Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36502 State: PUBLISHED Published: 2024-06-14T07:23:20.096Z Last Updated: 2024-08-02T03:37:05.276Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE ID: CVE-2024-36503 State: PUBLISHED Published: 2024-06-14T07:25:07.573Z Last Updated: 2024-08-02T03:37:05.278Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-908 Description: Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE ID: CVE-2024-36504 State: PUBLISHED Published: 2025-01-14T14:09:58.824Z Last Updated: 2025-02-18T21:38:19.515Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-125 Description: An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-473
CVE ID: CVE-2024-36505 State: PUBLISHED Published: 2024-08-13T15:51:56.981Z Last Updated: 2024-08-15T14:16:57.399Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiOS Problem Types: CWE-284 Description: An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24
system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-012
CVE ID: CVE-2024-36506 State: PUBLISHED Published: 2025-01-14T14:09:52.227Z Last Updated: 2025-01-15T14:55:47.884Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiClientEMS Problem Types: CWE-940 Description: An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-078
CVE ID: CVE-2024-36507 State: PUBLISHED Published: 2024-11-12T18:53:46.362Z Last Updated: 2024-11-12T21:29:44.901Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C) Vendors: Fortinet Products: FortiClientWindows Problem Types: CWE-426 Description: A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-205
CVE ID: CVE-2024-36508 State: PUBLISHED Published: 2025-02-11T16:09:07.321Z Last Updated: 2025-02-12T15:53:19.632Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-22 Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ith diagnose privileges to delete files on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-147
CVE ID: CVE-2024-36509 State: PUBLISHED Published: 2024-11-12T18:53:57.238Z Last Updated: 2024-11-12T20:40:18.997Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:P/RL:U/RC:R) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-497 Description: An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version 6.3.23 and below may allow an authenticated attacker to access the encrypted passwords of other administrators via the "Log Access Event" logs page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
r administrators via the "Log Access Event" logs page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-180
CVE ID: CVE-2024-36510 State: PUBLISHED Published: 2025-01-14T14:09:49.286Z Last Updated: 2025-01-15T14:51:13.708Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:X/RC:X) Vendors: Fortinet Products: FortiClientEMS, FortiSOAR Problem Types: CWE-204 Description: An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
e valid users via observing login request responses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-071
CVE ID: CVE-2024-36511 State: PUBLISHED Published: 2024-09-10T14:37:47.230Z Last Updated: 2024-09-10T17:34:14.478Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:R) Vendors: Fortinet Products: FortiADC Problem Types: CWE-358 Description: An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature Additional An
r, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-22-256
CVE ID: CVE-2024-36512 State: PUBLISHED Published: 2025-01-14T14:08:44.576Z Last Updated: 2025-01-14T20:56:36.826Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-22 Description: An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psir
or HTTPS requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-152
CVE ID: CVE-2024-36513 State: PUBLISHED Published: 2024-11-12T18:53:41.455Z Last Updated: 2024-11-12T20:32:26.256Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:T/RC:C) Vendors: Fortinet Products: FortiClientWindows Problem Types: CWE-270 Description: A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-144
CVE ID: CVE-2024-36514 State: PUBLISHED Published: 2024-08-23T13:37:56.318Z Last Updated: 2024-08-23T14:44:02.846Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-36514.html
CVE ID: CVE-2024-36515 State: PUBLISHED Published: 2024-08-23T13:37:02.810Z Last Updated: 2024-08-23T14:45:08.096Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-36515.html
CVE ID: CVE-2024-36516 State: PUBLISHED Published: 2024-08-23T13:36:05.237Z Last Updated: 2024-08-23T15:20:14.680Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-36516.html
CVE ID: CVE-2024-36517 State: PUBLISHED Published: 2024-08-23T13:34:01.453Z Last Updated: 2024-08-23T15:21:13.955Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-36517.html
CVE ID: CVE-2024-36518 State: PUBLISHED Published: 2024-08-12T07:13:49.843Z Last Updated: 2024-08-16T04:01:43.100Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-36518.html
CVE ID: CVE-2024-36522 State: PUBLISHED Published: 2024-07-12T12:13:51.884Z Last Updated: 2025-02-13T17:52:57.312Z Vendors: Apache Software Foundation Products: Apache Wicket Problem Types: CWE-74 Description: The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/w613qh7yors840pbx00l1pq6wkl9jzkc - http://www.openwall.com/lists/oss-security/2024/07/12/2
CVE ID: CVE-2024-36523 State: PUBLISHED Published: 2024-06-12T00:00:00 Last Updated: 2024-09-13T14:58:54.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/648540858/wvp-GB28181-pro/issues/1456
CVE ID: CVE-2024-36526 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-08-02T03:37:05.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zkteco.eu/downloads/zkbio-cvsecurity-installation-files - https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-36526.md
CVE ID: CVE-2024-36527 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-02T03:37:05.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/7a6163/25fef08f75eed219c8ca21e332d6e911
CVE ID: CVE-2024-36528 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-08-21T16:58:47.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mat4mee.notion.site/2-bug-chains-in-nukeViet-lead-to-RCE-bdd42b20b05a448fbe87c752b41bb15f
CVE ID: CVE-2024-36531 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-08-02T03:37:05.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mat4mee.notion.site/Module-upload-in-nukeViet-leads-to-RCE-01ff3ff4c80d402d8c7c8a2b15a24c33
CVE ID: CVE-2024-36532 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-08-02T03:37:05.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/43488e1d41110a5610146b87b2e88a02
CVE ID: CVE-2024-36533 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T03:37:05.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/a0e05a26ecc80bd970ac4649faecc930
CVE ID: CVE-2024-36534 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-27T19:44:09.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HouqiyuA/0de688e6b874e480ddc1154350368450
CVE ID: CVE-2024-36535 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-13T16:51:57.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/2950c3993cdeff23afcbd73ba7a33879
CVE ID: CVE-2024-36536 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T03:37:05.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/381f100f2ba82a8ada03994aac5bb2e8
CVE ID: CVE-2024-36537 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T03:37:05.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/27879a6366a65fcd5f6c6fcbcf68d8e3
CVE ID: CVE-2024-36538 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T03:37:05.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/f06d1fa07b5287b862c1e0b288f301e5
CVE ID: CVE-2024-36539 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T03:37:05.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/c92f9ec979653dceeea947afd0b47a80
CVE ID: CVE-2024-36540 State: PUBLISHED Published: 2024-07-24T00:00:00.000Z Last Updated: 2025-03-13T18:38:34.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/a4834f3c8450f9d89e2bc4d5c4beef6a
CVE ID: CVE-2024-36541 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T03:37:05.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/f972d1c152f3b8127af01206f7c2af0d
CVE ID: CVE-2024-36542 State: PUBLISHED Published: 2024-07-25T00:00:00.000Z Last Updated: 2025-03-13T20:20:27.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/e1685843b6f42b47dbf97e2e92e63428
CVE ID: CVE-2024-36543 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-02T03:37:05.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector (bypassing Kafka ACL if it exists), and potentially steal Kafka SASL credentials, by querying the MirrorMaker Kafka REST API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://strimzi.com - https://github.com/almounah/vulnerability-research/
ichment: - CVE Program Container: References: - http://strimzi.com - https://github.com/almounah/vulnerability-research/tree/main/CVE-2024-36543
CVE ID: CVE-2024-36547 State: PUBLISHED Published: 2024-06-04T14:44:18.532Z Last Updated: 2025-02-13T15:59:21.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/da271133/cms/blob/main/32/csrf.md
CVE ID: CVE-2024-36548 State: PUBLISHED Published: 2024-06-04T14:45:52.245Z Last Updated: 2025-02-13T15:59:22.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/da271133/cms/blob/main/31/csrf.md
CVE ID: CVE-2024-36549 State: PUBLISHED Published: 2024-06-04T14:47:09.634Z Last Updated: 2025-02-13T15:59:22.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/da271133/cms/blob/main/30/csrf.md
CVE ID: CVE-2024-36550 State: PUBLISHED Published: 2024-06-04T14:48:31.138Z Last Updated: 2025-02-13T15:59:23.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/da271133/cms/blob/main/29/csrf.md
CVE ID: CVE-2024-36553 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-10T15:24:19.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+Hijack+Children%E2%80%99s+Smartwatches&language=en&pid=diva2%3A1933447&aq=%5B%5B%5D%5D&sf=undergraduate&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=-8296
CVE ID: CVE-2024-36554 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-10T14:49:41.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me KW-60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=1&af=%5B%5D&searchType=SIMPLE&sortOrder2=title_sort_asc&query=Exploiting+Vulnerabilities+to+Remotely+