Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-42567 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:04:26.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/96ba3f6ccd333480aa86e7078c4886d7
CVE ID: CVE-2024-42568 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-09-03T17:13:26.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/38a30275374ef796ab860795f5df4dac
CVE ID: CVE-2024-42569 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:04:34.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/20a81dbf47d371e1dabe08f350c8185d
CVE ID: CVE-2024-42570 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:57:51.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/1d9ebca101fc5e30040436d70e522102
CVE ID: CVE-2024-42571 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T14:14:47.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/5c8e289fa66702fd3acbed558ee449dd
CVE ID: CVE-2024-42572 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T16:07:20.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/c4c9508b8b3ed11f098f716d46572295
CVE ID: CVE-2024-42573 State: PUBLISHED Published: 2024-08-20T00:00:00.000Z Last Updated: 2025-03-20T20:59:27.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/d44aabca29c1a6a9845fde465b924e79
CVE ID: CVE-2024-42574 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T20:22:00.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/7064f8bbd3977ee665a098efcd0170c0
CVE ID: CVE-2024-42575 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:58:38.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/2fddc00b33b038cd778c1e4fb1936a15
CVE ID: CVE-2024-42576 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:07:37.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/50a1d8ad7effd9ccd089952602c831d3
CVE ID: CVE-2024-42577 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T13:44:14.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/20ad7b251f2905db38e7a6566b1d46cc
CVE ID: CVE-2024-42578 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T14:04:41.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/5eacc7e418e3b73b7ad1fa05d1a72aeb
CVE ID: CVE-2024-42579 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T17:58:35.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/ed59fb8b35a220dfa064a3a3cb1ecb1b
CVE ID: CVE-2024-42580 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:48:52.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/8a05309486637d8c6ce8c6624ec1e897
CVE ID: CVE-2024-42581 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T20:17:22.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/2bd26343ccdff7c759f62d332c8caff6
CVE ID: CVE-2024-42582 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:53:47.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/c0d78b257ce1e661be30de1ce9551d27
CVE ID: CVE-2024-42583 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:51:06.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/dac0206b8de14763bdbe2b6bb7020cdc
CVE ID: CVE-2024-42584 State: PUBLISHED Published: 2024-08-20T00:00:00.000Z Last Updated: 2025-03-25T18:15:54.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/6037eaac5749430c29cf15fdd9df0ba5
CVE ID: CVE-2024-42585 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:08:50.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/33de7a4bd7a4517a26fa4e4911b7fb1d
CVE ID: CVE-2024-42586 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T15:24:52.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/533b962efb1779e397a241bf7a19643c
CVE ID: CVE-2024-42598 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-22T17:35:14.193524 Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_editplayer.php%20code%20injection.md - https://gitee
- https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_editplayer.php%20code%20injection.md - https://gitee.com/fushuling/cve/blob/master/CVE-2024-42598.md
CVE ID: CVE-2024-42599 State: PUBLISHED Published: 2024-08-22T00:00:00 Last Updated: 2024-08-26T16:44:00.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_files.php%20code%20injection.md - https://gitee.com/fushuli
s://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_files.php%20code%20injection.md - https://gitee.com/fushuling/cve/blob/master/CVE-2024-42599.md
CVE ID: CVE-2024-42603 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:42:49.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/10/readme.md
CVE ID: CVE-2024-42604 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T19:20:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/1/readme.md
CVE ID: CVE-2024-42605 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:57:56.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/3/readme.md
CVE ID: CVE-2024-42606 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:03:34.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/6/readme.md
CVE ID: CVE-2024-42607 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:38:49.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/9/readme.md
CVE ID: CVE-2024-42608 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T18:06:02.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/2/readme.md
CVE ID: CVE-2024-42609 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T20:15:12.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/8/readme.md
CVE ID: CVE-2024-42610 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:45:40.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/7/readme.md
CVE ID: CVE-2024-42611 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:11:38.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/4/readme.md
CVE ID: CVE-2024-42612 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T13:29:09.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/5/readme.md
CVE ID: CVE-2024-42613 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:42:24.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/14/readme.md
CVE ID: CVE-2024-42616 State: PUBLISHED Published: 2024-08-20T00:00:00.000Z Last Updated: 2025-03-26T14:32:15.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/13/readme.md
CVE ID: CVE-2024-42617 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:10:42.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/11/readme.md
CVE ID: CVE-2024-42618 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:37:49.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/16/readme.md
CVE ID: CVE-2024-42619 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:42:25.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/17/readme.md
CVE ID: CVE-2024-42621 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:44:27.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jinwu1234567890/cms2/tree/main/12/readme.md
CVE ID: CVE-2024-42623 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T19:52:48.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/8/readme.md
CVE ID: CVE-2024-42624 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-15T16:14:17.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/3/readme.md
CVE ID: CVE-2024-42625 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-12T17:09:54.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/9/readme.md
CVE ID: CVE-2024-42626 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:46:42.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/4/readme.md
CVE ID: CVE-2024-42627 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T18:33:38.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/6/readme.md
CVE ID: CVE-2024-42628 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-15T16:15:27.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/5/readme.md
CVE ID: CVE-2024-42629 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-12T17:11:48.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/2/readme.md
CVE ID: CVE-2024-42630 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:50:25.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/10/readme.md
CVE ID: CVE-2024-42631 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T18:35:08.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/7/readme.md
CVE ID: CVE-2024-42632 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:37:17.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kirtoc/cms/tree/main/1/readme.md
CVE ID: CVE-2024-42633 State: PUBLISHED Published: 2024-08-19T00:00:00 Last Updated: 2024-08-20T14:48:13.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goldds96/Report/blob/main/Linksys/E1500/CI.md
CVE ID: CVE-2024-42634 State: PUBLISHED Published: 2024-08-16T00:00:00 Last Updated: 2024-08-16T17:49:14.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result, attacker can execute OS commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goldds96/Report/blob/main/Tenda/AC9/CI.md
CVE ID: CVE-2024-42636 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-23T17:44:51.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/iami233/cve/issues/1
CVE ID: CVE-2024-42637 State: PUBLISHED Published: 2024-08-16T00:00:00 Last Updated: 2024-08-16T20:35:33.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://palm-vertebra-fe9.notion.site/H3C-R3010V100R002L02-was-discovered-to-contain-a-hardcoded-d3212602f84443d4b17e3247b3e6b129 - https://www.h3c.com/cn/d_202308/1907175_30005_0.htm
CVE ID: CVE-2024-42638 State: PUBLISHED Published: 2024-08-16T00:00:00.000Z Last Updated: 2025-03-17T15:03:39.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://palm-vertebra-fe9.notion.site/H3C-Magic-B1STV100R012-was-discovered-to-contain-a-hardcoded-2a648569ee7f4df8b570632d11032337?pvs=74 - https://www.h3c.com/cn/d_201609/956059_30005_0.htm