Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-57378 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-17T18:53:35.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bappe-sarker/Vulnerability-Research/tree/main/CVE-2024-57378
CVE ID: CVE-2024-57386 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T21:25:18.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Wallos v.2.41.0 allows a remote attacker to execute arbitrary code via the profile picture function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PawaritSanguanpang/CVEs/tree/main/Wallos/CVE-2024-57386
CVE ID: CVE-2024-57392 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-03-02T22:02:29.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Br1m4zz/protocol_vul_repoduce.git
CVE ID: CVE-2024-57394 State: PUBLISHED Published: 2025-04-21T00:00:00.000Z Last Updated: 2025-05-12T14:10:32.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.qianxin.com/product/detail/165 - https://github.com/cwjchoi01/CVE-2024-57394
CVE ID: CVE-2024-57395 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-01-31T20:32:34.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrary code and obtain sensitive information via the password and account number parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.hzzcka.com/ - https://github.com/qtxz54/Vul/blob/main/WeakPasswd/Safety-production-process-management-system.md
CVE ID: CVE-2024-57401 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:43:23.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://studentportal.universitysolutions.in/ - https://github.com/aksingh82/CVE-2024-57401
CVE ID: CVE-2024-57407 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-19T20:28:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/aun/Timo/issues/IBBTZI - https://gist.github.com/kaoniniang2/71f6a39535490ea2eeac371f33faec9c
CVE ID: CVE-2024-57408 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-10T23:26:34.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cool-team-official/cool-admin-java - https://github.com/kaoniniang2/exploit/blob/main/Cool-admin-File%20upload%20vulnerability.md - https://gist.github.com/kaoniniang2/2cfc83a612ba929279ed5fb8b91b45ba
CVE ID: CVE-2024-57409 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-10T23:22:02.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cool-team-official/cool-admin-java - https://github.com/kaoniniang2/exploit/blob/main/Cool-admin-xss.md - https://gist.github.com/kaoniniang2/05c2d0acdf8002b7121edff93d5230d6
CVE ID: CVE-2024-57412 State: PUBLISHED Published: 2025-09-29T00:00:00.000Z Last Updated: 2025-10-28T20:19:09.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly sending crafted TCP packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zq-star/TCP-Vuln-Report/blob/master/Omnios-r151046-5.11/tcp-rst/omnios-r151046-5.11-tcp-rst.md
CVE ID: CVE-2024-57423 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:00:18.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/harshad-alt/CVE/blob/main/CVE-2024-57423.md
CVE ID: CVE-2024-57426 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-11T21:22:36.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/netmodhttp/ - https://github.com/iamsinghmanish/My-CVEs/tree/main/CVE-2024-57426
CVE ID: CVE-2024-57427 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-06T16:39:09.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal session cookies or conduct phishing attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cinema-booking-system/ - https://github.com/ahrixia/CVE-2024-57427
CVE ID: CVE-2024-57428 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-06T21:24:32.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configurations (number[new_X] in pjActionCreate). Attackers can inject persistent JavaScript, leading to phishing, malware injection, and session hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cinema-booking-system/ - https://github.com/ahrixia/CVE-2024-57428
CVE ID: CVE-2024-57429 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-06T21:23:56.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cinema-booking-system/ - https://github.com/ahrixia/CVE-2024-57429
CVE ID: CVE-2024-57430 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-06T21:23:45.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cinema-booking-system/ - https://github.com/ahrixia/CVE-2024-57430
CVE ID: CVE-2024-57432 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-03-13T13:52:46.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for subsequent privilege management, making it is possible to forge the JWT of any user to achieve authentication bypass. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_jwt/mall_tiny_weak_jwt.md
CVE ID: CVE-2024-57433 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-03-18T18:32:28.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/peccc/restful_vul/blob/main/mall_tiny_logout_failed/mall_tiny_logout_failed.md
CVE ID: CVE-2024-57434 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-02-03T20:15:40.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md
CVE ID: CVE-2024-57435 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-02-03T20:12:31.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md
CVE ID: CVE-2024-57436 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-01-29T16:50:11.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yangzongzhuan/RuoYi - https://ruoyi.vip/ - https://github.com/peccc/restful_vul/blob/main/ruoyi_elevation_of_privileges/ruoyi_elevation_of_privileges.md
CVE ID: CVE-2024-57437 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-02-05T16:12:56.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yangzongzhuan/RuoYi - https://gitee.com/y_project/RuoYi - https://ruoyi.vip/ - https://github.com/peccc/restful_vul/blob/main/ruoyi_sqli_orderby/ruoyi_sqli_orderby.md
CVE ID: CVE-2024-57438 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-02-06T15:33:47.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yangzongzhuan/RuoYi - https://gitee.com/y_project/RuoYi - https://ruoyi.vip/ - https://github.com/peccc/restful_vul/blob/main/ruoyi_insecure_role_assignments/ruoyi_insecure_role_assignments.md
CVE ID: CVE-2024-57439 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-01-29T16:22:21.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yangzongzhuan/RuoYi - https://gitee.com/y_project/RuoYi - https://ruoyi.vip/ - https://github.com/peccc/restful_vul/blob/main/ruoyi_dos/ruoyi_dos.md
CVE ID: CVE-2024-57440 State: PUBLISHED Published: 2025-03-20T00:00:00.000Z Last Updated: 2025-03-21T18:51:59.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg function of the webproc cgi Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10418
CVE ID: CVE-2024-57450 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-15T15:32:11.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://locrian-lightning-dc7.notion.site/File-Upload-1628e5e2b1a2806a99b8faf140bd5e42
CVE ID: CVE-2024-57451 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-19T13:42:47.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://locrian-lightning-dc7.notion.site/Directory-traversal-1628e5e2b1a280fdb463c2235acc7f75
CVE ID: CVE-2024-57452 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-04T20:02:50.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://locrian-lightning-dc7.notion.site/File-Delete-1628e5e2b1a280cfb497de7b8bcff128
CVE ID: CVE-2024-57459 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-02T16:13:08.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://owasp.org/www-community/attacks/SQL_Injection - https://gist.github.com/b0mk35h/921cfa00f9ea1af66645574537d38587
CVE ID: CVE-2024-57471 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-01-23T16:26:22.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://gist.github.com/XiaoCurry/88a43c9a68694941221eb7592da39d4c
CVE ID: CVE-2024-57473 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-03-20T15:42:41.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://gist.github.com/XiaoCurry/85ae28b7437d24d9c531c970612d3bd8
CVE ID: CVE-2024-57479 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-03-18T15:02:38.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://gist.github.com/XiaoCurry/c7214be67a44a4a8858c5138ecd05984
CVE ID: CVE-2024-57480 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-03-18T17:51:26.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://gist.github.com/XiaoCurry/16213a4d68f95f17cd0fc2cd07e78a90
CVE ID: CVE-2024-57482 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-01-23T16:25:35.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://gist.github.com/XiaoCurry/d39f76a025df8b78a5f9e1aa48c16d18
CVE ID: CVE-2024-57483 State: PUBLISHED Published: 2025-01-14T00:00:00.000Z Last Updated: 2025-03-20T13:22:56.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://tenda.com - https://gist.github.com/XiaoCurry/7dd5c6ab5af9df49883535b997cef7a4
CVE ID: CVE-2024-57487 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-13T19:39:00.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-projects.org/online-car-rental-using-php-source-code/ - https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488
CVE ID: CVE-2024-57488 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-13T19:36:46.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-projects.org/online-car-rental-using-php-source-code/ - https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488
CVE ID: CVE-2024-57490 State: PUBLISHED Published: 2025-03-21T00:00:00.000Z Last Updated: 2025-03-24T17:43:43.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ioffice.cn - https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980
CVE ID: CVE-2024-57491 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-20T15:32:05.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/datavane/jobx/issues/48
CVE ID: CVE-2024-57492 State: PUBLISHED Published: 2025-03-10T00:00:00.000Z Last Updated: 2025-03-12T18:49:29.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.redox-os.org/redox-os/relibc/-/issues/200 - https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/569 - https://github.com/Marsman1996/pocs/blob/master/redox/CVE-2024-57492/README.md
CVE ID: CVE-2024-57493 State: PUBLISHED Published: 2025-04-18T00:00:00.000Z Last Updated: 2025-04-22T13:59:38.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.redox-os.org/redox-os/relibc/-/issues/201 - https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/566 - https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2024-57493
CVE ID: CVE-2024-57494 State: PUBLISHED Published: 2025-10-01T00:00:00.000Z Last Updated: 2025-10-01T19:06:23.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ShadowByte1/CVE-Reports/blob/main/CVE-2024-57494.md
CVE ID: CVE-2024-57498 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-04T19:41:26.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/saysky/ForestBlog/issues/102 - https://gist.github.com/Catherines77/ac0b554f3d755879eb12bfd69ef585b1