Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-48705 State: PUBLISHED Published: 2025-09-02T00:00:00.000Z Last Updated: 2025-09-02T19:35:31.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "set_sys_adm" function of the "adm.cgi" binary, and is due to improper santization of the user provided "newpass" field Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://wavlink.com - https://github.com/L41KAA/CVE-2024-48705
CVE ID: CVE-2024-48706 State: PUBLISHED Published: 2024-10-22T00:00:00.000Z Last Updated: 2025-03-25T16:45:16.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within the (a) managemessage.php file and (b) managetask.php file respectively. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/Collabtive_StoredXSS/blob/master/vulnerabilities/XSS2.md
CVE ID: CVE-2024-48707 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-22T18:45:06.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/Collabtive_StoredXSS/blob/master/vulnerabilities/XSS3.md
CVE ID: CVE-2024-48708 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-22T18:46:17.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action = add/edit and in (b) file admin.php under action = adduser/edituser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/Collabtive_StoredXSS/blob/master/vulnerabilities/XSS4.md
CVE ID: CVE-2024-48709 State: PUBLISHED Published: 2024-10-21T00:00:00.000Z Last Updated: 2025-11-12T21:02:05.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/PHP_CodeAstro_Stored_XSS/blob/master/vulnerabilities/XSS_2.md
CVE ID: CVE-2024-48710 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T17:05:37.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sezangel/IOT-vul/blob/main/TPlink/TL-WDR7660/1/readme.md
CVE ID: CVE-2024-48712 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T17:01:19.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TP-Link TL-WDR7660 1.0, the rtRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sezangel/IOT-vul/blob/main/TPlink/TL-WDR7660/3/readme.md
CVE ID: CVE-2024-48713 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T17:04:21.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TP-Link TL-WDR7660 1.0, the wacWhitelistJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sezangel/IOT-vul/blob/main/TPlink/TL-WDR7660/4/read.md
CVE ID: CVE-2024-48714 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T17:02:57.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sezangel/IOT-vul/tree/main/TPlink/TL-WDR7660/2
CVE ID: CVE-2024-48729 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-08-11T15:50:42.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ETSI Open-Source MANO (OSM) 14.0.x before 14.0.3, 15.0.x before 15.0.2, 16.0.0, and 17.0.0 allows a remote authenticated attacker to escalate privileges via the /osm/admin/v1/users component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://open.com - http://etsi.com - https://www.osmium.solutions/articles/osm-mano-vulnerability-discovery.html#3
CVE ID: CVE-2024-48730 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-08-18T19:37:17.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in ETSI Open-Source MANO (OSM) v.14.x, v.15.x, v.16.x, v.17.x does not impose any restrictions on the authentication attempts performed by the default admin user, allowing a remote attacker to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.osmium.solutions/articles/osm-mano-vulnerability-discovery.html#2
CVE ID: CVE-2024-48733 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-11-04T18:37:56.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the POST body request. NOTE: this is disputed by the vendor because SQL statement execution is allowed for authorized users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sas.com - https://github.com/ACN-CVEs/CVE-2024-48733/blob/ea2da31c3d6e0140edd6a1455e6157b8ba2f7a67/SQL%20injection.pdf
CVE ID: CVE-2024-48734 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-11-04T18:41:15.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because file upload is allowed for authorized users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sas.com - https://github.com/ACN-CVEs/CVE-2024-48734/blob/d59cca7b03bce3a516035d1a0f488d67c3d10ae6/Unrestricted%20file%20upload.pdf
CVE ID: CVE-2024-48735 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-11-01T13:13:28.850410 Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access internal files by manipulating default path during file download. NOTE: this is disputed by the vendor because these filesystem paths are allowed for authorized users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sas.com - https://github.com/ACN-CVEs/CVE-2024-48735/blob/67e86e12393650e1df16c845ceff487d016f31f0/LFI.pdf
CVE ID: CVE-2024-48743 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T19:08:23.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/rvismit/538232c3f258e468195febb69f3f2d3b
CVE ID: CVE-2024-48744 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-16T17:25:03.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput" POST request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Teachers%20Record/Reflected%20XSS.pdf
CVE ID: CVE-2024-48746 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-06T16:37:20.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/KaiqueFerreiraPeres/a56c33104a52019c533e4283c257d3a0
CVE ID: CVE-2024-48747 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-26T18:30:59.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in alist-tvbox v1.7.1 allows a remote attacker to execute arbitrary code via the /atv-cli file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/6pc1/BugHub/blob/main/alist-tvbox%20command%20execution%20vulnerability.pdf
CVE ID: CVE-2024-48758 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-17T16:44:16.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/CVE-2024-48758/CVE-2024-48758.md
CVE ID: CVE-2024-48760 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-01-23T16:30:45.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.gestioip.net/index.html - https://github.com/muebel/gestioip-docker-compose - https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760
CVE ID: CVE-2024-48761 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-04-03T15:04:49.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScript code via the "erro" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gabriel-bri/vulnerability-research/tree/main/CVE-2024-48761
CVE ID: CVE-2024-48766 State: PUBLISHED Published: 2025-05-13T00:00:00.000Z Last Updated: 2025-05-13T19:53:28.974Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: NetAlertX Products: NetAlertX Problem Types: CWE-698 Description: NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/ - https://raw.githubusercontent.com/rapid7
es: - https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/netalertx_file_read.rb
CVE ID: CVE-2024-48768 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T20:20:29.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive information via the firmware update process Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://appinventoraigooglealmandocontrol.com - http://www.almando.com/ - https://www.almando.com/media/firmware/almando.json - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/appinventor.ai_google.almando_control/appinventor.ai_google.almando_control.md
CVE ID: CVE-2024-48769 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:47:11.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in BURG-WCHTER KG de.burgwachter.keyapp.app 4.5.0 allows a remote attacker to obtain sensitve information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://burg-wchter.com - http://deburgwachterkeyappapp.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/de.burgwachter.keyapp.app/de.burgwachter.keyapp.md
CVE ID: CVE-2024-48770 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T16:26:48.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://comwisdomcityzwave.com - http://plug.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.wisdomcity.zwave/com.wisdomcity.zwave.md
CVE ID: CVE-2024-48771 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T20:23:12.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://almando.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.almando.play/com.almando.play.md
CVE ID: CVE-2024-48772 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:26:21.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in C-CHIP (com.cchip.cchipamaota) v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://comcchipcchipamaota.com - http://www.c-chip.com.cn/english/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.cchip.cchippamaota/com.cchip.cchipamaota.md
CVE ID: CVE-2024-48773 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T20:07:36.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://comchenyumorepro.com - http://wo-smart.com/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.chenyu.morepro/com.chenyu.morepro.md
CVE ID: CVE-2024-48774 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T19:06:42.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Fermax Asia Pacific Pte Ltd com.fermax.vida 2.4.6 allows a remote attacker to obtain sensitve information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://comfermaxvida.com - http://fermax.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.fermax.vida/com.fermax.vida.md
CVE ID: CVE-2024-48775 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T19:57:02.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://plug.com - http://comezsetdelaney.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ezset.delaney/com.ezset.delaney.md
CVE ID: CVE-2024-48776 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T19:13:31.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://shelly.com - http://comhomeshelly.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.home.shelly/com.home.shelly.md
CVE ID: CVE-2024-48777 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:43:15.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://comledvancesmartpluseu.com - http://ledvance.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ledvance.smartplus.eu/com.ledvance.smartplus.eu.md
CVE ID: CVE-2024-48778 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:40:22.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GIANT MANUFACTURING CO., LTD RideLink (tw.giant.ridelink) 2.0.7 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://giant.com - http://ridelink.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/tw.giant.ridelink/tw.giant.ridelink.md
CVE ID: CVE-2024-48779 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-17T17:12:02.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platformpluginpath parameter to specify that the qt plugin loads the directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zty-1995/3fcdf702017ad6721e5011f74c1f6cee
CVE ID: CVE-2024-48781 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T18:48:17.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Wanxing Technology Yitu Project Management Kirin Edition 2.3.6 allows a remote attacker to execute arbitrary code via a specially constructed so file/opt/EdrawProj-2/plugins/imageformat. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zty-1995/a7948be24b3411759a6afa3cc616dc12
CVE ID: CVE-2024-48782 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T18:42:50.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zty-1995/7750a2ea1231971f973f02dc4c893b46
CVE ID: CVE-2024-48783 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-12-04T14:54:14.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postgresql.conf component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zty-1995/8495b81e8d257e8f6df102a32ec3c583
CVE ID: CVE-2024-48784 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:48:53.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://comsampmaxhomemax.com - http://sampmax.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.sampmax.homemax/com.sampmax.homemax.md
CVE ID: CVE-2024-48786 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:36:13.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SWITCHBOT INC SwitchBot (com.theswitchbot.switchbot) 5.0.4 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://switchbot.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.theswitchbot.switchbot/com.theswitchbot.switchbot.md
CVE ID: CVE-2024-48787 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:30:18.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Revic Optics Revic Ops (us.revic.revicops) 1.12.5 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://revic.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/us.revic.revicops/us.revic.revicops.md
CVE ID: CVE-2024-48788 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T18:23:28.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in YESCAM (com.yescom.YesCam.zwave) 1.0.2 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://yescam.com - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.yescam.YesCam.zwave/com.yescam.YesCam.zwave.md
CVE ID: CVE-2024-48789 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-19T13:43:41.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in INATRONIC com.inatronic.drivedeck.home 2.6.23 allows a remote attacker to obtain sensitve information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drivedeck.de/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.inatronic.drivedeck.home/com.inatronic.drivedeck.home.md
CVE ID: CVE-2024-48790 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-16T19:11:14.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ILIFE com.ilife.home.global 1.8.7 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iliferobot.com/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ilife.home.global/com.ilife.home.global.md
CVE ID: CVE-2024-48791 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-19T18:22:14.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.starvedia.com/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.starvedia.mCamView.zwave/com.starvedia.mCamView.zwave.md
CVE ID: CVE-2024-48792 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-15T16:01:27.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Hideez com.hideez 2.7.8.3 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hideez.com/en-int - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.hideez/com.hideez.md