Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23717 State: PUBLISHED Published: 2024-03-11T16:35:22.617Z Last Updated: 2024-08-16T18:59:05.413Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c5c528beb6e1cfed3ec93a3a2640
hment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c5c528beb6e1cfed3ec93a3a264084df32ce83c2 - https://source.android.com/security/bulletin/2024-03-01
CVE ID: CVE-2024-23721 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-28T14:33:04.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://draytek.com - https://gist.github.com/rrrrrrri/8e9cac08eb4d9c01ab258bd5b0f8f7d8
CVE ID: CVE-2024-23722 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-06T13:47:16.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluent/fluent-bit/compare/v2.2.1...v2.2.2 - https://medium.com/%40adurands82/fluent-bit-dos-vulnerability-cve-2024-23722-4e3e74af9d00
CVE ID: CVE-2024-23724 State: PUBLISHED Published: 2024-02-11T00:00:00 Last Updated: 2024-11-07T19:30:18.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rhinosecuritylabs.com/blog/ - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2024-23724 - https://gith
ttps://rhinosecuritylabs.com/blog/ - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2024-23724 - https://github.com/TryGhost/Ghost/pull/19646
CVE ID: CVE-2024-23725 State: PUBLISHED Published: 2024-01-21T00:00:00.000Z Last Updated: 2025-05-30T14:24:10.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TryGhost/Ghost/pull/17190 - https://github.com/TryGhost/Ghost/releases/tag/v5.76.0
CVE ID: CVE-2024-23726 State: PUBLISHED Published: 2024-01-21T00:00:00.000Z Last Updated: 2025-05-30T14:24:04.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and the last six of the BSSID, decrementing the last digit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Ubee/CWE-1392.md
CVE ID: CVE-2024-23727 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-27T19:12:26.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/yi/blob/main/com.kamivision.yismart.V1.0.0_20231219.md
CVE ID: CVE-2024-23729 State: PUBLISHED Published: 2024-08-19T00:00:00 Last Updated: 2024-08-20T20:33:51.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a remote attacker to execute arbitrary JavaScript code via the com.android.browser.RealBrowserActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.heytap.browser - https://play.google.com/store/apps/details?id=com.heytap.browser
CVE ID: CVE-2024-23730 State: PUBLISHED Published: 2024-01-21T00:00:00.000Z Last Updated: 2025-05-30T14:23:56.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/run-llama/llama-hub/releases/tag/v0.0.67 - https://github.com/run-llama/llama-hub/blob/v0.0.67/CHANGELOG.md - https://github.com/run-llama/llama-hub/pull/841/commits/9dc9c21a5c6d0226d1d2101c3121d4f085743d52
CVE ID: CVE-2024-23731 State: PUBLISHED Published: 2024-01-21T00:00:00.000Z Last Updated: 2025-06-04T15:13:44.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/embedchain/embedchain/pull/1122 - https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57
CVE ID: CVE-2024-23732 State: PUBLISHED Published: 2024-01-21T00:00:00.000Z Last Updated: 2025-06-20T18:32:22.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/embedchain/embedchain/pull/1122 - https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57
CVE ID: CVE-2024-23733 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-01-31T20:46:09.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the /WmAdmin/#/login/ URI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ekcrsm/CVE-2024-23733/tree/main
CVE ID: CVE-2024-23734 State: PUBLISHED Published: 2024-04-10T00:00:00 Last Updated: 2024-10-31T15:16:58.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.savignano.net/snotify-email-encryption/sa-2023-11-28 - https://help.savignano.net/snotify-email-encryption/security-advisories
CVE ID: CVE-2024-23735 State: PUBLISHED Published: 2024-04-10T00:00:00 Last Updated: 2024-12-04T21:04:18.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.savignano.net/snotify-email-encryption/security-advisories - https://help.savignano.net/snotify-email-encryption/sa-2023-11-02
CVE ID: CVE-2024-23736 State: PUBLISHED Published: 2024-07-01T00:00:00 Last Updated: 2024-08-01T23:13:07.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.savignano.net/snotify-email-encryption/sa-2023-11-28#SA-2023-11-28-CSRFbasedvulnerabilityinuserupload
CVE ID: CVE-2024-23737 State: PUBLISHED Published: 2024-07-01T00:00:00.000Z Last Updated: 2025-03-18T15:02:41.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.savignano.net/snotify-email-encryption/sa-2023-11-28#SA-2023-11-28-CSRFbasedvulnerabilityinuserupload
CVE ID: CVE-2024-23738 State: PUBLISHED Published: 2024-01-28T00:00:00 Last Updated: 2024-08-01T23:13:07.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor states "we dispute the report's accuracy ... the configuration does not enable remote code execution.." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V3x0r/CVE-2024-23738 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23739 State: PUBLISHED Published: 2024-01-28T00:00:00.000Z Last Updated: 2025-05-29T15:11:19.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/V3x0r/CVE-2024-23739 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23740 State: PUBLISHED Published: 2024-01-28T00:00:00.000Z Last Updated: 2025-06-16T19:38:14.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/V3x0r/CVE-2024-23740 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23741 State: PUBLISHED Published: 2024-01-28T00:00:00.000Z Last Updated: 2025-06-03T18:35:50.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/V3x0r/CVE-2024-23741 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23742 State: PUBLISHED Published: 2024-01-28T00:00:00 Last Updated: 2024-10-18T14:37:54.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/V3x0r/CVE-2024-23742 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23743 State: PUBLISHED Published: 2024-01-28T00:00:00 Last Updated: 2024-09-25T18:59:57.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/r3ggi/electroniz3r - https://github.com/V3x0r/CVE-2024-23743 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23744 State: PUBLISHED Published: 2024-01-21T00:00:00.000Z Last Updated: 2025-06-04T15:25:55.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mbed-TLS/mbedtls/issues/8694
CVE ID: CVE-2024-23745 State: PUBLISHED Published: 2024-01-31T00:00:00 Last Updated: 2024-11-12T20:37:48.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling the execution of arbitrary commands within the application's context. NOTE: the vendor's perspective is that this is simply an instance of CVE-2022-48505, cannot properly be categorized as a product-level vulnerability, and cannot have a product-le
nstance of CVE-2022-48505, cannot properly be categorized as a product-level vulnerability, and cannot have a product-level fix because it is about incorrect caching of file signatures on macOS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/louiselalanne/CVE-2024-23745 - https://blog.xpnsec.com/dirtynib/ - https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#Why-arent-physically_local-attacks-in-Chromes-threat-model
CVE ID: CVE-2024-23746 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-04T15:23:03.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in some environments (bypass a kTCCServiceSystemPolicyAppBundles requirement via a file copy, an app.app/Contents rename, an asar modification, and a rename back to app.app/Contents). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-electron-applications-inje
cktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-electron-applications-injection - https://miro.com/about/ - https://github.com/louiselalanne/CVE-2024-23746 - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2024-23747 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-06-20T19:46:25.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter, an attacker can gain access to sensitive medical information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://modernasistemas.com.br/sitems/ - https://github.com/louiselalanne
tainer: - CISA ADP Vulnrichment: References: - https://modernasistemas.com.br/sitems/ - https://github.com/louiselalanne/CVE-2024-23747
CVE ID: CVE-2024-23749 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:40:16.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390). This allows an attacker to add inputs inside the filename variable, leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html -
SA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html - https://blog.defcesco.io/CVE-2024-23749 - http://seclists.org/fulldisclosure/2024/Feb/13 - http://seclists.org/fulldisclosure/2024/Feb/14
CVE ID: CVE-2024-23750 State: PUBLISHED Published: 2024-01-22T00:00:00.000Z Last Updated: 2025-06-20T18:42:14.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/geekan/MetaGPT/issues/731
CVE ID: CVE-2024-23751 State: PUBLISHED Published: 2024-01-22T00:00:00.000Z Last Updated: 2025-06-20T18:42:53.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Drop the Students table" within English language input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/run-llama/llama_index/issues/9957
CVE ID: CVE-2024-23752 State: PUBLISHED Published: 2024-01-22T00:00:00.000Z Last Updated: 2025-05-30T14:23:33.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE: the vendor previously attempted to restrict code execution in response to a separate issue, CVE-2023-39660. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gventuri
0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gventuri/pandas-ai/issues/868
CVE ID: CVE-2024-23755 State: PUBLISHED Published: 2024-03-23T00:00:00 Last Updated: 2024-08-16T16:54:02.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronjs.org/docs/latest/tutorial/fuses - https://clickup.com/terms/security-policy - https://www.electronjs.org/blog/statement-run-as-node-cves - https://clickup.com/security/disclosures
CVE ID: CVE-2024-23756 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:41:51.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-23756
CVE ID: CVE-2024-23758 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-09-04T14:37:23.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise ManagementInstaller_msi.log file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=70
CVE ID: CVE-2024-23759 State: PUBLISHED Published: 2024-02-12T00:00:00.000Z Last Updated: 2025-05-07T20:59:58.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0046/
CVE ID: CVE-2024-23760 State: PUBLISHED Published: 2024-02-12T00:00:00.000Z Last Updated: 2025-03-28T23:12:07.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handler.log.txt under the webroot. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2023-0050/
CVE ID: CVE-2024-23761 State: PUBLISHED Published: 2024-02-12T00:00:00 Last Updated: 2024-08-19T16:05:20.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0048/
CVE ID: CVE-2024-23762 State: PUBLISHED Published: 2024-02-12T00:00:00.000Z Last Updated: 2025-03-18T20:02:54.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0049/
CVE ID: CVE-2024-23763 State: PUBLISHED Published: 2024-02-12T00:00:00.000Z Last Updated: 2025-05-07T21:02:18.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiers[attribute][] parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0047/