Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34162 State: PUBLISHED Published: 2024-11-26T07:37:57.671Z Last Updated: 2025-11-04T17:20:30.355Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-767 Description: The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device communicates with the LDAP server in clear-text. The LDAP password can be retrieved from this clear-text communication. As for the details of affected product names, model numbers, and versions, refer
ed from this clear-text communication. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/ - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
CVE ID: CVE-2024-34163 State: PUBLISHED Published: 2024-08-14T13:45:38.963Z Last Updated: 2024-08-16T14:08:31.790Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01022.html
CVE ID: CVE-2024-34164 State: PUBLISHED Published: 2024-11-13T21:09:00.359Z Last Updated: 2024-11-14T19:44:18.502Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) MAS software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01161.html
CVE ID: CVE-2024-34165 State: PUBLISHED Published: 2024-11-13T21:12:03.928Z Last Updated: 2024-11-14T19:36:55.305Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI DPC++/C++ Compiler Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01217.html
CVE ID: CVE-2024-34166 State: PUBLISHED Published: 2025-01-14T14:21:36.712Z Last Updated: 2025-01-14T16:03:43.964Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-
CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2000
CVE ID: CVE-2024-34167 State: PUBLISHED Published: 2024-11-13T21:11:37.417Z Last Updated: 2024-11-14T19:48:57.126Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board S2600ST Family BIOS and Firmware Update software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01183
: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01183.html
CVE ID: CVE-2024-34170 State: PUBLISHED Published: 2024-11-13T21:06:04.604Z Last Updated: 2024-11-14T19:46:05.645Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: n/a Products: Intel(R) Graphics Drivers Problem Types: denial of service, CWE-92 Description: Improper buffer restrictions in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01132.html
CVE ID: CVE-2024-34171 State: PUBLISHED Published: 2024-05-30T19:55:23.835Z Last Updated: 2024-08-02T02:51:09.599Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Fuji Electric Products: Monitouch V-SFT Problem Types: CWE-121 Description: Fuji Electric Monitouch V-SFT is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-02
CVE ID: CVE-2024-34191 State: PUBLISHED Published: 2024-05-14T15:31:00.798Z Last Updated: 2025-02-13T15:53:02.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chmod744.super.site/htmly-cve
CVE ID: CVE-2024-34193 State: PUBLISHED Published: 2024-05-20T17:32:46.532Z Last Updated: 2025-02-13T15:53:02.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vulreport3r/cve-reports/blob/main/Smanga_has_an_arbitrary_file_read_vulnerability/report.md
CVE ID: CVE-2024-34195 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-08-28T20:04:26.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary comm
e and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Swind1er/84161b607d06d060fba5adcdd92bceb4
CVE ID: CVE-2024-34196 State: PUBLISHED Published: 2024-05-08T21:35:35.815Z Last Updated: 2025-02-13T15:53:03.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" program allows attackers to modify the value of the "vwlan_idx" field via "formMultiAP". This can lead to a stack overflow through the "formWlEncrypt" CGI function by constructing malicious HTTP requests and passing a WLAN SSID value exceeding the expected length, potentially resulting in command execution or denial of service attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: -
tially resulting in command execution or denial of service attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Swind1er/1ec2fde42254598a72f1d716f9cfe2a1
CVE ID: CVE-2024-34198 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-08-29T16:19:15.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlan_ssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long value for the wlan_ssid field, leading to a stack overflow. This can be further exploited to execute arbitrary commands or launch denial-of-service attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gi
ommands or launch denial-of-service attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Swind1er/02f6cb414e440c34878f20fef756e286
CVE ID: CVE-2024-34199 State: PUBLISHED Published: 2024-05-10T16:24:43.075Z Last Updated: 2025-02-13T15:53:04.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large elements in the request line. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DMCERTCE/PoC_Tiny_Overflow
CVE ID: CVE-2024-34200 State: PUBLISHED Published: 2024-05-09T16:41:15.360Z Last Updated: 2025-02-13T15:53:04.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setIpQosRules
CVE ID: CVE-2024-34201 State: PUBLISHED Published: 2024-05-09T16:39:16.897Z Last Updated: 2025-02-13T15:53:05.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/getSaveConfig
CVE ID: CVE-2024-34202 State: PUBLISHED Published: 2024-05-09T16:37:30.945Z Last Updated: 2025-02-13T15:53:05.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setMacFilterRules
CVE ID: CVE-2024-34203 State: PUBLISHED Published: 2024-05-09T16:35:43.519Z Last Updated: 2025-02-13T15:53:06.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setLanguageCfg
CVE ID: CVE-2024-34204 State: PUBLISHED Published: 2024-05-09T16:33:40.378Z Last Updated: 2025-02-13T15:53:06.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setUpgradeFW
CVE ID: CVE-2024-34205 State: PUBLISHED Published: 2024-05-09T16:31:55.864Z Last Updated: 2025-02-13T15:53:07.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/download_firmware
CVE ID: CVE-2024-34206 State: PUBLISHED Published: 2024-05-09T16:29:41.793Z Last Updated: 2025-02-13T15:53:08.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setWebWlanIdx
CVE ID: CVE-2024-34207 State: PUBLISHED Published: 2024-05-09T16:27:45.809Z Last Updated: 2025-02-13T15:53:08.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setStaticDhcpConfig
CVE ID: CVE-2024-34209 State: PUBLISHED Published: 2024-05-09T16:42:41.636Z Last Updated: 2025-02-13T15:53:09.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/setIpPortFilterRules
CVE ID: CVE-2024-34210 State: PUBLISHED Published: 2024-05-09T14:22:20.145Z Last Updated: 2025-02-13T15:53:09.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_injection
CVE ID: CVE-2024-34211 State: PUBLISHED Published: 2024-05-09T14:20:14.043Z Last Updated: 2025-02-13T15:53:10.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/HardCodeRoot
CVE ID: CVE-2024-34212 State: PUBLISHED Published: 2024-05-09T14:17:43.559Z Last Updated: 2025-02-13T15:53:10.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_overflow
CVE ID: CVE-2024-34213 State: PUBLISHED Published: 2024-05-09T16:42:12.260Z Last Updated: 2025-02-13T15:53:11.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetPortForwardRules
CVE ID: CVE-2024-34215 State: PUBLISHED Published: 2024-05-09T16:24:53.989Z Last Updated: 2025-02-13T15:53:11.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetUrlFilterRules
CVE ID: CVE-2024-34217 State: PUBLISHED Published: 2024-05-09T16:25:55.049Z Last Updated: 2025-02-13T15:53:12.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/addWlProfileClientMode
CVE ID: CVE-2024-34218 State: PUBLISHED Published: 2024-05-09T13:52:54.999Z Last Updated: 2025-02-13T15:53:13.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/NTPSyncWithHost
CVE ID: CVE-2024-34219 State: PUBLISHED Published: 2024-05-09T14:07:35.462Z Last Updated: 2025-02-13T15:53:13.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetTelnetCfg
CVE ID: CVE-2024-34220 State: PUBLISHED Published: 2024-05-09T18:31:37.911Z Last Updated: 2025-02-13T15:53:14.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dovankha/CVE-2024-34220
CVE ID: CVE-2024-34221 State: PUBLISHED Published: 2024-05-13T17:33:06.513Z Last Updated: 2025-02-13T15:53:14.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dovankha/CVE-2024-34221
CVE ID: CVE-2024-34222 State: PUBLISHED Published: 2024-05-13T17:30:25.666Z Last Updated: 2025-02-13T15:53:15.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dovankha/CVE-2024-34222
CVE ID: CVE-2024-34223 State: PUBLISHED Published: 2024-05-13T17:29:24.237Z Last Updated: 2025-02-13T15:53:15.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dovankha/CVE-2024-34223
CVE ID: CVE-2024-34224 State: PUBLISHED Published: 2024-05-13T17:38:06.905Z Last Updated: 2025-02-13T15:53:16.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dovankha/CVE-2024-34224
CVE ID: CVE-2024-34225 State: PUBLISHED Published: 2024-05-13T17:46:00.756Z Last Updated: 2025-02-13T15:53:16.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dovankha/CVE-2024-34225
CVE ID: CVE-2024-34226 State: PUBLISHED Published: 2024-05-13T17:42:08.104Z Last Updated: 2025-02-13T15:53:17.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dovankha/CVE-2024-34226
CVE ID: CVE-2024-34230 State: PUBLISHED Published: 2024-05-13T19:17:18.584Z Last Updated: 2025-02-13T15:53:18.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Amrita2000/CVES/blob/main/CVE-2024-34230.md
CVE ID: CVE-2024-34231 State: PUBLISHED Published: 2024-05-13T19:21:42.084Z Last Updated: 2025-02-13T15:53:18.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Amrita2000/CVES/blob/main/CVE-2024-34231.md
CVE ID: CVE-2024-34235 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:28:16.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial UE Message` missing a required `NAS_PDU` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-34240 State: PUBLISHED Published: 2024-05-21T17:33:54.218Z Last Updated: 2025-10-15T17:00:18.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grumpz.net/cve-2024-34240-latest-stored-xss-0day-vulnerability-unveiled