Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-21830 State: PUBLISHED Published: 2025-02-12T21:18:55.568Z Last Updated: 2025-02-13T20:20:14.654Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VPL software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01044.html
CVE ID: CVE-2024-21831 State: PUBLISHED Published: 2024-05-16T20:47:01.758Z Last Updated: 2024-08-01T22:27:36.336Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processor Diagnostic Tool software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01069.html
CVE ID: CVE-2024-21832 State: PUBLISHED Published: 2024-07-09T23:04:55.088Z Last Updated: 2024-08-01T22:27:36.324Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-94 Description: A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083
CVE ID: CVE-2024-21833 State: PUBLISHED Published: 2024-01-10T23:25:25.755Z Last Updated: 2025-06-16T18:26:24.239Z Vendors: TP-Link Products: Archer AX3000, Archer AX5400, Archer AXE75, Deco X50, Deco XE200 Problem Types: OS command injection Description: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware - https://www.tp-link.com/jp/support/download/arch
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware - https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware - https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware - https://www.tp-link.com/jp/support/download/deco-x50/v1/#Firmware - https://www.tp-link.com/jp/support/download/deco-xe200/#Firmware - https://jvn.jp/en/vu/JVNVU91401812/
CVE ID: CVE-2024-21834 State: PUBLISHED Published: 2024-04-02T06:22:31.538Z Last Updated: 2024-08-01T22:27:36.344Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-843 Description: in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-04.md
CVE ID: CVE-2024-21835 State: PUBLISHED Published: 2024-05-16T20:47:03.441Z Last Updated: 2024-08-01T22:27:36.337Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) XTU software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01066.html
CVE ID: CVE-2024-21836 State: PUBLISHED Published: 2024-02-26T16:07:51.418Z Last Updated: 2025-11-04T18:23:04.559Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: llama.cpp Products: llama.cpp Problem Types: CWE-190 Description: A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1915
CVE ID: CVE-2024-21837 State: PUBLISHED Published: 2024-05-16T20:47:05.032Z Last Updated: 2024-08-01T22:27:36.340Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Lite Edition Design software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055
: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html
CVE ID: CVE-2024-21838 State: PUBLISHED Published: 2024-03-05T03:11:55.586Z Last Updated: 2024-08-01T22:27:36.320Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Gallagher Products: Command Centre Server Problem Types: CWE-74 Description: Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior. Additional A
1 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-21838
CVE ID: CVE-2024-21840 State: PUBLISHED Published: 2024-01-30T02:08:34.752Z Last Updated: 2024-11-12T20:41:38.511Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Hitachi Products: Hitachi Storage Plug-in for VMware vCenter Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific files. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.0.0 through 04.9.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-108
ISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-108/index.html
CVE ID: CVE-2024-21841 State: PUBLISHED Published: 2024-05-16T20:47:12.433Z Last Updated: 2024-08-01T22:27:36.341Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Distribution for GDB software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01042.html
CVE ID: CVE-2024-21843 State: PUBLISHED Published: 2024-05-16T20:47:03.973Z Last Updated: 2024-08-01T22:27:36.435Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Computing Improvement Program software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01059.html
CVE ID: CVE-2024-21844 State: PUBLISHED Published: 2024-08-14T13:45:41.918Z Last Updated: 2025-11-03T21:53:33.814Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) CSME Problem Types: denial of service, CWE-190 Description: Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html
CVE ID: CVE-2024-21845 State: PUBLISHED Published: 2024-02-02T06:18:49.976Z Last Updated: 2024-08-01T22:27:36.301Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-190 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2024-21846 State: PUBLISHED Published: 2024-04-18T22:12:36.533Z Last Updated: 2024-08-01T22:27:36.317Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Electrolink Products: Compact DAB Transmitter, Medium DAB Transmitter, High Power DAB Transmitter, Compact FM Transmitter, Modular FM Transmitter, Digital FM Transmitter, VHF TV Transmitter, UHF TV Transmitter Problem Types: CWE-306 Description: An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
.cgi gateway, resulting in a denial-of-service scenario. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE ID: CVE-2024-21848 State: PUBLISHED Published: 2024-04-05T08:13:01.713Z Last Updated: 2025-02-27T19:28:16.621Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-21849 State: PUBLISHED Published: 2024-02-14T16:30:21.661Z Last Updated: 2024-08-01T22:27:36.345Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-466 Description: When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000135873
CVE ID: CVE-2024-21850 State: PUBLISHED Published: 2024-11-13T20:31:15.735Z Last Updated: 2024-11-14T19:50:30.527Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) TDX Seamldr module software Problem Types: escalation of privilege, CWE-226 Description: Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01076.html
CVE ID: CVE-2024-21851 State: PUBLISHED Published: 2024-02-02T06:19:09.123Z Last Updated: 2024-08-01T22:27:36.307Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-190 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2024-21852 State: PUBLISHED Published: 2024-02-01T23:10:58.968Z Last Updated: 2024-11-08T15:44:25.848Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rapid Software LLC Products: Rapid SCADA Problem Types: CWE-22 Description: In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03 - https://rapidscada.org/contact/
CVE ID: CVE-2024-21853 State: PUBLISHED Published: 2024-11-13T20:56:56.757Z Last Updated: 2025-11-03T21:53:35.286Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: 4th and 5th Generation Intel(R) Xeon(R) Processors Problem Types: denial of service, CWE-1245 Description: Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html
CVE ID: CVE-2024-21855 State: PUBLISHED Published: 2024-11-21T14:41:52.221Z Last Updated: 2024-11-21T16:03:29.984Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GoCast Products: GoCast Problem Types: CWE-306 Description: A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1962
CVE ID: CVE-2024-21856 State: REJECTED Published: N/A Last Updated: 2025-06-17T02:13:56.467Z Description: No description available.
CVE ID: CVE-2024-21857 State: PUBLISHED Published: 2024-08-14T13:45:37.158Z Last Updated: 2024-08-14T18:05:35.128Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Compiler software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01057.html
CVE ID: CVE-2024-21859 State: PUBLISHED Published: 2025-02-12T21:19:17.737Z Last Updated: 2025-02-13T19:49:57.497Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Processors Problem Types: Information Disclosure, CWE-119 Description: Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01198.html
CVE ID: CVE-2024-21860 State: PUBLISHED Published: 2024-02-02T06:18:55.540Z Last Updated: 2024-11-08T15:38:33.808Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2024-21861 State: PUBLISHED Published: 2024-05-16T20:47:02.350Z Last Updated: 2024-08-01T22:27:36.312Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) GPA Framework software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01067.html
CVE ID: CVE-2024-21862 State: PUBLISHED Published: 2024-05-16T20:47:06.726Z Last Updated: 2024-08-20T15:40:46.992Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Standard Edition Design software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-
ontainer: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html
CVE ID: CVE-2024-21863 State: PUBLISHED Published: 2024-02-02T06:19:13.365Z Last Updated: 2024-08-01T22:27:36.325Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2024-21864 State: PUBLISHED Published: 2024-05-16T20:47:07.857Z Last Updated: 2024-08-01T22:27:36.305Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H) Vendors: n/a Products: Intel(R) Arc(TM) & Iris(R) Xe Graphics software Problem Types: escalation of privilege, CWE-86 Description: Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0
ment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01053.html
CVE ID: CVE-2024-21865 State: PUBLISHED Published: 2024-03-25T04:11:34.280Z Last Updated: 2025-09-19T17:22:54.820Z Vendors: KDDI CORPORATION Products: HGW BL1500HM Problem Types: CWE-1391 Description: HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://kddi-tech.com/contents/appendix_L2_06.html#20304f4c-af1b-49fd-c3b5-8d1f55fd8b4f - https://jvn.jp/en/vu/JVNVU93546510/
CVE ID: CVE-2024-21866 State: PUBLISHED Published: 2024-02-01T23:34:06.834Z Last Updated: 2025-06-17T21:29:22.289Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Rapid Software LLC Products: Rapid SCADA Problem Types: CWE-209 Description: In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03 - https://rapidscada.org/contact/
CVE ID: CVE-2024-21869 State: PUBLISHED Published: 2024-02-01T23:31:31.897Z Last Updated: 2025-05-15T19:51:07.596Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Rapid Software LLC Products: Rapid SCADA Problem Types: CWE-256 Description: In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03 - https://rapidscada.org/contact/
CVE ID: CVE-2024-21870 State: PUBLISHED Published: 2024-04-03T13:55:02.713Z Last Updated: 2025-11-04T18:23:05.826Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-73 Description: A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintell
erability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1950
CVE ID: CVE-2024-21871 State: PUBLISHED Published: 2024-09-16T16:38:41.428Z Last Updated: 2025-11-03T21:53:36.753Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: UEFI firmware for some Intel(R) Processors Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2024-21872 State: PUBLISHED Published: 2024-04-18T22:10:42.293Z Last Updated: 2024-08-01T22:27:36.412Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Electrolink Products: Compact DAB Transmitter, Medium DAB Transmitter, High Power DAB Transmitter, Compact FM Transmitter, Modular FM Transmitter, Digital FM Transmitter, VHF TV Transmitter, UHF TV Transmitter Problem Types: CWE-565 Description: The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References