Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-13957 State: PUBLISHED Published: 2025-05-22T18:35:20.112Z Last Updated: 2025-05-22T18:48:25.386Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-918 Description: SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2024-13958 State: PUBLISHED Published: 2025-05-22T18:36:50.390Z Last Updated: 2025-05-22T18:48:20.173Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-79 Description: Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2024-13959 State: PUBLISHED Published: 2025-05-09T15:20:18.308Z Last Updated: 2025-05-09T19:02:14.584Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AVG Products: TuneUp Problem Types: CWE-59 Description: Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE ID: CVE-2024-13960 State: PUBLISHED Published: 2025-05-09T15:20:29.660Z Last Updated: 2025-05-09T18:54:22.055Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AVG Products: TuneUp Problem Types: CWE-59, CWE-367 Description: Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-ad
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE ID: CVE-2024-13961 State: PUBLISHED Published: 2025-05-09T15:20:42.493Z Last Updated: 2025-05-09T17:38:53.172Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Avast Products: CleanUp Premium Problem Types: CWE-59, CWE-367 Description: Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en
o time-of-use) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE ID: CVE-2024-13962 State: PUBLISHED Published: 2025-05-09T15:20:51.310Z Last Updated: 2025-05-09T17:21:48.110Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Avast Products: CleanUp Premium Problem Types: CWE-59 Description: Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.c
-check to time-of-use) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE ID: CVE-2024-13964 State: REJECTED Published: N/A Last Updated: 2025-05-17T19:21:16.792Z Description: No description available.
CVE ID: CVE-2024-13965 State: REJECTED Published: N/A Last Updated: 2025-05-17T19:20:29.911Z Description: No description available.
CVE ID: CVE-2024-13966 State: PUBLISHED Published: 2025-05-27T18:35:31.706Z Last Updated: 2025-07-14T14:58:38.464Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ZKTeco Products: BioTime Problem Types: CWE-1393 Description: ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password"). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://krashconsulting.com/fury-of-fingers-biotime-rce/ - https://zkteco-store.ru/wp-content/upload
iner: References: - https://krashconsulting.com/fury-of-fingers-biotime-rce/ - https://zkteco-store.ru/wp-content/uploads/2023/09/ZKBio-CVSecurity-6.0.0-User-Manual_EN-v1.0_20230616.pdf - https://www.cve.org/CVERecord?id=CVE-2024-13966 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-148-01.json
CVE ID: CVE-2024-13967 State: PUBLISHED Published: 2025-06-04T08:01:43.117Z Last Updated: 2025-06-17T11:46:53.508Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ABB Products: EIBPORT V3 KNX, EIBPORT V3 KNX GSM Problem Types: CWE-384 Description: This vulnerability allows the successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web Server of EIBPORT. This issue affects EIBPORT V3 KNX: through 3.9.8; EIBPORT V3 KNX GSM: through 3.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A1621&LanguageCode=en&DocumentPartId=pdf&Action
ces: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A1621&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2024-13972 State: PUBLISHED Published: 2025-07-17T19:02:36.400Z Last Updated: 2025-08-03T08:58:17.751Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Intercept X for Windows Core Agent Problem Types: CWE-276 Description: A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe
CVE ID: CVE-2024-13973 State: PUBLISHED Published: 2025-07-21T13:38:22.516Z Last Updated: 2025-07-21T14:59:22.227Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Firewall Problem Types: CWE-89 Description: A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce
CVE ID: CVE-2024-13974 State: PUBLISHED Published: 2025-07-21T13:34:11.656Z Last Updated: 2025-07-21T15:00:59.445Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Firewall Problem Types: CWE-807 Description: A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce
CVE ID: CVE-2024-13975 State: PUBLISHED Published: 2025-07-25T15:49:51.852Z Last Updated: 2025-11-22T12:22:01.173Z Vendors: Commvault Products: Commvault Problem Types: CWE-269 Description: A local privilege escalation vulnerability exists in Commvault for Windows versions 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. In affected configurations, a local attacker who owns a client system with the file server agent installed can compromise any assigned Windows access nodes. This may allow unauthorized access or lateral movement within the backup infrastructure. The issue has been resolved in versions 11.32.60, 11.34.34, and 11.36.8. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
as been resolved in versions 11.32.60, 11.34.34, and 11.36.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2024_09_1.html - https://www.vulncheck.com/advisories/commvault-for-windows-access-nodes-compromise
CVE ID: CVE-2024-13976 State: PUBLISHED Published: 2025-07-25T15:50:17.950Z Last Updated: 2025-11-22T12:20:44.890Z Vendors: Commvault Products: Commvault for Windows Problem Types: CWE-427 Description: A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated privileges. The vulnerability has been resolved in versions 11.20.202, 11.28.124, 11.32.65, 11.34.37, and 11.36.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commv
65, 11.34.37, and 11.36.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2024_09_2.html - https://www.vulncheck.com/advisories/commvault-for-windows-maintenance-installer-dll-injection
CVE ID: CVE-2024-13978 State: PUBLISHED Published: 2025-08-01T21:32:07.643Z Last Updated: 2025-11-03T18:08:11.737Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: n/a Products: LibTIFF Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1c
complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.318355 - https://vuldb.com/?ctiid.318355 - https://vuldb.com/?submit.624562 - https://gitlab.com/libtiff/libtiff/-/issues/649 - https://gitlab.com/libtiff/libtiff/-/merge_requests/667 - https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4 - http://www.libtiff.org/
CVE ID: CVE-2024-13979 State: PUBLISHED Published: 2025-08-27T21:27:15.814Z Last Updated: 2025-08-28T19:43:02.287Z Vendors: Hangzhou Shengqiao Technology Co. Ltd. Products: St. Joe ERP System ("圣乔ERP系统") Problem Types: CWE-89 Description: A SQL injection vulnerability exists in the St. Joe ERP system ("圣乔ERP系统") that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into SQL queries, enabling direct manipulation of the backend database. Successful exploitation may result in unauthorized data access, modification of records, or li
of the backend database. Successful exploitation may result in unauthorized data access, modification of records, or limited disruption of service. An affected version range is undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-04-14 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/qq_41904294/article/details/144240396 - https://github.com/adysec/POC/blob/main/wpoc/%E5%9C%A3%E4%B9%94ERP/%E5%9C%A3%E4%B9%94ERP%E7%B3%BB%E7%BB%9FSingleRowQueryConvertor%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md - https://en.fofa.info/result?qbase64=5Zyj5LmURVJQ57O757uf - https://www.vulncheck.com/advisories/st-jo
C%8F%E6%B4%9E.md - https://en.fofa.info/result?qbase64=5Zyj5LmURVJQ57O757uf - https://www.vulncheck.com/advisories/st-joes-erp-system-sqli
CVE ID: CVE-2024-13980 State: PUBLISHED Published: 2025-08-27T21:25:05.918Z Last Updated: 2025-08-28T19:46:22.366Z Vendors: H3C Group Products: Intelligent Management Center (iMC) Problem Types: CWE-502 Description: H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters, potentially leading to arbitrary command execution. This flaw does not require authentication and may be exploited without session cookies. An affected version range is undefined. Expl
es not require authentication and may be exploited without session cookies. An affected version range is undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-28 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/nnn2188185/article/details/141065540 - https://github.com/OJZen/FckESC/blob/master/%E5%86%85%E7%BD%91%E7%99%BB%E5%BD%95%E8%BF%87%E7%A8%8B.txt - https://blog.csdn.net/weixin_48539059/article/details/141033966 - https://axsec.blog.csdn.net/article/details/141003376 - https://www.h3c.com/cn/Service/Online_Help/psirt/ - https://www.vulncheck.com/advisories/h3c-intelligent-management-center-rce
CVE ID: CVE-2024-13981 State: PUBLISHED Published: 2025-08-27T21:25:29.739Z Last Updated: 2025-08-28T19:47:13.739Z Vendors: Fujian Apex Software Co. Ltd. Products: LiveBOS Problem Types: CWE-434, CWE-22 Description: LiveBOS, an object-oriented business architecture middleware suite developed by Apex Software Co., Ltd., contains an arbitrary file upload vulnerability in its UploadFile.do;.js.jsp endpoint. This flaw affects the LiveBOS Server component and allows unauthenticated remote attackers to upload crafted files outside the intended directory structure via path traversal in the filename parameter. Successful exploitation may lead to remote code execution on the server, enabling full sys
al in the filename parameter. Successful exploitation may lead to remote code execution on the server, enabling full system compromise. The vulnerability is presumed to affect builds released prior to August 2024 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-23 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cn-sec.com/archives/3041179.html - https://axsec.blog.csdn.net/article/details/140847466 - https://github.com/folio2008/POC_wy876/blob/main/LiveBOS/%E7%81%B5%E5%8A%A8%E4%B8%9A%E5%8A%A1%E6%9E%B6%E6%9E%84%E5%B9%
- https://github.com/folio2008/POC_wy876/blob/main/LiveBOS/%E7%81%B5%E5%8A%A8%E4%B8%9A%E5%8A%A1%E6%9E%B6%E6%9E%84%E5%B9%B3%E5%8F%B0%28LiveBOS%29%E7%B3%BB%E7%BB%9FUploadFile.do%E6%8E%A5%E5%8F%A3%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%28XVE-2023-21708%29.md - https://blog.csdn.net/weixin_53009585/article/details/140853891 - https://blog.csdn.net/jingke666/article/details/140855251 - https://www.apexsoft.com.cn/platform/index.html - https://www.vulncheck.com/advisories/livebos-uploadfile-arbitrary-file-upload
CVE ID: CVE-2024-13982 State: PUBLISHED Published: 2025-08-27T21:26:56.448Z Last Updated: 2025-11-20T17:15:32.849Z Vendors: Changsha SPON Communication Technology Co. Ltd. Products: SPON IP Network Broadcast System Problem Types: CWE-22 Description: SPON IP Network Broadcast System, a digital audio transmission platform developed by SPON Communications, contains an arbitrary file read vulnerability in the rj_get_token.php endpoint. The flaw arises from insufficient input validation on the jsondata[url] parameter, which allows attackers to perform directory traversal and access sensitive files on the server. An unauthenticated remote attacker can exploit this vulnerability by sending a crafte
ess sensitive files on the server. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted POST request to read arbitrary files, potentially exposing system configuration, credentials, or internal logic. An affected version range is undefined. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/qq_36618918/article/details/135505570 - https://sponcomm.com/collections/ip-intercom-system - https://www.vulncheck.com/advisories/spon-ip-network-intercom-system-arbitrary-file-read
CVE ID: CVE-2024-13983 State: PUBLISHED Published: 2025-11-14T02:29:55.466Z Last Updated: 2025-11-14T14:46:52.457Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html - https://issues.chromium.org/issues/379818904
CVE ID: CVE-2024-13984 State: PUBLISHED Published: 2025-08-27T21:25:52.556Z Last Updated: 2025-08-28T19:48:57.383Z Vendors: Qi'anxin Products: TianQing Management Center Problem Types: CWE-73, CWE-22 Description: QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component that allows unauthenticated attackers to upload files to arbitrary locations on the server. The /rptsvr/upload endpoint fails to sanitize the filename parameter in multipart form-data requests, enabling path traversal. This allows attackers to place executable files in web-accessible directories, potentially leading to remote code execution. Explo
s attackers to place executable files in web-accessible directories, potentially leading to remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-23 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cn-sec.com/archives/2421288.html - https://blog.csdn.net/maxiluo/article/details/135865584 - https://www.qianxin.com/product/detail/pid/330 - https://www.vulncheck.com/advisories/qianxin-tianqing-management-center-arbitrary-file-upload
CVE ID: CVE-2024-13985 State: PUBLISHED Published: 2025-08-27T21:23:37.944Z Last Updated: 2025-08-28T19:49:43.956Z Vendors: Zhejiang Dahua Technology Co., Ltd. Products: EIMS Problem Types: CWE-78 Description: A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without sanitization or authentication. By sending crafted HTTP requests, attackers can inject OS-level commands that are executed on the server, leading to full system compromise. Exploitation eviden
ers can inject OS-level commands that are executed on the server, leading to full system compromise. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-04-06 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.dahuatech.com/bulletin/info?IsDpValue=APKncD%2FBd6zIq4O2BUpuhjg6hGbLYAQKuf5hnmPaK9M%3D - https://cn-sec.com/archives/2554372.html - https://blog.csdn.net/weixin_43567873/article/details/136636198 - https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/dahua/dahua-eims-capture-handle-rce.yaml - https://s4e.io/tools/dahua-eims-remote-code-execution - https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-
- https://s4e.io/tools/dahua-eims-remote-code-execution - https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 - https://www.cnvd.org.cn/flaw/show/CNVD-2024-17054 - https://www.vulncheck.com/advisories/dahua-eims-rce
CVE ID: CVE-2024-13986 State: PUBLISHED Published: 2025-08-28T15:49:46.119Z Last Updated: 2025-11-17T18:21:46.809Z Vendors: Nagios Products: Nagios XI Problem Types: CWE-434, CWE-22 Description: Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename operations. Exploitation results in the placement of attacker-controlled PHP files in a web-accessible directory, executed as the www-data user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ccessible directory, executed as the www-data user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://theyhack.me/Nagios-XI-Authenticated-RCE - https://www.nagios.com/changelog/nagios-xi/ - https://www.nagios.com/products/security/#nagios-xi - https://www.vulncheck.com/advisories/nagios-xi-authenticated-arbitrary-file-upload-path-traversal-rce
CVE ID: CVE-2024-13987 State: PUBLISHED Published: 2025-08-29T07:20:21.219Z Last Updated: 2025-09-01T01:34:03.271Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: RADIUS Server Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_25_10
CVE ID: CVE-2024-13990 State: PUBLISHED Published: 2025-09-19T18:54:08.729Z Last Updated: 2025-11-19T15:58:41.454Z Vendors: MicroWorld Technologies Products: eScan AV Problem Types: CWE-295, CWE-347 Description: MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle (MitM) attack and substitute malicious update payloads for legitimate ones. The eScan AV client accepted these substituted packages and executed or loaded their components (including sideloaded DLLs and Java/installer payloads), enabling r