Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-30200 State: PUBLISHED Published: 2024-03-28T05:09:01.595Z Last Updated: 2024-08-02T01:25:03.344Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: realmag777 Products: BEAR Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woo-bulk-editor/wordpress-bear-plugin-1-1-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30201 State: PUBLISHED Published: 2024-03-27T06:13:32.689Z Last Updated: 2024-08-05T20:52:17.034Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Xylus Themes Products: WordPress Importer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflected XSS.This issue affects WordPress Importer: from n/a through 1.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-smart-import/wordpress-wp-smart-import-plugin-1-0-4-reflected-cross-sit
https://patchstack.com/database/vulnerability/wp-smart-import/wordpress-wp-smart-import-plugin-1-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30202 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-11-13T17:54:10.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=003ddacf1c8d869b1858181c29ea21b731a8d8d9 - https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=befa9fcaae29a6c9a283ba371c3c5234c7f644eb - http://www.openwall.com/lists/
h.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=befa9fcaae29a6c9a283ba371c3c5234c7f644eb - http://www.openwall.com/lists/oss-security/2024/03/25/2 - http://www.openwall.com/lists/oss-security/2024/04/08/6
CVE ID: CVE-2024-30203 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-11-07T11:03:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Emacs before 29.3, Gnus treats inline MIME contents as trusted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b9042ad7426acdcca33e3d931d8f495bdd804 - https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html - http://www.openwall.com/lists/oss-security/2024/03/25/2
://lists.debian.org/debian-lts-announce/2024/04/msg00024.html - http://www.openwall.com/lists/oss-security/2024/03/25/2 - http://www.openwall.com/lists/oss-security/2024/04/08/4 - http://www.openwall.com/lists/oss-security/2024/04/10/3 - http://www.openwall.com/lists/oss-security/2024/04/11/5 - http://www.openwall.com/lists/oss-security/2024/04/11/6 - http://www.openwall.com/lists/oss-security/2024/04/11/4 - http://www.openwall.com/lists/oss-security/2024/04/10/4 - http://www.openwall.com/lists/oss-security/2024/04/08/6 - http://www.openwall.com/lists/oss-security/2024/04/10/5 - http://www.openwall.com/lists/oss-security/2024/04/08/7 - http://www.openwall.com/lists/oss-security/2024/04/08/3
0/5 - http://www.openwall.com/lists/oss-security/2024/04/08/7 - http://www.openwall.com/lists/oss-security/2024/04/08/3 - http://www.openwall.com/lists/oss-security/2024/04/10/6
CVE ID: CVE-2024-30204 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-11-04T16:34:51.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c - https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html - http://www.openwall.com/lists/oss-securit
23.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html - http://www.openwall.com/lists/oss-security/2024/03/25/2 - http://www.openwall.com/lists/oss-security/2024/04/08/4 - http://www.openwall.com/lists/oss-security/2024/04/10/3 - http://www.openwall.com/lists/oss-security/2024/04/11/4 - http://www.openwall.com/lists/oss-security/2024/04/10/4 - http://www.openwall.com/lists/oss-security/2024/04/08/6 - http://www.openwall.com/lists/oss-security/2024/04/10/5 - http://www.openwall.com/lists/oss-security/2024/04/08/7 - http://www.openwall.com/lists/oss-security/2024/04/08/3 - http://www.openwall.com/lists/oss-security/2024/04/10/6
CVE ID: CVE-2024-30205 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-12-03T16:41:24.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514d - https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877 - https://lists.debian.org/debian-lts-
org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877 - https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html - http://www.openwall.com/lists/oss-security/2024/03/25/2
CVE ID: CVE-2024-30206 State: PUBLISHED Published: 2024-05-14T10:02:17.971Z Last Updated: 2024-08-02T01:25:03.407Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-494 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIM
(6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected SIMATIC RTLS Locating Manager Clients do not properly check the integrity of update files. This could allow an unauthenticated remote attacker to alter update files in transit and trick an authorized user into installing malicious code. A successful exploit requires the attacker to be able to modify the communication between server and client on the network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Co
munication between server and client on the network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-093430.html
CVE ID: CVE-2024-30207 State: PUBLISHED Published: 2024-05-14T10:02:19.474Z Last Updated: 2024-08-02T01:25:03.426Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-321 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1),
ger (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The affected systems use symmetric cryptography with a hard-coded key to protect the communication between client and server. This could allow an unauthenticated remote attacker to compromise confidentiality and integrity of the communication and, subsequently, availability of the system. A successful exploit requires the attacker to gain knowledge of the hard-coded key and to be able to intercept the communication between client
uires the attacker to gain knowledge of the hard-coded key and to be able to intercept the communication between client and server on the network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-093430.html
CVE ID: CVE-2024-30208 State: PUBLISHED Published: 2024-05-14T10:02:20.970Z Last Updated: 2024-08-02T01:25:03.408Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-732 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), S
er (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The "DBTest" tool of SIMATIC RTLS Locating Manager does not properly enforce access restriction. This could allow an authenticated local attacker to extract sensitive information from memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-093430.html
CVE ID: CVE-2024-30209 State: PUBLISHED Published: 2024-05-14T10:02:22.448Z Last Updated: 2024-08-02T01:25:03.337Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-319 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1),
ager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected systems transmit client-side resources without proper cryptographic protection. This could allow an attacker to eavesdrop on and modify resources in transit. A successful exploit requires an attacker to be in the network path between the RTLS Locating Manager server and a client (MitM). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/ht
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-093430.html
CVE ID: CVE-2024-30210 State: PUBLISHED Published: 2024-04-12T15:16:30.094Z Last Updated: 2024-08-02T01:25:03.339Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: IOSiX Products: IO-1020 Micro ELD Problem Types: CWE-1392 Description: IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-093-01
CVE ID: CVE-2024-30211 State: PUBLISHED Published: 2025-02-12T21:19:20.874Z Last Updated: 2025-02-13T20:22:08.786Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) ME driver pack installer engines Problem Types: Escalation of Privilege, CWE-284 Description: Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01152.html
CVE ID: CVE-2024-30212 State: PUBLISHED Published: 2024-05-28T16:07:52.946Z Last Updated: 2025-02-13T17:47:45.803Z Vendors: Microchip Products: MPLAB® Harmony 3 Core Module Problem Types: CWE-190 Description: If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM can be exposed. The same method works to write to this memory area. If RAM contains pointers, those can be - depending on the application - overwritten to return data from any other offset including Progam and Boot Flash. Additional A
ding on the application - overwritten to return data from any other offset including Progam and Boot Flash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Microchip-MPLAB-Harmony/core/commit/d4608a4f1a140bd899cd4337cdbfb343a4339216 - https://github.com/Microchip-MPLAB-Harmony/core/blob/master/release_notes.md - https://github.com/Fehr-GmbH/blackleak
CVE ID: CVE-2024-30213 State: PUBLISHED Published: 2024-07-12T00:00:00 Last Updated: 2024-08-02T01:25:03.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to achieve Command Injection via a Ping URL, leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.stonefly.com/services - https://stonefly.com/security-advisories/cve-2024-30213/
CVE ID: CVE-2024-30214 State: PUBLISHED Published: 2024-04-09T00:56:29.336Z Last Updated: 2024-08-02T01:25:03.428Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Business Connector Problem Types: CWE-79 Description: The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which are reflected in the server response. Under certain circumstances, if the parameter contains a JavaScript, the script could be processed on client side. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3421453 - https://support.sap.com/en/my
DP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3421453 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-30215 State: PUBLISHED Published: 2024-04-09T00:56:59.180Z Last Updated: 2024-08-02T01:25:03.369Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Business Connector Problem Types: CWE-79 Description: The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be obtained and/or modified. However, the attacker does not have control over what information is obtained, or the amount or kind of loss is limited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referen
e amount or kind of loss is limited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3421453 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-30216 State: PUBLISHED Published: 2024-04-09T01:02:41.597Z Last Updated: 2024-08-02T01:25:03.367Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP S/4 HANA (Cash Management) Problem Types: CWE-862 Description: Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with 'completed' status affecting the integrity of the application. Confidentiality and Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
entiality and Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3427178 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-30217 State: PUBLISHED Published: 2024-04-09T01:03:20.926Z Last Updated: 2024-08-02T01:25:03.420Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP S/4 HANA (Cash Management) Problem Types: CWE-862 Description: Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application. Confidentiality and Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referen
y and Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3430173 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-30218 State: PUBLISHED Published: 2024-04-09T01:04:40.206Z Last Updated: 2024-09-28T22:27:25.110Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP NetWeaver AS ABAP and ABAP Platform Problem Types: CWE-605 Description: The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3359778 - https://support.sap.com/en/my-support/knowled
- CVE Program Container: References: - https://me.sap.com/notes/3359778 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-30219 State: PUBLISHED Published: 2024-04-15T10:42:30.673Z Last Updated: 2025-08-27T21:02:07.280Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PLANEX COMMUNICATIONS INC. Products: MZK-MF300N, MZK-MF300HP2 Problem Types: CWE-489 Description: Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
update for this product is not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU91975826/
CVE ID: CVE-2024-30220 State: PUBLISHED Published: 2024-04-15T10:44:02.297Z Last Updated: 2025-08-27T21:02:31.611Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PLANEX COMMUNICATIONS INC. Products: MZK-MF300N, MZK-MF300HP2 Problem Types: CWE-77 Description: Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
this product is not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU91975826/
CVE ID: CVE-2024-30221 State: PUBLISHED Published: 2024-03-28T05:07:41.573Z Last Updated: 2024-08-02T01:25:03.408Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: WP Sunshine Products: Sunshine Photo Cart Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart.This issue affects Sunshine Photo Cart: from n/a through 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sunshine-photo-cart/wordpress-sunshine-photo-cart-plugin-3-1-1-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-30222 State: PUBLISHED Published: 2024-03-28T05:05:42.156Z Last Updated: 2024-08-08T15:41:19.832Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Repute Infosystems Products: ARMember Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-26-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-30223 State: PUBLISHED Published: 2024-03-28T05:04:13.840Z Last Updated: 2024-08-09T19:48:51.075Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Repute Infosystems Products: ARMember Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-26-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-30224 State: PUBLISHED Published: 2024-03-28T05:02:20.331Z Last Updated: 2025-04-08T20:45:29.316Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wholesale Team Products: WholesaleX Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wholesalex/wordpress-wholesalex-plugin-1-3-2-unauthenticated-php-object-injection-vulnerability?_s_id=cve