Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ted packages and executed or loaded their components (including sideloaded DLLs and Java/installer payloads), enabling remote code execution on affected systems. MicroWorld eScan confirmed remediation of the update mechanism on 2023-07-31 but versioning details are unavailable. NOTE: MicroWorld eScan disputes the characterization in third-party reports, stating the issue relates to 2018–2019 and that controls were implemented then. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.avast.com/leading-the-charge-against-guptiminer - https://www.gendigital.com/blog/insights/research/guptiminer-hijacking-antivirus-updates-for-distributing-backdoors-and-casual-mining -
igital.com/blog/insights/research/guptiminer-hijacking-antivirus-updates-for-distributing-backdoors-and-casual-mining - https://securityaffairs.com/162228/breaking-news/escan-antivirus-mitm-attack.html - https://arstechnica.com/security/2024/04/hackers-infect-users-of-antivirus-service-that-delivered-updates-over-http/ - https://www.bleepingcomputer.com/news/security/hackers-hijack-antivirus-updates-to-drop-guptiminer-malware/ - https://thehackernews.com/2024/04/escan-antivirus-update-mechanism.html - https://www.escanav.com/en/about-us/eScan-update-advisory.asp - https://www.vulncheck.com/advisories/microworld-escan-av-insecure-update-mechanism-allows-mitm-replacement-of-updates
CVE ID: CVE-2024-13991 State: PUBLISHED Published: 2025-10-15T01:21:41.482Z Last Updated: 2025-11-03T15:48:22.872Z Vendors: Huijietong Products: Cloud Video Platform Problem Types: CWE-22 Description: Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the `fullPath` parameter of the `/fileDownload?action=downloadBackupFile` endpoint and retrieve files from the server filesystem. VulnCheck has observed this vulnerability being exploited in the wild. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cn-sec.com/archives/2941393.html - https://www.vulncheck.com/advisories/huijie
A ADP Vulnrichment: References: - https://cn-sec.com/archives/2941393.html - https://www.vulncheck.com/advisories/huijietong-cloud-video-platform-filedownload-arbitrary-file-read
CVE ID: CVE-2024-13992 State: PUBLISHED Published: 2025-10-31T12:35:56.137Z Last Updated: 2025-11-17T18:21:46.964Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to < 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the "missing page" (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.n
im’s browser within the Nagios XI domain. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/2024r1-1/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-missing-page
CVE ID: CVE-2024-13993 State: PUBLISHED Published: 2025-10-30T21:43:55.640Z Last Updated: 2025-11-17T18:21:47.166Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to < 2024R1.1.2 are vulnerable to a reflected cross-site scripting (XSS) via the login page when accessed with older web browsers. Insufficient validation or escaping of user-supplied input reflected by the login page can allow an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI origin. The issue is observable under legacy browser behaviors; modern browsers may mitigate some vectors. Additional Analy
gin. The issue is observable under legacy browser behaviors; modern browsers may mitigate some vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-reflected-xss-via-login-page-on-older-browsers
CVE ID: CVE-2024-13994 State: PUBLISHED Published: 2025-10-30T21:29:17.240Z Last Updated: 2025-11-17T18:21:47.324Z Vendors: Nagios Products: XI Problem Types: CWE-862 Description: Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled. Under this configuration, any user can create valid login credentials for other users without proper authorization. This can lead to unauthorized account creation, privilege escalation, or full compromise of the Nagios XI web interface depending on the target account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - h
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-allow-insecure-logins-missing-authorization
CVE ID: CVE-2024-13995 State: PUBLISHED Published: 2025-10-30T21:29:55.745Z Last Updated: 2025-11-17T18:21:47.489Z Vendors: Nagios Products: XI Problem Types: CWE-497 Description: Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to that data. Exposure of API keys or password hashes could lead to account compromise, abuse of API privileges, or offline cracking attempts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-
lnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-api-keys-and-hashed-password-authenticated-information-disclosure
CVE ID: CVE-2024-13996 State: PUBLISHED Published: 2025-10-30T21:44:26.053Z Last Updated: 2025-11-17T18:21:47.755Z Vendors: Nagios Products: XI Problem Types: CWE-613 Description: Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed. As a result, any pre-existing sessions (including those potentially controlled by an attacker) remained valid after a credential update. This insufficient session expiration could allow continued unauthorized access to user data and actions even after a password change. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-x
nge. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-session-not-invalidated-after-password-change
CVE ID: CVE-2024-13997 State: PUBLISHED Published: 2025-11-03T21:55:48.197Z Last Updated: 2025-11-17T18:21:47.934Z Vendors: Nagios Products: XI Problem Types: CWE-269 Description: Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actions outside the intended security scope of the application, resulting in full control of the operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios
ystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-migrate-server-feature-to-root-on-host
CVE ID: CVE-2024-13998 State: PUBLISHED Published: 2025-11-03T21:53:51.223Z Last Updated: 2025-11-17T18:21:48.252Z Vendors: Nagios Products: XI Problem Types: CWE-497 Description: Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to that data. Exposure of API keys or password hashes could lead to account compromise, abuse of API privileges, or offline cracking attempts. CVE-2024-13995 addresses a similar vulnerability with a potentially incomplete fix for the underlying problem in earlier versions. Additional Analyst Notes: - CISA ADP Vuln
h a potentially incomplete fix for the underlying problem in earlier versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-api-keys-and-hashed-password-authenticated-information-disclosure-2
CVE ID: CVE-2024-13999 State: PUBLISHED Published: 2025-10-30T21:28:50.777Z Last Updated: 2025-11-17T18:14:56.864Z Vendors: Nagios Products: XI Problem Types: CWE-497 Description: Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user. Exposure of the server’s AD/LDAP token could allow domain-wide authentication misuse, escalation of privileges, or further compromise of network-integrated systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.
tps://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ad-ldap-token-authenticated-information-disclosure
CVE ID: CVE-2024-14000 State: PUBLISHED Published: 2025-10-30T21:51:02.400Z Last Updated: 2025-11-17T18:21:48.461Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Capacity Planning Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-capacity-planni
i - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-capacity-planning-report
CVE ID: CVE-2024-14001 State: PUBLISHED Published: 2025-10-30T21:52:13.095Z Last Updated: 2025-11-17T18:21:48.632Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2024R1.1.3 are vulnerable to cross-site scripting (XSS) via the Executive Summary Report component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-executive-summa
i - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-executive-summary-report
CVE ID: CVE-2024-14002 State: PUBLISHED Published: 2025-10-30T21:30:39.691Z Last Updated: 2025-11-17T18:21:48.806Z Vendors: Nagios Products: XI Problem Types: CWE-98 Description: Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its NagVis integration. An authenticated user can supply crafted path values that cause the server to include local files, potentially exposing sensitive information from the underlying host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-authenticated-local-fil
i - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-authenticated-local-file-inclusion-via-nagvis
CVE ID: CVE-2024-14003 State: PUBLISHED Published: 2025-10-30T21:42:19.225Z Last Updated: 2025-11-17T18:21:48.995Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins. Insufficient validation of inbound NRDP request parameters allows crafted input to reach command execution paths, enabling attackers to execute arbitrary commands on the underlying host in the context of the web/Nagios service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/chan
- CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-rce-via-nrdp-server-plugins
CVE ID: CVE-2024-14004 State: PUBLISHED Published: 2025-10-30T21:40:51.523Z Last Updated: 2025-11-17T18:21:49.174Z Vendors: Nagios Products: XI Problem Types: CWE-269 Description: Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf). An authenticated user could manipulate NagVis configuration data or leverage insufficiently validated configuration settings to obtain elevated privileges on the Nagios XI system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/
s.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-nagvis-configuration
CVE ID: CVE-2024-14005 State: PUBLISHED Published: 2025-10-30T21:37:28.667Z Last Updated: 2025-11-17T18:21:49.431Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitation enables arbitrary command execution with the privileges of the Nagios XI web application user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-x
ser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-command-injection-via-docker-wizard
CVE ID: CVE-2024-14006 State: PUBLISHED Published: 2025-10-30T21:38:42.351Z Last Updated: 2025-11-17T18:21:49.793Z Vendors: Nagios Products: XI Problem Types: CWE-346 Description: Nagios XI versions prior to 2024R1.2.2 contain a host header injection vulnerability. The application trusts the user-supplied HTTP Host header when constructing absolute URLs without sufficient validation. An unauthenticated, remote attacker can supply a crafted Host header to poison generated links or responses, which may facilitate phishing of credentials, account recovery link hijacking, and web cache poisoning. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/sec
eb cache poisoning. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-host-header-injection
CVE ID: CVE-2024-14007 State: PUBLISHED Published: 2025-11-24T20:31:02.227Z Last Updated: 2025-11-24T21:04:54.395Z Vendors: Shenzhen TVT Digital Technology Co., Ltd. Products: NVMS-9000 Problem Types: CWE-306 Description: Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware (used by many white-labeled DVR/NVR/IPC products) versions prior to 1.3.4 contain an authentication bypass in the NVMS-9000 control protocol. By sending a single crafted TCP payload to an exposed NVMS-9000 control port, an unauthenticated remote attacker can invoke privileged administrative query commands without valid credentials. Successful exploitation discloses sensitive information including administrator use
commands without valid credentials. Successful exploitation discloses sensitive information including administrator usernames and passwords in cleartext, network and service configuration, and other device details via commands such as queryBasicCfg, queryUserList, queryEmailCfg, queryPPPoECfg, and queryFTPCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure/ - https://www.greynoise.io/blog/surge-exploitation-attempts-tvt-dvrs - https://undercodetesting.com/eleven11-botnet-mirai-variant-targeting-nvms-9000-devices/ - https://www.vulncheck.com/advisories/tvt-nvms9000-unauthenticated-admin-queries-and-info
-targeting-nvms-9000-devices/ - https://www.vulncheck.com/advisories/tvt-nvms9000-unauthenticated-admin-queries-and-information-disclosure
CVE ID: CVE-2024-14008 State: PUBLISHED Published: 2025-10-30T21:43:07.355Z Last Updated: 2025-11-17T18:21:50.058Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard. Insufficient validation of user-supplied input allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitation enables arbitrary command execution with the privileges of the Nagios XI web application user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#
cation user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-rce-via-winrm-configuration-wizard
CVE ID: CVE-2024-14009 State: PUBLISHED Published: 2025-10-30T21:41:13.594Z Last Updated: 2025-11-17T18:21:50.296Z Vendors: Nagios Products: XI Problem Types: CWE-269 Description: Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component. The System Profile feature is an administrative diagnostic/configuration capability. Due to improper access controls and unsafe handling of exported/imported profile data and operations, an authenticated administrator could exploit this vulnerability to execute actions on the underlying XI host outside the application's security scope. Successful exploitation may allow an administrator to obtain root
ying XI host outside the application's security scope. Successful exploitation may allow an administrator to obtain root privileges on the XI server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-system-profile
CVE ID: CVE-2024-14011 State: REJECTED Published: N/A Last Updated: 2025-10-23T11:11:36.397Z Description: No description available.
CVE ID: CVE-2024-14012 State: PUBLISHED Published: 2025-10-29T15:30:53.784Z Last Updated: 2025-10-29T17:40:17.707Z Vendors: Revenera Products: InstallShield Problem Types: CWE-426 Description: Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a privilege escalation. The issue has been fixed in versions 2023 R2 and later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.revenera.com/s/article/CVE-2024-14012-Potential-Privilege-Escalation-in-InstallShield-2023-R1
CVE ID: CVE-2024-14015 State: PUBLISHED Published: 2025-11-24T06:00:02.844Z Last Updated: 2025-11-24T10:55:31.281Z Vendors: Unknown Products: WordPress eCommerce Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress eCommerce Plugin WordPress plugin through 2.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1a70927a-e345-4e2f-98da-1235f4482cc0/
CVE ID: CVE-2024-1000 State: PUBLISHED Published: 2024-01-29T13:31:03.916Z Last Updated: 2024-10-18T14:24:20.440Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: Totolink Products: N200RE Problem Types: CWE-121 Description: A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252269 was assigned to this vulnerability. NOTE: The vendor was contacted early abo
and may be used. The identifier VDB-252269 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252269 - https://vuldb.com/?ctiid.252269 - https://jylsec.notion.site/TOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-setTracerouteCfg-b6b3fe05b4a945a3bc460dbcb61dfc75?pvs=4
CVE ID: CVE-2024-1001 State: PUBLISHED Published: 2024-01-29T13:31:04.977Z Last Updated: 2025-06-16T18:29:04.067Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: Totolink Products: N200RE Problem Types: CWE-121 Description: A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function main of the file /cgi-bin/cstecgi.cgi. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-252270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond
entifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252270 - https://vuldb.com/?ctiid.252270 - https://jylsec.notion.site/TOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-main-942df77e9c70495390e4aed2a29f3d13?pvs=4
CVE ID: CVE-2024-1002 State: PUBLISHED Published: 2024-01-29T14:00:06.271Z Last Updated: 2025-05-29T15:09:58.391Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: Totolink Products: N200RE Problem Types: CWE-121 Description: A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerability is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ePort leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252271. NOTE: The vendor was contacted