Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33587 State: PUBLISHED Published: 2024-04-29T12:40:46.720Z Last Updated: 2024-08-02T02:36:04.469Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Copy Content Protection Team Products: Secure Copy Content Protection and Content Locking Problem Types: CWE-862 Description: Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/secure-copy-content-protect
chment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/secure-copy-content-protection/wordpress-secure-copy-content-protection-and-content-locking-plugin-3-9-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33588 State: PUBLISHED Published: 2024-04-29T12:39:18.151Z Last Updated: 2024-08-02T02:36:04.125Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: codeSavory Products: Knowledge Base documentation & wiki plugin – BasePress Problem Types: CWE-862 Description: Missing Authorization vulnerability in codeSavory Knowledge Base documentation & wiki plugin – BasePress.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through 2.16.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/basepress/wordpress-basepress-plugin-2-16-1-broken
ontainer: References: - https://patchstack.com/database/vulnerability/basepress/wordpress-basepress-plugin-2-16-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33589 State: PUBLISHED Published: 2024-04-29T10:15:31.650Z Last Updated: 2024-08-02T02:36:04.203Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WPOmnia Products: KB Support Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-plugin-1-6-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33590 State: PUBLISHED Published: 2024-04-29T10:14:05.596Z Last Updated: 2024-08-02T02:36:04.395Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: codeSavory Products: Knowledge Base documentation & wiki plugin – BasePress Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in codeSavory Knowledge Base documentation & wiki plugin – BasePress.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through 2.16.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/basepress/wordpress-basepress-plugin-2-
E Program Container: References: - https://patchstack.com/database/vulnerability/basepress/wordpress-basepress-plugin-2-16-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33591 State: PUBLISHED Published: 2024-04-29T10:10:52.661Z Last Updated: 2024-08-02T02:36:04.047Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Tips and Tricks HQ Products: Easy Accept Payments Problem Types: CWE-862 Description: Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments.This issue affects Easy Accept Payments: from n/a through 4.9.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wordpress-easy-paypal-payment-or-donation-accept-plugin/wordpress-easy-accept-payments-for-paypal-plugin-4-9-10-broken-access-control-vuln
pal-payment-or-donation-accept-plugin/wordpress-easy-accept-payments-for-paypal-plugin-4-9-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33592 State: PUBLISHED Published: 2024-04-25T14:52:26.775Z Last Updated: 2024-08-02T02:36:04.403Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: SoftLab Products: Radio Player Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/radio-player/wordpress-radio-player-plugin-2-0-73-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33593 State: PUBLISHED Published: 2024-04-29T10:09:06.630Z Last Updated: 2024-08-02T02:36:04.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: RedNao Products: Smart Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/smart-forms/wordpress-smart-forms-plugin-2-6-91-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33594 State: PUBLISHED Published: 2024-04-29T10:07:39.021Z Last Updated: 2024-08-02T02:36:04.326Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Leaky Paywall Products: Leaky Paywall Problem Types: CWE-862 Description: Missing Authorization vulnerability in Leaky Paywall.This issue affects Leaky Paywall: from n/a through 4.20.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/leaky-paywall/wordpress-leaky-paywall-plugin-4-20-8-price-manipulation-vulnerability?_s_id=cve
CVE ID: CVE-2024-33595 State: PUBLISHED Published: 2024-04-29T09:16:00.135Z Last Updated: 2024-08-02T02:36:04.368Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Jewel Theme Products: Master Addons for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/master-addons/wordpress-master-addons-for-elementor-plugin-2-0-5-4-1-broken-access-control-on-duplicate-post-vulnerability?_s_
-addons/wordpress-master-addons-for-elementor-plugin-2-0-5-4-1-broken-access-control-on-duplicate-post-vulnerability?_s_id=cve
CVE ID: CVE-2024-33596 State: PUBLISHED Published: 2024-04-29T08:27:05.431Z Last Updated: 2024-08-02T02:36:04.382Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Five Star Plugins Products: Five Star Restaurant Reservations Problem Types: CWE-862 Description: Missing Authorization vulnerability in Five Star Plugins Five Star Restaurant Reservations.This issue affects Five Star Restaurant Reservations: from n/a through 2.6.16. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/restaurant-reservations/wordpress-five-star-restaurant-reservations-plugin-2-6-16-broken-access-con
tabase/vulnerability/restaurant-reservations/wordpress-five-star-restaurant-reservations-plugin-2-6-16-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33597 State: PUBLISHED Published: 2024-04-29T08:24:47.644Z Last Updated: 2024-08-02T02:36:04.402Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ProFaceOff Products: SSU Problem Types: CWE-862 Description: Missing Authorization vulnerability in ProFaceOff SSU.This issue affects SSU: from n/a through 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-s3-smart-upload/wordpress-ssu-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33598 State: PUBLISHED Published: 2024-04-26T07:17:54.603Z Last Updated: 2024-08-08T16:08:39.512Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Twinpictures Products: Annual Archive Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twinpictures Annual Archive allows Stored XSS.This issue affects Annual Archive: from n/a through 1.6.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/anual-archive/wordpress-annual-archive-plugin-1-6-0-cross-site-scripting-xss-vulnerabil
stack.com/database/vulnerability/anual-archive/wordpress-annual-archive-plugin-1-6-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-33599 State: PUBLISHED Published: 2024-05-06T19:21:54.314Z Last Updated: 2025-03-26T20:40:00.393Z Vendors: The GNU C Library Products: glibc Problem Types: CWE-121 Description: nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005 - https://security.netapp.com/advisory/ntap-20240524-0011/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html - http://www.openwall.com/lists/oss-security/2024/07/22/5
CVE ID: CVE-2024-33600 State: PUBLISHED Published: 2024-05-06T19:22:02.726Z Last Updated: 2025-03-27T14:41:14.484Z Vendors: The GNU C Library Products: glibc Problem Types: CWE-476 Description: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-20
richment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006 - https://security.netapp.com/advisory/ntap-20240524-0013/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html - http://www.openwall.com/lists/oss-security/2024/07/22/5
CVE ID: CVE-2024-33601 State: PUBLISHED Published: 2024-05-06T19:22:07.763Z Last Updated: 2025-03-18T13:55:13.348Z Vendors: The GNU C Library Products: glibc Problem Types: CWE-617 Description: nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://s
in the nscd binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 - https://security.netapp.com/advisory/ntap-20240524-0014/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html - http://www.openwall.com/lists/oss-security/2024/07/22/5
CVE ID: CVE-2024-33602 State: PUBLISHED Published: 2024-05-06T19:22:12.383Z Last Updated: 2025-02-13T17:52:21.265Z Vendors: The GNU C Library Products: glibc Problem Types: CWE-466 Description: nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008
t: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008 - https://security.netapp.com/advisory/ntap-20240524-0012/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html - http://www.openwall.com/lists/oss-security/2024/07/22/5
CVE ID: CVE-2024-33603 State: PUBLISHED Published: 2024-10-30T13:35:16.694Z Last Updated: 2024-10-30T15:03:11.265Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: LevelOne Products: WBR-6012 Problem Types: CWE-200 Description: The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
reliance on IP address for authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1985
CVE ID: CVE-2024-33604 State: PUBLISHED Published: 2024-05-08T15:01:27.377Z Last Updated: 2024-08-02T02:36:04.349Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000138894
CVE ID: CVE-2024-33605 State: PUBLISHED Published: 2024-11-26T07:37:38.329Z Last Updated: 2025-11-04T17:20:21.774Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-22 Description: Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.
[References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/ - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
CVE ID: CVE-2024-33606 State: PUBLISHED Published: 2024-06-11T20:17:57.049Z Last Updated: 2024-08-02T02:36:04.146Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: MicroDicom Products: DICOM Viewer Problem Types: CWE-939 Description: An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-163-01
CVE ID: CVE-2024-33607 State: PUBLISHED Published: 2025-08-12T16:59:40.460Z Last Updated: 2025-08-13T20:14:41.793Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) TDX module software Problem Types: Information Disclosure, CWE-125 Description: Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01192.html
CVE ID: CVE-2024-33608 State: PUBLISHED Published: 2024-05-08T15:01:25.289Z Last Updated: 2024-08-02T02:36:04.307Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-824 Description: When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000138728
CVE ID: CVE-2024-33610 State: PUBLISHED Published: 2024-11-26T07:37:44.549Z Last Updated: 2025-11-04T17:20:23.150Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-288 Description: "sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendo
etails of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/ - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
CVE ID: CVE-2024-33611 State: PUBLISHED Published: 2024-11-13T21:09:10.180Z Last Updated: 2024-11-14T19:43:07.851Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software for Windows Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01167.html
CVE ID: CVE-2024-33612 State: PUBLISHED Published: 2024-05-08T15:01:28.082Z Last Updated: 2025-08-28T19:24:59.178Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Next Central Manager Problem Types: CWE-295 Description: An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000139012
CVE ID: CVE-2024-33615 State: PUBLISHED Published: 2024-05-15T19:23:24.378Z Last Updated: 2024-08-02T02:36:04.306Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CyberPower Products: PowerPanel business Problem Types: CWE-23 Description: A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file writing to the server outside the intended scope, and could allow an attacker to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 - https://www.cyberpower.co
gram Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 - https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
CVE ID: CVE-2024-33616 State: PUBLISHED Published: 2024-11-26T07:37:51.585Z Last Updated: 2025-11-04T17:20:24.532Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: Authentication bypass Description: Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the details of affected product names, model numbers, and versions,
e the firmware update to remove the feature. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/ - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
CVE ID: CVE-2024-33617 State: PUBLISHED Published: 2024-11-13T21:10:57.679Z Last Updated: 2024-11-14T19:41:17.054Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) QAT Engine for OpenSSL software Problem Types: information disclosure, CWE-691 Description: Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html
CVE ID: CVE-2024-33619 State: PUBLISHED Published: 2024-06-21T10:18:05.007Z Last Updated: 2025-05-04T09:05:10.403Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. Additional Analyst Notes: - CVE Program Container: -