Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22457 State: PUBLISHED Published: 2024-03-01T11:04:00.267Z Last Updated: 2024-08-15T19:11:27.851Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Appliance - SRS Problem Types: CWE-290 Description: Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
and communicating with the remote server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities
CVE ID: CVE-2024-22458 State: PUBLISHED Published: 2024-03-01T10:57:47.632Z Last Updated: 2024-08-01T22:43:34.919Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Appliance - SRS Problem Types: CWE-327 Description: Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-securit
richment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities
CVE ID: CVE-2024-22459 State: PUBLISHED Published: 2024-02-28T08:22:43.778Z Last Updated: 2024-08-15T19:32:45.701Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: ECS Problem Types: CWE-284 Description: Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to all buckets and their data within a namespace Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/00022247
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222470/dsa-2024-078-security-update-for-dell-ecs-access-control-vulnerability
CVE ID: CVE-2024-22460 State: PUBLISHED Published: 2024-05-08T15:52:17.721Z Last Updated: 2024-08-21T21:00:34.691Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: Data Manager Appliance Software (DMAS) Problem Types: CWE-502 Description: Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000224843/dsa-2024-083-securi
Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000224843/dsa-2024-083-security-update-for-dell-powerprotect-data-manager-appliance-for-multiple-vulnerabilities
CVE ID: CVE-2024-22461 State: PUBLISHED Published: 2024-12-13T13:25:25.661Z Last Updated: 2024-12-23T18:07:41.498Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: RecoverPoint for Virtual Machines Problem Types: CWE-347 Description: Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-upda
es: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-22463 State: PUBLISHED Published: 2024-03-04T13:18:26.832Z Last Updated: 2024-08-01T22:43:34.945Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-327 Description: Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to compromise of confidentiality and integrity of sensitive information Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000222691/dsa-2024-062-securit
richment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000222691/dsa-2024-062-security-update-for-dell-powerscale-onefs-for-proprietary-code-vulnerabilities
CVE ID: CVE-2024-22464 State: PUBLISHED Published: 2024-02-08T09:23:48.927Z Last Updated: 2025-04-24T15:56:31.540Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: Dell Products: AppSync Problem Types: CWE-532 Description: Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. Additi
e able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000221932/dsa-2024-072-security-update-for-dell-emc-appsync-for-vulnerabilities
CVE ID: CVE-2024-22472 State: PUBLISHED Published: 2024-05-07T05:17:26.626Z Last Updated: 2024-08-01T22:51:09.827Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Silicon Labs Products: Z-Wave SDK Problem Types: CWE-120 Description: A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.silabs.com/068Vm000004rZwm
CVE ID: CVE-2024-22473 State: PUBLISHED Published: 2024-02-21T18:13:10.241Z Last Updated: 2024-09-27T16:06:44.910Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: silabs.com Products: GSDK Problem Types: CWE-1279, CWE-331 Description: TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.silabs.com/068Vm000001FrjT
CVE ID: CVE-2024-22475 State: PUBLISHED Published: 2024-03-18T08:03:36.146Z Last Updated: 2024-10-27T21:26:34.557Z Vendors: BROTHER INDUSTRIES, LTD., FUJIFILM Business Innovation Corp., Toshiba Tec Corporation, RICOH COMPANY, LTD. Products: Multiple printers and scanners Problem Types: Cross-site request forgery (CSRF) Description: Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the re
. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000 - https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000 - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002 - https://www.toshibatec.com/information/20240306_01.html - https://jvn.jp/en/jp/JVN82749078/
CVE ID: CVE-2024-22476 State: PUBLISHED Published: 2024-05-16T20:46:56.635Z Last Updated: 2024-08-01T22:51:10.133Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Neural Compressor software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html
CVE ID: CVE-2024-22477 State: PUBLISHED Published: 2024-07-09T23:01:28.611Z Last Updated: 2024-08-01T22:51:09.905Z Severity: LOW (CVSS 1.8 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-79 Description: A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083
CVE ID: CVE-2024-22490 State: PUBLISHED Published: 2024-01-23T00:00:00 Last Updated: 2024-09-10T20:37:26.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/beetl-bbs%20-%20A%20reflected%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20the%20search%20box.md
CVE ID: CVE-2024-22491 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-05T16:24:49.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20beetl-bbs%20post%20save.md
CVE ID: CVE-2024-22492 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-03T14:06:15.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/%28JFinalcms%20contact%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20contact%20para.md
CVE ID: CVE-2024-22493 State: PUBLISHED Published: 2024-01-12T00:00:00 Last Updated: 2024-09-10T20:31:13.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/%28JFinalcms%20content%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20content%20para.md
CVE ID: CVE-2024-22494 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-03T14:06:08.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/%28JFinalcms%20moblie%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20moblie%20para.md
CVE ID: CVE-2024-22496 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-05T16:23:56.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/%28JFinalcms%20admin-login-username%29%20.md
CVE ID: CVE-2024-22497 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-05-30T14:21:05.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/%28JFinalcms%20admin-login-password%29%20.md
CVE ID: CVE-2024-22513 State: PUBLISHED Published: 2024-03-16T00:00:00 Last Updated: 2024-11-01T19:28:30.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dmdhrumilmistry/CVEs/tree/main/CVE-2024-22513
CVE ID: CVE-2024-22514 State: PUBLISHED Published: 2024-02-06T00:00:00 Last Updated: 2024-08-26T17:58:46.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution
CVE ID: CVE-2024-22515 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-08T19:08:08.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Orange-418/CVE-2024-22515-File-Upload-Vulnerability
CVE ID: CVE-2024-22519 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-06-05T16:10:46.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Drone-Lab/opendroneid-vulnerability
CVE ID: CVE-2024-22520 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-15T19:45:48.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Drone-Lab/Dronetag-vulnerability
CVE ID: CVE-2024-22523 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-06-20T19:52:12.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive information via uploadimage component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/for82/vdzwqe/sc8ictw8poo8v5gl
CVE ID: CVE-2024-22524 State: PUBLISHED Published: 2024-06-06T21:28:52.779Z Last Updated: 2025-03-27T20:39:59.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: dnspod-sr 0dfbd37 is vulnerable to buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DNSPod/dnspod-sr/issues/60
CVE ID: CVE-2024-22525 State: PUBLISHED Published: 2024-06-06T21:29:27.619Z Last Updated: 2025-03-18T15:20:19.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: dnspod-sr 0dfbd37 contains a SEGV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DNSPod/dnspod-sr/issues/61
CVE ID: CVE-2024-22526 State: PUBLISHED Published: 2024-04-12T00:00:00 Last Updated: 2024-10-29T15:09:08.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service (DoS) via exr image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/GAP-dev/c33276a151c824300d68aecc317082a3
CVE ID: CVE-2024-22529 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-06-04T21:19:03.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/unpWn4bL3/iot-security/blob/main/29.md
CVE ID: CVE-2024-22532 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-01T22:51:10.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service via crafted xwd file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pwndorei/CVE-2024-22532
CVE ID: CVE-2024-22533 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-06T17:37:17.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/xiandafu/beetl/issues/I8RU01
CVE ID: CVE-2024-22543 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-16T17:10:18.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/* URI or via the ExportSettings function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mat4mee.notion.site/Leaked-SessionID-can-lead-to-authentication-bypass-on-the-Linksys-Router-E1700-f56f9c4b15e7443fa237bd1b101a18d2
CVE ID: CVE-2024-22544 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-01T22:51:10.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbitrary code via the setDateTime function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mat4mee.notion.site/Remote-Code-Execution-RCE-on-the-Linksys-Router-E1700-765c9bbf6a7f4171b670bc778bf9b005
CVE ID: CVE-2024-22545 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-05-29T15:17:53.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter in the sub_420AE0() function. The attack can be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://warp-desk-89d.notion.site/TEW-824DRU-e7228d462ce24fa1a9fecb0bee57caad
CVE ID: CVE-2024-22546 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-01T22:51:10.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-815DAP - https://warp-desk-89d.notion.site/TEW-815DAP-94a631c20dee4f399268dbcc880f1f4c
CVE ID: CVE-2024-22547 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-14T15:34:05.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: WayOS IBR-7150 <17.06.23 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/wayos/wayos.md
CVE ID: CVE-2024-22548 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-05T16:14:51.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/5List/cms/blob/main/1.md
CVE ID: CVE-2024-22549 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-20T18:13:36.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cccbbbttt/cms/blob/main/1.md
CVE ID: CVE-2024-22550 State: PUBLISHED Published: 2024-01-26T00:00:00 Last Updated: 2024-08-29T18:37:30.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176312/ShopSite-14.0-Cross-Site-Scripting.html