Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-38413 State: PUBLISHED Published: 2025-02-03T16:51:17.232Z Last Updated: 2025-02-03T17:43:10.254Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while processing frame packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-38414 State: PUBLISHED Published: 2025-02-03T16:51:18.469Z Last Updated: 2025-02-03T17:42:51.710Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while processing information on firmware image during core initialization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-38415 State: PUBLISHED Published: 2024-11-04T10:04:54.717Z Last Updated: 2024-11-04T14:59:57.323Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while handling session errors from firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-38416 State: PUBLISHED Published: 2025-02-03T16:51:19.757Z Last Updated: 2025-02-03T17:42:33.419Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure during audio playback. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-38417 State: PUBLISHED Published: 2025-02-03T16:51:20.964Z Last Updated: 2025-02-03T17:38:39.540Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while processing IO control commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-38418 State: PUBLISHED Published: 2025-02-03T16:51:22.205Z Last Updated: 2025-02-03T17:37:35.667Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-367 Description: Memory corruption while parsing the memory map info in IOCTL calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-38419 State: PUBLISHED Published: 2024-11-04T10:04:56.066Z Last Updated: 2024-11-04T14:54:40.181Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-38420 State: PUBLISHED Published: 2025-02-03T16:51:23.408Z Last Updated: 2025-02-03T17:36:04.536Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while configuring a Hypervisor based input virtual device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-38421 State: PUBLISHED Published: 2024-11-04T10:04:57.496Z Last Updated: 2024-11-04T14:46:15.631Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing GPU commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-38422 State: PUBLISHED Published: 2024-11-04T10:04:59.057Z Last Updated: 2024-11-04T14:53:56.837Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-680 Description: Memory corruption while processing voice packet with arbitrary data received from ADSP. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-38423 State: PUBLISHED Published: 2024-11-04T10:05:00.972Z Last Updated: 2024-11-04T14:53:37.988Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing GPU page table switch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-38424 State: PUBLISHED Published: 2024-11-04T10:05:02.628Z Last Updated: 2024-11-16T04:55:26.866Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption during GNSS HAL process initialization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-38425 State: PUBLISHED Published: 2024-10-07T12:59:00.295Z Last Updated: 2024-10-07T13:09:05.945Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-285 Description: Information disclosure while sending implicit broadcast containing APP launch information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-38426 State: PUBLISHED Published: 2025-03-03T10:07:19.503Z Last Updated: 2025-03-03T12:30:45.751Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-287 Description: While processing the authentication message in UE, improper authentication may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE ID: CVE-2024-38427 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-02T04:12:24.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/InternationalColorConsortium/DemoIccMAX/pull/66 - https://github.com/InternationalColorConsortium/DemoIccMAX/pull/66/commits/85ce74ef19fb0751c7e188b06daed22fe74c332c
CVE ID: CVE-2024-38428 State: PUBLISHED Published: 2024-06-16T00:00:00.000Z Last Updated: 2025-04-21T10:03:18.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.gnu.org/archive/html/bug-wget/2024-06/msg00005.html - https://git.savannah.gnu.org/cgit/wget.git/commit/?id=ed0c7c7e0e8f7298352646b2fd6e06a11e242ace
CVE ID: CVE-2024-38429 State: PUBLISHED Published: 2024-07-30T08:45:17.371Z Last Updated: 2024-08-02T04:12:24.812Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Matrix Products: Tafnit v8 Problem Types: CWE-552 Description: Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38430 State: PUBLISHED Published: 2024-07-30T08:47:23.881Z Last Updated: 2024-08-02T04:12:25.202Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Matrix Products: Tafnit v8 Problem Types: CWE-79 Description: Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38431 State: PUBLISHED Published: 2024-07-30T08:48:55.837Z Last Updated: 2024-08-02T04:12:24.561Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Matrix Products: Tafnit v8 Problem Types: CWE-204 Description: Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38432 State: PUBLISHED Published: 2024-07-30T08:50:23.808Z Last Updated: 2024-08-02T04:12:24.563Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Matrix Products: Tafnit v8 Problem Types: CWE-646 Description: Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38433 State: PUBLISHED Published: 2024-07-11T07:50:45.579Z Last Updated: 2024-08-02T04:12:24.827Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Nuvoton Products: NPCM7xx (Poleg) BootBlock Problem Types: CWE-305 Description: Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/fa
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38434 State: PUBLISHED Published: 2024-07-21T07:08:52.056Z Last Updated: 2024-08-02T04:12:24.698Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Unitronics Products: Vision PLC Problem Types: CWE-676 Description: Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38435 State: PUBLISHED Published: 2024-07-21T07:10:04.460Z Last Updated: 2024-08-02T04:12:24.743Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Unitronics Products: Vision PLC Problem Types: CWE-703 Description: Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38436 State: PUBLISHED Published: 2024-07-21T07:12:35.189Z Last Updated: 2024-08-02T04:12:24.804Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Commugen Products: SOX 365 Problem Types: CWE-79 Description: Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38437 State: PUBLISHED Published: 2024-07-21T07:17:40.752Z Last Updated: 2024-08-02T04:12:24.976Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: D-Link Products: DSL-225 Problem Types: CWE-288 Description: D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38438 State: PUBLISHED Published: 2024-07-21T07:19:42.556Z Last Updated: 2024-08-02T04:12:24.576Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: D-Link Products: DSL-225 Problem Types: CWE-294 Description: D-Link - CWE-294: Authentication Bypass by Capture-replay Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-38439 State: PUBLISHED Published: 2024-06-16T00:00:00.000Z Last Updated: 2025-11-03T21:55:36.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c. 2.4.1 and 3.1.19 are also fixed versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Netatalk/netatalk/issues/1096 - https://github.com/Netatalk/netatalk/blob/90d91a9ac9a7d6132ab7620d31c8c23400949206/etc/uams/uams_pam.c#L316 - https://github.com/Netatalk/netatalk/security/advisories
1a9ac9a7d6132ab7620d31c8c23400949206/etc/uams/uams_pam.c#L316 - https://github.com/Netatalk/netatalk/security/advisories/GHSA-8r68-857c-4rqc - https://netatalk.io/security/CVE-2024-38439
CVE ID: CVE-2024-38440 State: PUBLISHED Published: 2024-06-16T00:00:00.000Z Last Updated: 2025-11-03T21:55:37.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c. The original issue 1097 report stated: 'The latest version of Netatalk (v3.2.0) contains a security vulnerability. This vulnerability arises due to a lack of validation for the length field after parsing user-provided data, leading to an out-of-bounds heap write of one byte (\0). Under specific configurations, this can result i
provided data, leading to an out-of-bounds heap write of one byte (\0). Under specific configurations, this can result in reading metadata of the next heap block, potentially causing a Denial of Service (DoS) under certain heap layouts or with ASAN enabled. ... The vulnerability is located in the FPLoginExt operation of Netatalk, in the BN_bin2bn function found in /etc/uams/uams_dhx_pam.c ... if (!(bn = BN_bin2bn((unsigned char *)ibuf, KEYSIZE, NULL))) ... threads ... [#0] Id 1, Name: "afpd", stopped 0x7ffff4304e58 in ?? (), reason: SIGSEGV ... [#0] 0x7ffff4304e58 mov BYTE PTR [r14+0x8], 0x0 ... mov rdx, QWORD PTR [rsp+0x18] ... afp_login_ext(obj=<optimized out>, ibuf=0x62d000010424 "", ibuf
PTR [r14+0x8], 0x0 ... mov rdx, QWORD PTR [rsp+0x18] ... afp_login_ext(obj=<optimized out>, ibuf=0x62d000010424 "", ibuflen=0xffffffffffff0015, rbuf=<optimized out>, rbuflen=<optimized out>) ... afp_over_dsi(obj=0x5555556154c0 <obj>).' 2.4.1 and 3.1.19 are also fixed versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Netatalk/netatalk/issues/1097 - https://github.com/Netatalk/netatalk/blob/90d91a9ac9a7d6132ab7620d31c8c23400949206/etc/uams/uams_dhx_pam.c#L199-L200 - https://github.com/Netatalk/netatalk/security/advisories/GHSA-mxx4-9fhm-r3w5 - https://netatalk.io/security/CVE-2024-38440
CVE ID: CVE-2024-38441 State: PUBLISHED Published: 2024-06-16T00:00:00.000Z Last Updated: 2025-11-03T21:55:39.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Netatalk/netatalk/issues/1098 - https://github.com/Netatalk/netatalk/blob/90d91a9ac9a7d6132ab7620d31c8c23400949206/etc/afpd/directory.c#L2333 - https://github.com/Netatalk/netatalk/security/advisori
1a9ac9a7d6132ab7620d31c8c23400949206/etc/afpd/directory.c#L2333 - https://github.com/Netatalk/netatalk/security/advisories/GHSA-mj6v-cr68-mj9q - https://netatalk.io/security/CVE-2024-38441
CVE ID: CVE-2024-38443 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-02T04:12:24.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/TheAlgorithms/C/issues/1394
CVE ID: CVE-2024-38446 State: PUBLISHED Published: 2024-07-17T00:00:00 Last Updated: 2024-11-07T16:01:16.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user (without their consent or knowledge) via a modified UUID in a POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe
CVE ID: CVE-2024-38447 State: PUBLISHED Published: 2024-07-17T00:00:00 Last Updated: 2024-08-02T04:12:24.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe
CVE ID: CVE-2024-38448 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-02T04:12:24.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.gnu.org/archive/html/bug-global/2024-05/msg00009.html - https://cvs.savannah.gnu.org/viewvc/global/global/htags/htags.c?revision=1.236&view=markup
CVE ID: CVE-2024-38449 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-11-06T16:23:56.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and possibly earlier versions allows remote authenticated attackers to browse parent directories and read the content of files outside the scope of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kasmweb.atlassian.net/servicedesk/customer/portal/3/topic/30ffee7f-4b85-4783-b118-6ae4fd8b0c52 - https://kasmweb.com/kasmvnc - https://github.com/kasmtech/KasmVNC/issues/254
CVE ID: CVE-2024-38453 State: PUBLISHED Published: 2024-07-03T00:00:00 Last Updated: 2024-08-02T04:12:25.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://appexchange.salesforce.com/appxListingDetail?listingId=a0N3A00000FKAoOUAX - https://deneyed.com/blog/avalara/
CVE ID: CVE-2024-38454 State: PUBLISHED Published: 2024-06-16T00:00:00.000Z Last Updated: 2025-03-17T14:07:46.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExpressionEngine before 7.4.11 allows XSS. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ExpressionEngine/ExpressionEngine/pull/4279 - https://github.com/ExpressionEngine/ExpressionEngine/compare/7.4.10...7.4.11
CVE ID: CVE-2024-38456 State: PUBLISHED Published: 2024-09-03T00:00:00 Last Updated: 2024-09-03T19:21:24.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vivavis.com/en/solution/scada-en/high-leit/ - https://www.vivavis.com/en/vivavis-high-leit-rce-vu
erences: - https://www.vivavis.com/en/solution/scada-en/high-leit/ - https://www.vivavis.com/en/vivavis-high-leit-rce-vulnerability-cve-2024-38456/ - https://www.schutzwerk.com/blog/schutzwerk-sa-2024-001/
CVE ID: CVE-2024-38457 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-02T04:12:25.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xenforo before 2.2.16 allows CSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://xenforo.com/community/threads/xenforo-2-1-15-patch-1-2-2-16-patch-2-and-xenforo-media-gallery-2-1-9-2-2-6-released-includes-security-fixes.222133/ - http://seclists.org/fulldisclosure/2024/Jul/11
CVE ID: CVE-2024-38458 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-20T16:54:42.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xenforo before 2.2.16 allows code injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenforo.com/community/threads/xenforo-2-1-15-patch-1-2-2-16-patch-2-and-xenforo-media-gallery-2-1-9-2-2-6-released-includes-security-fixes.222133/ - http://seclists.org/fulldisclosure/2024/Jul/12
CVE ID: CVE-2024-38459 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-02T04:12:24.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/langchain-ai/langchain/pull/22860 - https://github.com/langchain-ai/langchain/commit/ce0b0f22a175139df8f41cdcfb4d2af411112009 - https://github.com/langchain-ai/langchain/compare/langchain-experimental==0.0.60...langch
139df8f41cdcfb4d2af411112009 - https://github.com/langchain-ai/langchain/compare/langchain-experimental==0.0.60...langchain-experimental==0.0.61