Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7250 State: PUBLISHED Published: 2024-07-29T21:18:17.745Z Last Updated: 2024-08-01T21:52:31.284Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Comodo Products: Internet Security Pro Problem Types: CWE-59 Description: Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the cmdagent executable. By creating a symbolic
in order to exploit this vulnerability. The specific flaw exists within the cmdagent executable. By creating a symbolic link, an attacker can abuse the agent to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22829. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-955/
CVE ID: CVE-2024-7251 State: PUBLISHED Published: 2024-07-29T21:18:22.094Z Last Updated: 2024-08-01T21:52:31.008Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Comodo Products: Internet Security Pro Problem Types: CWE-59 Description: Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the cmdagent executable. By creating a symbolic
in order to exploit this vulnerability. The specific flaw exists within the cmdagent executable. By creating a symbolic link, an attacker can abuse the agent to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22832. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-956/
CVE ID: CVE-2024-7252 State: PUBLISHED Published: 2024-07-29T21:18:26.806Z Last Updated: 2024-08-01T21:52:31.268Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Comodo Products: Internet Security Pro Problem Types: CWE-59 Description: Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the cmdagent executable. By creating a symbolic
in order to exploit this vulnerability. The specific flaw exists within the cmdagent executable. By creating a symbolic link, an attacker can abuse the agent to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22831. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-957/
CVE ID: CVE-2024-7253 State: PUBLISHED Published: 2024-11-22T21:30:47.553Z Last Updated: 2024-11-26T16:30:46.189Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NoMachine Products: NoMachine Problem Types: CWE-427 Description: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within nxnode.exe. The process loads a library from an unsecured location. An attacker can
ty. The specific flaw exists within nxnode.exe. The process loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. . Was ZDI-CAN-24039. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1042/ - https://kb.nomachine.com/TR07V11184
CVE ID: CVE-2024-7254 State: PUBLISHED Published: 2024-09-19T00:18:45.824Z Last Updated: 2025-09-08T09:37:53.702Z Vendors: Google Products: Protocol Buffers, protobuf-java, protobuf-javalite, protobuf-kotlin, protobuf-kotllin-lite, google-protobuf [JRuby Gem] Problem Types: CWE-400, CWE-674 Description: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker. Additi
obuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa
CVE ID: CVE-2024-7255 State: PUBLISHED Published: 2024-08-01T18:05:32.785Z Last Updated: 2024-10-29T19:47:42.495Z Vendors: Google Products: Chrome Problem Types: CWE-125 Description: Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/352872238
CVE ID: CVE-2024-7256 State: PUBLISHED Published: 2024-08-01T18:05:33.105Z Last Updated: 2024-08-03T18:04:16.512Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/354748060
CVE ID: CVE-2024-7257 State: PUBLISHED Published: 2024-08-03T09:37:18.649Z Last Updated: 2024-08-03T18:09:05.039Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: yaycommerce Products: YayExtra – WooCommerce Extra Product Options Problem Types: CWE-434 Description: The YayExtra – WooCommerce Extra Product Options plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_upload_file function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analys
to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/753a4f7a-7bd4-43a4-b8fb-9e982239ba0e?source=cve - https://wordpress.org/plugins/yayextra/#developers - https://plugins.trac.wordpress.org/browser/yayextra/tags/1.3.6/includes/Classes/ProductPage.php#L1413 - https://plugins.trac.wordpress.org/browser/yayextra/tags/1.3.6/includes/Classes/ProductPage.php#L1452 - https://plugins.trac.wordpress.org/changeset/3129731/
CVE ID: CVE-2024-7258 State: PUBLISHED Published: 2024-08-23T04:30:07.912Z Last Updated: 2024-08-23T13:42:15.081Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: aukejomm Products: WooCommerce Google Feed Manager Problem Types: CWE-862 Description: The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wppfm_removeFeedFile' function in all versions up to, and including, 2.8.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file
and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ffd6e18d-9173-4911-af64-5d54c6d2e052?source=cve - https://plugins.trac.wordpress.org/browser/wp-product-feed-manager/trunk/includes/data/js/wppfm_ajaxdatahandling.js#L537 - https://plugins.trac.wordpress.org/browser/wp-product-feed-manager/trunk/includes/data/js/wppfm_ajaxdatahandling.js#L546 - https://plugins.trac.wordpress.org/browser/wp-product-feed-manager/trunk/includes/data/js/wppfm_ajaxdatahandling.js#L575 - ht
://plugins.trac.wordpress.org/browser/wp-product-feed-manager/trunk/includes/data/js/wppfm_ajaxdatahandling.js#L575 - https://plugins.trac.wordpress.org/changeset/3137475/
CVE ID: CVE-2024-7259 State: PUBLISHED Published: 2024-09-26T15:15:56.980Z Last Updated: 2025-11-20T20:56:38.341Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Virtualization 4 Problem Types: CWE-312 Description: A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-7259 - https://bugzilla.redhat.com/show_bug.cgi?id=2314229
CVE ID: CVE-2024-7260 State: PUBLISHED Published: 2024-09-09T18:49:59.437Z Last Updated: 2025-11-20T20:56:40.819Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat build of Keycloak 24 Problem Types: CWE-601 Description: An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referrer_uri parameters are made to trick a user to visit a malicious webpage. A trusted URL can trick users and automation into believing that the URL is safe, when, in fact, it redirects to a malicious server. This issue can result in a victim inadvertently trusting the d
safe, when, in fact, it redirects to a malicious server. This issue can result in a victim inadvertently trusting the destination of the redirect, potentially leading to a successful phishing attack or other types of attacks. Once a crafted URL is made, it can be sent to a Keycloak admin via email for example. This will trigger this vulnerability when the user visits the page and clicks the link. A malicious actor can use this to target users they know are Keycloak admins for further attacks. It may also be possible to bypass other domain-related security checks, such as supplying this as a OAuth redirect uri. The malicious actor can further obfuscate the redirect_uri using URL encoding, to
upplying this as a OAuth redirect uri. The malicious actor can further obfuscate the redirect_uri using URL encoding, to hide the text of the actual malicious website domain. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6502 - https://access.redhat.com/errata/RHSA-2024:6503 - https://access.redhat.com/security/cve/CVE-2024-7260 - https://bugzilla.redhat.com/show_bug.cgi?id=2301875
CVE ID: CVE-2024-7261 State: PUBLISHED Published: 2024-09-03T02:10:25.112Z Last Updated: 2024-09-05T15:36:14.807Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NWA1123ACv3 firmware, WAC500 firmware, WAX655E firmware, WBE530 firmware, USG LITE 60AX firmware Problem Types: CWE-78 Description: The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2)
(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-in-aps-and-security-router-devices-09-03-2024
CVE ID: CVE-2024-7262 State: PUBLISHED Published: 2024-08-15T14:24:44.511Z Last Updated: 2025-10-21T22:55:47.179Z Vendors: Kingsoft Products: WPS Office Problem Types: CWE-22 Description: Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wps.com/whatsnew/pc/20240422/
CVE ID: CVE-2024-7263 State: PUBLISHED Published: 2024-08-15T14:29:04.097Z Last Updated: 2024-08-22T05:46:47.221Z Vendors: Kingsoft Products: WPS Office Problem Types: CWE-22 Description: Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.1.0.17119 to mitigate CVE-2024-7262 was not restrictive enough. Another parameter was not properly sanitized which leads to the execution of an arbitrary Windows library. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wps.com/whatsnew/pc/2024042
indows library. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wps.com/whatsnew/pc/20240422/
CVE ID: CVE-2024-7264 State: PUBLISHED Published: 2024-07-31T08:08:14.585Z Last Updated: 2025-11-03T22:32:51.400Z Vendors: curl Products: curl Problem Types: CWE-125 Out-of-bounds Read Description: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/
but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://curl.se/docs/CVE-2024-7264.json - https://curl.se/docs/CVE-2024-7264.html - https://hackerone.com/reports/2629968 - http://www.openwall.com/lists/oss-security/2024/07/31/1
CVE ID: CVE-2024-7265 State: PUBLISHED Published: 2024-08-07T10:58:25.223Z Last Updated: 2025-03-17T08:34:48.839Z Vendors: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Products: EZD RP Problem Types: CWE-863 Description: Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-2024-7265/ - https://ce
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-2024-7265/ - https://cert.pl/posts/2024/08/CVE-2024-7265/ - https://www.gov.pl/web/ezd-rp
CVE ID: CVE-2024-7266 State: PUBLISHED Published: 2024-08-07T10:58:47.839Z Last Updated: 2025-03-25T14:31:55.797Z Vendors: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Products: EZD RP Problem Types: CWE-863 Description: Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-2024-7265/ - https://cert.pl/posts/2024/08/CVE-
ISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-2024-7265/ - https://cert.pl/posts/2024/08/CVE-2024-7265/ - https://www.gov.pl/web/ezd-rp
CVE ID: CVE-2024-7267 State: PUBLISHED Published: 2024-08-07T10:59:17.613Z Last Updated: 2025-03-17T08:35:32.535Z Vendors: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Products: EZD RP Problem Types: CWE-213 Description: Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials. This issue affects EZD RP all versions before 19.6 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-2024-7265/ - https://cert.pl/posts/2024/08/CVE-2024-7265/ - https://www.gov.pl/web/ezd-rp
CVE ID: CVE-2024-7269 State: PUBLISHED Published: 2024-08-28T10:29:48.889Z Last Updated: 2024-08-28T13:22:27.559Z Vendors: ConnX Products: ESP HR Management Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any answer. The finder provided the information that this issue affects ESP HR Management versions before 6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-202
ns before 6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/08/CVE-2024-7269/ - https://cert.pl/posts/2024/08/CVE-2024-7269/ - https://connx.com.au/
CVE ID: CVE-2024-7272 State: PUBLISHED Published: 2024-08-08T20:24:10.987Z Last Updated: 2024-08-09T17:22:37.764Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: FFmpeg Problem Types: CWE-122 Description: A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in version 6.0 by 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 but a backport for 5.1 was forgotten. The exploit has been disclosed to the public and may be used. Upgrading to version
but a backport for 5.1 was forgotten. The exploit has been disclosed to the public and may be used. Upgrading to version 5.1.6 and 6.0 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273945 - https://vuldb.com/?ctiid.273945 - https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc5 - https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc6 - https://ffmpeg.org/
CVE ID: CVE-2024-7273 State: PUBLISHED Published: 2024-07-30T20:31:04.105Z Last Updated: 2024-08-01T21:52:31.075Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Alton Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. The manipulation of the argument rcode leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273142 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog
B-273142 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.273142 - https://vuldb.com/?ctiid.273142 - https://vuldb.com/?submit.381089 - https://github.com/DeepMountains/Mirage/blob/main/CVE8-1.md
CVE ID: CVE-2024-7274 State: PUBLISHED Published: 2024-07-30T21:31:04.387Z Last Updated: 2024-08-01T21:52:31.655Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: itsourcecode Products: Alton Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of the file /reservation_status.php. The manipulation of the argument rcode leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273143. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-273143. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.273143 - https://vuldb.com/?ctiid.273143 - https://vuldb.com/?submit.381091 - https://github.com/DeepMountains/Mirage/blob/main/CVE8-2.md
CVE ID: CVE-2024-7275 State: PUBLISHED Published: 2024-07-30T22:31:04.041Z Last Updated: 2024-08-01T21:52:31.409Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: itsourcecode Products: Alton Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/category_save.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273144. Additional Analyst Notes: - CISA ADP Vuln
he public and may be used. The identifier of this vulnerability is VDB-273144. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.273144 - https://vuldb.com/?ctiid.273144 - https://vuldb.com/?submit.381093 - https://github.com/DeepMountains/Mirage/blob/main/CVE8-3.md
CVE ID: CVE-2024-7276 State: PUBLISHED Published: 2024-07-30T23:00:06.862Z Last Updated: 2024-08-01T21:52:31.560Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: itsourcecode Products: Alton Management System Problem Types: CWE-89 Description: A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/member_save.php. The manipulation of the argument last/first leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273145 was assigned to this vulnerability. Additional Analy