Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
llows a local attacker to execute a malicious code with administrative privileges by tampering with a specific file that is not protected by the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf - https://jvn.jp/vu/JVNVU98894016/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03
CVE ID: CVE-2024-1575 State: PUBLISHED Published: 2024-07-23T01:39:53.232Z Last Updated: 2024-08-01T18:40:21.490Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: WBE660S firmware Problem Types: CWE-269 Description: The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-
eferences: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024
CVE ID: CVE-2024-1576 State: PUBLISHED Published: 2024-06-12T13:47:00.868Z Last Updated: 2024-08-01T18:40:21.438Z Vendors: Jan Syski Products: MegaBIP Problem Types: CWE-89 Description: SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/06/CVE-2024-1576/ - https://cert.pl/posts/2024/06/CVE-2024-1576/ - https://megabip.pl/ - https://www.gov.pl/web/cyfryzacja/rekomend
-1576/ - https://cert.pl/posts/2024/06/CVE-2024-1576/ - https://megabip.pl/ - https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej
CVE ID: CVE-2024-1577 State: PUBLISHED Published: 2024-06-12T13:47:31.899Z Last Updated: 2024-08-01T18:40:21.430Z Vendors: Jan Syski Products: MegaBIP Problem Types: CWE-94 Description: Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/06/CVE-2024-1576/ - https://cert.pl/posts/2024/06/CVE-2024-1576/ - https://megabip.pl/ - https://www.gov.pl/web/cyfryzacja/re
E-2024-1576/ - https://cert.pl/posts/2024/06/CVE-2024-1576/ - https://megabip.pl/ - https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej
CVE ID: CVE-2024-1578 State: PUBLISHED Published: 2024-09-16T06:59:35.306Z Last Updated: 2024-09-16T14:33:10.067Z Vendors: Rebranded by NT-ware (originally developed and provided by rf IDEAS) Products: MiCard PLUS Ci, MiCard PLUS BLE Problem Types: CWE-1287 Description: The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration and might result in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the unique
sult in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the uniqueness of ID cards that can, therefore, result in a security issue if the users are using the ‘ID card self-registration’ function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ntware.atlassian.net/wiki/spaces/SA/pages/11973853216/2024+Security+Advisory+Multiple+MiCard+PLUS+card+reader+dropped+characters - https://www.canon-europe.com/psirt/advisory-information
CVE ID: CVE-2024-1579 State: PUBLISHED Published: 2024-04-29T13:27:55.045Z Last Updated: 2024-08-01T18:40:21.431Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Secomea Products: GateManager Problem Types: CWE-335 Description: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2024-1580 State: PUBLISHED Published: 2024-02-19T10:34:55.113Z Last Updated: 2025-02-13T17:32:17.584Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: VideoLAN Products: dav1d Problem Types: CWE-190 Description: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://code.videolan.org/videolan/dav1d/-/releases/1.4.0 - https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS - https://lists.fedora
org/videolan/dav1d/-/releases/1.4.0 - https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/ - https://support.apple.com/kb/HT214098 - https://support.apple.com/kb/HT214097 - https://support.apple.com/kb/HT214095 - https://support.apple.com/kb/HT214093 - https://support.apple.com/kb/HT214096 - https://support.apple.com/kb/HT214094 - http://seclists.org/fulldisclosure/2024/Mar/41 - http://seclists.org/fulldisclosure/2024/Mar/36 - http://seclists.org/fulldisclosure/2024/Mar/38 - http://seclists.org/fulldisclosure/2024/Mar/37 - http://seclists.org/fulldisclosur
ists.org/fulldisclosure/2024/Mar/38 - http://seclists.org/fulldisclosure/2024/Mar/37 - http://seclists.org/fulldisclosure/2024/Mar/40 - http://seclists.org/fulldisclosure/2024/Mar/39
CVE ID: CVE-2024-1582 State: PUBLISHED Published: 2024-03-13T01:57:27.765Z Last Updated: 2024-08-01T18:40:21.371Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpgmaps Products: WP Go Maps (formerly WP Google Maps) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgmza' shortcode in all versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers wi
nput sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/67f405d0-7139-4b5c-ab3c-cd1de5592866?source=cve - https://plugins.trac.wordpress.org/changeset/3045434/wp-google-maps/trunk/includes/class.shortcodes.php
CVE ID: CVE-2024-1584 State: PUBLISHED Published: 2024-05-02T16:51:55.037Z Last Updated: 2024-08-01T18:40:21.458Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: hiddenpearls Products: Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) Problem Types: CWE-284 Improper Access Control Description: The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpa_check_authentication' function in all versions up to, and including, 5.2.1. This makes it possible for unauthenticated attackers to modify th
function in all versions up to, and including, 5.2.1. This makes it possible for unauthenticated attackers to modify the site's Google Analytics tracking ID. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2c399c6a-d5e4-4b88-a0a9-003233d5d59f?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3072410%40wp-analytify&new=3072410%40wp-analytify&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1585 State: PUBLISHED Published: 2024-03-13T15:26:42.210Z Last Updated: 2024-08-01T18:40:21.405Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xpeedstudio Products: Metform Elementor Contact Form Builder Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with con
anitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/342d6941-6987-4756-b554-1699128b9108?source=cve - https://plugins.trac.wordpress.org/browser/metform/trunk/utils/util.php#L555 - https://plugins.trac.wordpress.org/changeset?old_path=/metform/tags/3.8.3&old=3047398&new_path=/metform/tags/3.8.4&new=3047398&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1586 State: PUBLISHED Published: 2024-02-20T18:56:36.199Z Last Updated: 2024-08-01T18:40:21.416Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: magazine3 Products: Schema & Structured Data for WP & AMP Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom schema in all versions up to, and including, 1.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that wil
nd output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. By default the required authentication level is admin, but administrators have the ability to assign role based access to users as low as subscriber. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e7e6ea7-4e0b-4d8a-9306-45b55d41fbb5?source=cve - https://plugins.trac.wordpress.org/changeset?old_path=/schema-and-structured-data-for-wp/tags/1.26&old=3038020&new_path=/schema-and-structured-data-for-wp/tags/1.27&new=3038020&sf
ma-and-structured-data-for-wp/tags/1.26&old=3038020&new_path=/schema-and-structured-data-for-wp/tags/1.27&new=3038020&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1587 State: PUBLISHED Published: 2024-04-09T18:59:18.626Z Last Updated: 2025-08-26T20:08:09.716Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: blazethemes Products: Newsmatic Problem Types: CWE-862 Missing Authorization Description: The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmatic_filter_posts_load_tab_content'. This makes it possible for unauthenticated attackers to view draft posts and post content. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/i
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bd2ea430-48ce-43c3-ba3d-8ef5f91460ce?source=cve - https://themes.trac.wordpress.org/browser/newsmatic/1.3.0/inc/template-functions.php#L634
CVE ID: CVE-2024-1588 State: PUBLISHED Published: 2024-04-08T05:00:01.486Z Last Updated: 2025-03-27T15:53:22.728Z Vendors: Unknown Products: SendPress Newsletters Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/2772c921-d977-4150-b207-ae5ba5e2a6db/
CVE ID: CVE-2024-1589 State: PUBLISHED Published: 2024-04-08T05:00:01.961Z Last Updated: 2024-11-07T17:08:21.034Z Vendors: Unknown Products: SendPress Newsletters Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/5cfbbddd-d941-4665-be8b-a54454527571/
CVE ID: CVE-2024-1590 State: PUBLISHED Published: 2024-02-23T09:32:37.662Z Last Updated: 2024-08-01T18:40:21.329Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: softaculous Products: Page Builder: Pagelayer – Drag and Drop website builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Widget in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it pos
cluding, 1.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e635dfb3-002d-4197-b14a-0136a1990a75?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3039750%40pagelayer&new=3039750%40pagelayer&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1591 State: PUBLISHED Published: 2024-02-16T18:54:33.382Z Last Updated: 2024-08-01T18:48:20.658Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: BeyondTrust Products: Privilege Management for Windows Problem Types: CWE-200 Description: Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows them to view the policy and potentially find configuration issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.beyondtrust.com/trust-center/security-advisories/bt24-02
CVE ID: CVE-2024-1592 State: PUBLISHED Published: 2024-03-02T06:46:19.551Z Last Updated: 2024-08-01T18:48:20.645Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: rogierlankhorst Products: Complianz – GDPR/CCPA Cookie Consent Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5.6. This is due to missing or incorrect nonce validation on the process_delete function in class-DNSMPD.php. This makes it possible for unauthenticated attackers to delete GDPR data requests via a forged request granted they
php. This makes it possible for unauthenticated attackers to delete GDPR data requests via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6b524fc5-4beb-49f6-bafa-c788c6d1d78c?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3041903%40complianz-gdpr&old=3009228%40complianz-gdpr&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1593 State: PUBLISHED Published: 2024-04-16T00:00:14.123Z Last Updated: 2024-08-01T18:48:20.648Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-22 Description: A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files or directories. This vulnerability allows for arbitrary data smuggling into the 'params' part of the URL, enabling attacks similar to those described in previous
for arbitrary data smuggling into the 'params' part of the URL, enabling attacks similar to those described in previous reports but utilizing the ';' character for parameter smuggling. Successful exploitation could lead to unauthorized information disclosure or server compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/dbdc6bd6-d09a-46f2-9d9c-5138a14b6e31
CVE ID: CVE-2024-1594 State: PUBLISHED Published: 2024-04-16T00:00:14.507Z Last Updated: 2024-08-01T18:48:20.634Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-22 Description: A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to
ontext of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/424b6f6b-e778-4a2b-b860-39730d396f3e
CVE ID: CVE-2024-1595 State: PUBLISHED Published: 2024-02-29T19:16:08.644Z Last Updated: 2024-08-22T18:09:41.923Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: CNCSoft-B v1.0.0.4 DOPSoft Problem Types: CWE-427 Description: Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-053-01
CVE ID: CVE-2024-1596 State: PUBLISHED Published: 2024-09-07T11:17:02.559Z Last Updated: 2024-09-09T14:57:31.937Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: SaturdayDrive Products: Ninja Forms - File Uploads Problem Types: CWE-79 Description: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e.g. RTX file) in all versions up to, and including, 3.3.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes:
t arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/499a1892-12b7-49d5-b65f-4f53a968a23a?source=cve - https://ninjaforms.com/extensions/file-uploads/ - https://ninjaforms.com/extensions/file-uploads/?changelog=1/
CVE ID: CVE-2024-1597 State: PUBLISHED Published: 2024-02-19T12:58:48.620Z Last Updated: 2025-11-03T21:52:29.022Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: pgjdbc Products: pgjdbc Problem Types: CWE-89 Description: pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a string value after the first placeholder; both must be on the same line. By constructing a matching string payload, the attacker can inject SQL to alter
ceholder; both must be on the same line. By constructing a matching string payload, the attacker can inject SQL to alter the query,bypassing the protections that parameterized queries bring against SQL Injection attacks. Versions before 42.7.2, 42.6.1, 42.5.5, 42.4.4, 42.3.9, and 42.2.28 are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56 - https://www.enterprisedb.com/docs/security/assessments/cve-2024-1597/ - https://www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.
onnector/latest/01_jdbc_rel_notes/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZQTSMESZD2RJ5XBPSXH3TIQVUW5DIUU/ - https://security.netapp.com/advisory/ntap-20240419-0008/ - http://www.openwall.com/lists/oss-security/2024/04/02/6 - https://lists.debian.org/debian-lts-announce/2024/05/msg00007.html
CVE ID: CVE-2024-1598 State: PUBLISHED Published: 2024-05-14T14:56:38.995Z Last Updated: 2025-07-28T20:53:48.128Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Phoenix Products: SecureCore™ for Intel Gemini Lake Description: Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://phoenixtech.com/phoenix-security-notifications/cve-2024-1598/
CVE ID: CVE-2024-1599 State: REJECTED Published: 2024-04-10T17:08:00.523Z Last Updated: 2024-06-07T10:53:17.327Z Description: No description available.