Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33993 State: PUBLISHED Published: 2024-08-06T13:09:42.301Z Last Updated: 2024-08-08T18:14:01.531Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in /candidate/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33994 State: PUBLISHED Published: 2024-08-06T13:09:59.584Z Last Updated: 2024-08-06T13:27:17.852Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33996 State: PUBLISHED Published: 2024-05-31T19:29:07.256Z Last Updated: 2024-08-02T02:42:59.873Z Vendors: Moodle Products: Moodle Problem Types: CWE-20 Description: Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458384#p1840909
CVE ID: CVE-2024-33997 State: PUBLISHED Published: 2024-05-31T19:38:17.633Z Last Updated: 2024-11-21T15:01:26.728Z Problem Types: CWE-79 Description: Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458385
CVE ID: CVE-2024-33998 State: PUBLISHED Published: 2024-05-31T19:46:13.685Z Last Updated: 2025-03-28T18:42:32.011Z Problem Types: CWE-79 Description: Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458386
CVE ID: CVE-2024-33999 State: PUBLISHED Published: 2024-05-31T19:53:00.995Z Last Updated: 2024-08-29T19:59:08.016Z Problem Types: CWE-20 Description: The referrer URL used by MFA required additional sanitizing, rather than being used directly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://moodle.org/mod/forum/discuss.php?d=458387
CVE ID: CVE-2024-34000 State: PUBLISHED Published: 2024-05-31T20:01:11.769Z Last Updated: 2024-11-14T20:50:53.197Z Problem Types: CWE-79 Description: ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458388
CVE ID: CVE-2024-34001 State: PUBLISHED Published: 2024-05-31T20:06:48.288Z Last Updated: 2024-08-02T02:42:59.899Z Problem Types: CWE-352 Description: Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458389
CVE ID: CVE-2024-34002 State: PUBLISHED Published: 2024-05-31T20:15:25.956Z Last Updated: 2024-10-31T17:56:04.621Z Problem Types: CWE-200 Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://moodle.org/mod/forum/discuss.php?d=458390
CVE ID: CVE-2024-34003 State: PUBLISHED Published: 2024-05-31T20:19:00.553Z Last Updated: 2024-08-02T02:42:59.891Z Problem Types: CWE-200 Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file include. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458391
CVE ID: CVE-2024-34004 State: PUBLISHED Published: 2024-05-31T20:23:02.481Z Last Updated: 2025-03-27T21:12:35.694Z Problem Types: CWE-200 Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458393
CVE ID: CVE-2024-34005 State: PUBLISHED Published: 2024-05-31T20:27:45.704Z Last Updated: 2024-08-02T02:42:59.871Z Problem Types: CWE-200 Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458394
CVE ID: CVE-2024-34006 State: PUBLISHED Published: 2024-05-31T20:36:08.390Z Last Updated: 2024-08-02T02:42:59.940Z Problem Types: CWE-838 Description: The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458395
CVE ID: CVE-2024-34007 State: PUBLISHED Published: 2024-05-31T20:40:23.608Z Last Updated: 2024-11-21T19:15:00.462Z Problem Types: CWE-352 Description: The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458396
CVE ID: CVE-2024-34008 State: PUBLISHED Published: 2024-05-31T20:44:28.973Z Last Updated: 2025-03-25T16:32:58.360Z Problem Types: CWE-352 Description: Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://moodle.org/mod/forum/discuss.php?d=458397
CVE ID: CVE-2024-34009 State: PUBLISHED Published: 2024-05-31T20:49:05.538Z Last Updated: 2024-08-02T02:42:59.894Z Problem Types: CWE-20 Description: Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=458398
CVE ID: CVE-2024-34010 State: PUBLISHED Published: 2024-04-29T15:48:14.398Z Last Updated: 2025-09-30T14:53:21.892Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent, Acronis Cyber Protect 16, Acronis True Image Problem Types: CWE-428 Description: Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:
ws) before build 42386. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-7110
CVE ID: CVE-2024-34011 State: PUBLISHED Published: 2024-04-29T15:48:24.248Z Last Updated: 2024-08-02T02:42:59.827Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent Problem Types: CWE-276 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-7171
CVE ID: CVE-2024-34012 State: PUBLISHED Published: 2024-06-14T09:43:12.271Z Last Updated: 2024-08-02T02:42:59.928Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Acronis Products: Acronis Cloud Manager Problem Types: CWE-276 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-5758
CVE ID: CVE-2024-34013 State: PUBLISHED Published: 2024-07-18T13:36:39.924Z Last Updated: 2024-08-02T02:43:00.176Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis True Image Problem Types: CWE-78 Description: Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-7035
CVE ID: CVE-2024-34014 State: PUBLISHED Published: 2024-11-11T13:20:33.777Z Last Updated: 2025-02-27T22:59:35.050Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Acronis Products: Acronis Backup plugin for cPanel & WHM, Acronis Backup extension for Plesk, Acronis Backup plugin for DirectAdmin Problem Types: CWE-61 Description: Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis B
Panel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-7592
CVE ID: CVE-2024-34015 State: PUBLISHED Published: 2024-11-11T13:21:00.396Z Last Updated: 2025-02-27T22:59:54.659Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Backup plugin for cPanel & WHM Problem Types: CWE-61 Description: Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-7601
CVE ID: CVE-2024-34016 State: PUBLISHED Published: 2024-09-16T19:44:40.674Z Last Updated: 2024-09-17T15:56:25.439Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-7188
CVE ID: CVE-2024-34017 State: PUBLISHED Published: 2024-08-29T19:14:19.067Z Last Updated: 2024-08-29T19:38:52.936Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Snap Deploy Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4505
CVE ID: CVE-2024-34018 State: PUBLISHED Published: 2024-08-29T19:15:08.649Z Last Updated: 2024-08-29T19:39:37.560Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Acronis Products: Acronis Snap Deploy Problem Types: CWE-276 Description: Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4196
CVE ID: CVE-2024-34019 State: PUBLISHED Published: 2024-08-29T19:12:46.700Z Last Updated: 2024-08-29T19:40:47.168Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Snap Deploy Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3079
CVE ID: CVE-2024-34020 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:42:59.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1223534 - http://ftp.kaist.ac.kr/hangul/code/hcode/
CVE ID: CVE-2024-34021 State: PUBLISHED Published: 2024-08-01T01:15:56.174Z Last Updated: 2024-11-26T08:04:03.424Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ELECOM CO.,LTD. Products: WRC-1167GST2, WRC-2533GS2V-B, WRC-2533GS2-B, WRC-2533GS2-W, WRC-2533GST2 Problem Types: CWE-434 Description: Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploaded to the affected product by a logged-in user with an administrative privilege, resulting in an arbitrary OS command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/secur
command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20240730-01/ - https://jvn.jp/en/jp/JVN06672778/
CVE ID: CVE-2024-34022 State: PUBLISHED Published: 2024-11-13T21:12:02.246Z Last Updated: 2024-11-14T19:37:07.177Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Thunderbolt(TM) Share software Problem Types: escalation of privilege, CWE-284 Description: Improper Access Control in some Thunderbolt(TM) Share software before version 1.0.49.9 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01204.html
CVE ID: CVE-2024-34023 State: PUBLISHED Published: 2024-11-13T21:06:01.955Z Last Updated: 2024-11-14T19:46:14.339Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Drivers Problem Types: escalation of privilege, CWE-822 Description: Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01132.html
CVE ID: CVE-2024-34024 State: PUBLISHED Published: 2024-06-18T05:44:59.077Z Last Updated: 2024-11-15T20:34:45.643Z Vendors: Fsas Technologies Inc. Products: FUJITSU Business Application ID Link Manager II, FUJITSU Software ID Link Manager, FUJITSU Software TIME CREATOR ID Link Manager, FUJITSU Software TIME CREATOR ID Link Manager SaaS Problem Types: Observable response discrepancy Description: Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
e if a username is valid or not. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html - https://jvn.jp/en/jp/JVN65171386/
CVE ID: CVE-2024-34025 State: PUBLISHED Published: 2024-05-15T19:17:37.188Z Last Updated: 2024-08-02T02:42:59.906Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CyberPower Products: PowerPanel business Problem Types: CWE-259 Description: CyberPower PowerPanel business application code contains a hard-coded set of authentication credentials. This could result in an attacker bypassing authentication and gaining administrator privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 - https://www.cyberpower.com/global/en/product/sku/powerpanel_business
isa.gov/news-events/ics-advisories/icsa-24-123-01 - https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
CVE ID: CVE-2024-34026 State: PUBLISHED Published: 2024-09-18T14:35:55.073Z Last Updated: 2024-09-18T18:23:23.132Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: OpenPLC Products: OpenPLC_v3 Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligenc
lity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2005
CVE ID: CVE-2024-34027 State: PUBLISHED Published: 2024-06-24T13:56:49.389Z Last Updated: 2025-05-04T09:05:14.184Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .total_valid_block_count may be corrupted after SPO case. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8
ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8468aa153b - https://git.kernel.org/stable/c/b5bac43875aa27ec032dbbb86173baae6dce6182 - https://git.kernel.org/stable/c/5d47d63883735718825ca2efc4fca6915469774f - https://git.kernel.org/stable/c/329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b - https://git.kernel.org/stable/c/69136304fd144144a4828c7b7b149d0f80321ba4 - https://git.kernel.org/stable/c/0a4ed2d97cb6d044196cc3e726b6699222b41019
CVE ID: CVE-2024-34028 State: PUBLISHED Published: 2024-11-13T21:09:03.608Z Last Updated: 2024-11-14T19:43:58.839Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/c
of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01163.html
CVE ID: CVE-2024-34029 State: PUBLISHED Published: 2024-05-26T13:27:27.082Z Last Updated: 2024-08-02T02:42:59.966Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost versions 9.5.x <= 9.5.3, 9.7.x <= 9.7.1 and 8.1.x <= 8.1.12 fail to perform a proper authorization check in the /api/v4/groups/<group-id>/channels/<channel-id>/link endpoint which allows a user to learn the members of an AD/LDAP group that is linked to a team by adding the group to a channel, even if the user has no access to the team. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References
e user has no access to the team. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-34030 State: PUBLISHED Published: 2024-06-24T13:56:50.042Z Last Updated: 2025-05-04T09:05:15.487Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocation failure Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to prevent a NULL pointer dereference in this case. [bhelgaas: commit log] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b5f31d1470c4fdfae368feeb389768ba8d24fb34 - https://git.kernel.org/stable/c/598e4a37a2f8da9144ba1fab04320c32169b6d0d - https://git.kernel.org/stable/c/e6
8d24fb34 - https://git.kernel.org/stable/c/598e4a37a2f8da9144ba1fab04320c32169b6d0d - https://git.kernel.org/stable/c/e6f7d27df5d208b50cae817a91d128fb434bb12c
CVE ID: CVE-2024-34031 State: PUBLISHED Published: 2024-05-03T00:18:13.497Z Last Updated: 2024-08-12T20:09:18.872Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02