Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-32206 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T02:06:44.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms - http://wuzhicms.com - https://github.com/majic-banana/vulnerability/blob/main/POC/WUZHICMS4.1.0%20Stored%20Xss%20In%20Affiche%20Model.md
CVE ID: CVE-2024-32210 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:06:44.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gainsec.com/2024/04/28/cve-2024-32210-cve-2024-32211-cve-2024-32212-cve-2024-32213-lomag-integrator-ce-warehouse-management/
CVE ID: CVE-2024-32211 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-11-05T16:20:36.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensitive information via the UserClass.cs and Settings.cs components. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gainsec.com/2024/04/28/cve-2024-32210-cve-2024-32211-cve-2024-32212-cve-2024-32213-lomag-integrator-ce-warehouse-management/
CVE ID: CVE-2024-32212 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:06:44.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gainsec.com/2024/04/28/cve-2024-32210-cve-2024-32211-cve-2024-32212-cve-2024-32213-lomag-integrator-ce-warehouse-management/
CVE ID: CVE-2024-32213 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:06:44.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gainsec.com/2024/04/28/cve-2024-32210-cve-2024-32211-cve-2024-32212-cve-2024-32213-lomag-integrator-ce-warehouse-management/
CVE ID: CVE-2024-32228 State: PUBLISHED Published: 2024-07-01T00:00:00 Last Updated: 2024-08-02T02:06:44.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/10951
CVE ID: CVE-2024-32229 State: PUBLISHED Published: 2024-07-01T00:00:00 Last Updated: 2024-08-02T02:06:44.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/10950
CVE ID: CVE-2024-32230 State: PUBLISHED Published: 2024-07-01T00:00:00.000Z Last Updated: 2025-03-14T16:24:43.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/10952
CVE ID: CVE-2024-32231 State: PUBLISHED Published: 2024-08-15T00:00:00 Last Updated: 2024-11-22T20:58:52.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/stashapp - https://github.com/stashapp/stash - https://github.com/stashapp/stash/pull/4865
CVE ID: CVE-2024-32236 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-08-02T02:06:44.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cidengcc/cmseasy/issues/1
CVE ID: CVE-2024-32238 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-02T02:06:44.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.h3c.com/cn/Products_And_Solution/InterConnect/Products/Routers/Products/Enterprise/ER/ER8300G2-X/ - https://github.com/asdfjkl11/CVE-2024-32238/issues/1
CVE ID: CVE-2024-32254 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-11-06T14:50:03.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md
CVE ID: CVE-2024-32256 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-12-03T15:57:31.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md
CVE ID: CVE-2024-32258 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-02T02:06:44.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/TASEmulators/fceux/issues/727 - https://github.com/liyansong2018/CVE-2024-32258
CVE ID: CVE-2024-32268 State: PUBLISHED Published: 2024-04-29T00:00:00.000Z Last Updated: 2025-02-10T22:41:06.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kzLiu2017/Tuya_Cam_CVE_Doc/blob/main/U6N-CVE-Document.pdf
CVE ID: CVE-2024-32269 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-20T13:58:10.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Yonganda YAD-LOJ V3.0.561 allows a remote attacker to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kzLiu2017/Tuya_Cam_CVE_Doc/blob/main/YAD-LOJ-Camera.pdf
CVE ID: CVE-2024-32281 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formexecommand.md
CVE ID: CVE-2024-32282 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formexecommand_cmdi.md
CVE ID: CVE-2024-32283 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formexecommand_cmdi.md
CVE ID: CVE-2024-32285 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formaddUserName.md
CVE ID: CVE-2024-32286 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-10-25T20:10:35.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromVirtualSer.md
CVE ID: CVE-2024-32287 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:43.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromqossetting.md
CVE ID: CVE-2024-32288 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromwebExcptypemanFilter.md
CVE ID: CVE-2024-32290 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromAddressNat_page.md
CVE ID: CVE-2024-32291 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromNatlimit.md
CVE ID: CVE-2024-32292 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formexecommand_cmdi.md
CVE ID: CVE-2024-32293 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromDhcpListClient_page.md
CVE ID: CVE-2024-32299 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-11-05T19:03:02.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/fromWizardHandle.md
CVE ID: CVE-2024-32301 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-10-25T20:11:07.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/fromWizardHandle.md
CVE ID: CVE-2024-32302 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/fromWizardHandle.md
CVE ID: CVE-2024-32303 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V15.03.05.18/fromWizardHandle.md
CVE ID: CVE-2024-32305 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-11-06T15:34:24.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromWizardHandle.md
CVE ID: CVE-2024-32306 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.48/fromWizardHandle.md
CVE ID: CVE-2024-32307 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-09T14:51:50.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/fromWizardHandle.md
CVE ID: CVE-2024-32310 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/F/F1203/fromWizardHandle.md
CVE ID: CVE-2024-32311 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formWanParameterSetting.md
CVE ID: CVE-2024-32312 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/F/F1203/formWanParameterSetting.md
CVE ID: CVE-2024-32313 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the adslPwd parameter of the formWanParameterSetting function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formWanParameterSetting.md
CVE ID: CVE-2024-32314 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC500/formexecommand_cmdi.md
CVE ID: CVE-2024-32315 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formWanParameterSetting.md
CVE ID: CVE-2024-32316 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-16T15:25:33.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC500/fromDhcpListClient_list1.md
CVE ID: CVE-2024-32317 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-08T20:39:54.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10/V16.03.10.13/formWanParameterSetting.md
CVE ID: CVE-2024-32318 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC500/fromSetVlanInfo_vlan.md
CVE ID: CVE-2024-32320 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC500/formSetTimeZone.md
CVE ID: CVE-2024-32323 State: PUBLISHED Published: 2025-07-17T00:00:00.000Z Last Updated: 2025-07-24T20:16:06.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information via the if parameter in hcit.project.rte.agents.UploadImages.class. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/night-0p/anh/blob/main/Haichang%20OA/SQL1.md - https://gist.github.com/night-0p/92b5ad270ac426b0992e2c97dc7b1471
CVE ID: CVE-2024-32324 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-08-02T02:06:44.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpn_client_ip variable of the config_vpn_pptp function in rc program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/teamoever/CVE/blob/main/LBT-T300-T400.md
CVE ID: CVE-2024-32325 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:44.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/144.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_ssid/README.md
CVE ID: CVE-2024-32326 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:44.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/144.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_key/README.md