3744