Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6772 State: PUBLISHED Published: 2024-07-16T21:43:45.784Z Last Updated: 2024-08-06T18:36:45.106Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/346597059
CVE ID: CVE-2024-6773 State: PUBLISHED Published: 2024-07-16T21:43:46.239Z Last Updated: 2024-10-15T13:12:30.559Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/347724915
CVE ID: CVE-2024-6774 State: PUBLISHED Published: 2024-07-16T21:43:46.629Z Last Updated: 2024-08-01T21:45:37.941Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/346898524
CVE ID: CVE-2024-6775 State: PUBLISHED Published: 2024-07-16T21:43:46.887Z Last Updated: 2024-08-01T21:45:38.079Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/347373236
CVE ID: CVE-2024-6776 State: PUBLISHED Published: 2024-07-16T21:43:47.122Z Last Updated: 2024-08-01T21:45:38.192Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/346692546
CVE ID: CVE-2024-6777 State: PUBLISHED Published: 2024-07-16T21:43:47.401Z Last Updated: 2024-08-01T21:45:37.772Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/345640549
CVE ID: CVE-2024-6778 State: PUBLISHED Published: 2024-07-16T21:43:47.723Z Last Updated: 2024-08-01T21:45:37.766Z Vendors: Google Products: Chrome Problem Types: CWE-362 Description: Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/341136300
CVE ID: CVE-2024-6779 State: PUBLISHED Published: 2024-07-16T21:43:48.131Z Last Updated: 2025-03-20T20:40:34.488Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/351327767
CVE ID: CVE-2024-6780 State: PUBLISHED Published: 2024-07-16T01:51:03.278Z Last Updated: 2024-10-30T13:51:51.220Z Vendors: TECNO Products: com.android.server.telecom Problem Types: CWE-732 Description: Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.tecno.com/SRC/blogdetail/276?lang=en_US - https://security.tecno.com/SRC/securityUpdates?type=SA
CVE ID: CVE-2024-6781 State: PUBLISHED Published: 2024-08-06T03:38:45.309Z Last Updated: 2024-08-06T14:49:38.742Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Calibre Products: Calibre Problem Types: CWE-22 Description: Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/24/24-6781/ - https://github.com/kovidgoyal/calibre/commit/bcd0ab12c41a887f8290a9b56e46c3a29038d9c4
CVE ID: CVE-2024-6782 State: PUBLISHED Published: 2024-08-06T03:39:20.856Z Last Updated: 2024-08-08T20:05:02.144Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Calibre Products: Calibre Problem Types: CWE-863 Description: Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/24/24-6782/ - https://github.com/kovidgoyal/calibre/commit/38a1bf50d8cd22052ae59c513816706c6445d5e9
CVE ID: CVE-2024-6783 State: PUBLISHED Published: 2024-07-23T15:05:57.752Z Last Updated: 2024-08-30T14:51:11.346Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: vue Products: vue Problem Types: CWE-79 Description: A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.herodevs.com/vulnerability-directory/cve-2024-6783
CVE ID: CVE-2024-6784 State: PUBLISHED Published: 2024-12-05T12:25:28.078Z Last Updated: 2024-12-05T18:49:57.676Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-918 Description: Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&
ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-6785 State: PUBLISHED Published: 2024-09-21T04:07:27.736Z Last Updated: 2024-09-26T06:51:57.427Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Moxa Products: MXview One Series, MXview One Central Manager Series Problem Types: CWE-313 Description: The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxvi
rences: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series - https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05
CVE ID: CVE-2024-6786 State: PUBLISHED Published: 2024-09-21T04:14:22.667Z Last Updated: 2024-09-26T06:52:45.192Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Moxa Products: MXview One Series Problem Types: CWE-24 Description: The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabil
ichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series - https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05
CVE ID: CVE-2024-6787 State: PUBLISHED Published: 2024-09-21T04:20:22.302Z Last Updated: 2024-09-26T06:53:36.334Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Moxa Products: MXview One Series Problem Types: CWE-367 Description: This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write arbitrary files to the system. This could allow the attacker to execute malicious code and potentially cause file losses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/secur
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series - https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05
CVE ID: CVE-2024-6788 State: PUBLISHED Published: 2024-08-13T13:15:03.120Z Last Updated: 2025-08-22T10:24:58.187Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: PHOENIX CONTACT Products: CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, CHARX SEC-3150 Problem Types: CWE-1392 Description: A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2024-022
CVE ID: CVE-2024-6789 State: PUBLISHED Published: 2024-08-27T09:57:00.441Z Last Updated: 2024-09-16T06:19:05.367Z Vendors: M-Files Corporation Products: M-Files Server Problem Types: CWE-22 Description: A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2024-6789/
CVE ID: CVE-2024-6790 State: PUBLISHED Published: 2025-02-03T10:18:55.087Z Last Updated: 2025-02-03T16:03:14.867Z Vendors: Arm Ltd Products: Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver Problem Types: CWE-835 Description: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a non-privileged user process to make valid GPU memory processing operations, including via WebGL or WebGPU, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 thro
U, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Valhall GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Arm 5th Gen GPU Architecture Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2024-6791 State: PUBLISHED Published: 2024-07-22T20:38:14.144Z Last Updated: 2024-08-01T21:45:38.049Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NI Products: VeriStand Problem Types: CWE-22 Description: A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical
CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html
CVE ID: CVE-2024-6792 State: PUBLISHED Published: 2024-09-06T06:00:02.050Z Last Updated: 2024-09-06T13:02:29.109Z Vendors: Unknown Products: WP ULike Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3c470edd-4b9b-461e-839f-f3a87f0060aa/
CVE ID: CVE-2024-6793 State: PUBLISHED Published: 2024-07-22T20:47:52.793Z Last Updated: 2024-08-01T21:45:37.783Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NI Products: VeriStand Problem Types: CWE-502 Description: A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-and-secur
Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html
CVE ID: CVE-2024-6794 State: PUBLISHED Published: 2024-07-22T20:50:40.727Z Last Updated: 2024-08-01T21:45:37.947Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NI Products: VeriStand Problem Types: CWE-502 Description: A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-an
SA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html
CVE ID: CVE-2024-6795 State: PUBLISHED Published: 2024-09-09T19:24:01.776Z Last Updated: 2024-09-09T20:08:01.134Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Connex Health Portal Problem Types: CWE-89 Description: In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database. An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database. Additio
nd disclosure of database content and/or perform administrative operations including shutting down the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-249-01
CVE ID: CVE-2024-6796 State: PUBLISHED Published: 2024-09-09T19:28:30.647Z Last Updated: 2024-09-09T20:08:22.237Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: Baxter Products: Connex Health Portal Problem Types: CWE-284 Description: In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-249-01
CVE ID: CVE-2024-6797 State: PUBLISHED Published: 2025-05-15T20:07:10.175Z Last Updated: 2025-05-20T19:21:08.782Z Vendors: Unknown Products: DL Robots.txt Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The DL Robots.txt WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/14275493-45fd-470c-958f-feded435f706/
CVE ID: CVE-2024-6798 State: PUBLISHED Published: 2025-05-15T20:07:10.381Z Last Updated: 2025-05-17T03:41:07.509Z Vendors: Unknown Products: DL Verification Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The DL Verification WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c719922e-b2b3-452f-856a-5cc983a4ac18/
CVE ID: CVE-2024-6799 State: PUBLISHED Published: 2024-07-19T07:36:45.309Z Last Updated: 2024-08-01T21:45:37.990Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: yithemes Products: YITH Essential Kit for WooCommerce #1 Problem Types: CWE-862 Description: The YITH Essential Kit for WooCommerce #1 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_module', 'deactivate_module', and 'install_module' functions in all versions up to, and including, 2.34.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install, activate, and deactivate plugins fr
ble for authenticated attackers, with Subscriber-level access and above, to install, activate, and deactivate plugins from a pre-defined list of available YITH plugins. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca497ffa-6306-46dc-895f-94f1d5236e28?source=cve - https://plugins.trac.wordpress.org/browser/yith-essential-kit-for-woocommerce-1/trunk/class-yith-jetpack.php#L425 - https://plugins.trac.wordpress.org/browser/yith-essential-kit-for-woocommerce-1/trunk/class-yith-jetpack.php#L457 - https://plugins.trac.wordpress.org/browser/yith-essential-kit-for-woocommerce-1/trunk/class-yith-jetp
jetpack.php#L457 - https://plugins.trac.wordpress.org/browser/yith-essential-kit-for-woocommerce-1/trunk/class-yith-jetpack.php#L487 - https://plugins.trac.wordpress.org/changeset/3120283/
CVE ID: CVE-2024-6800 State: PUBLISHED Published: 2024-08-20T19:21:31.409Z Last Updated: 2024-08-22T14:18:09.305Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-347 Description: An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation metadata XML. This vulnerability allowed an attacker with direct network access to GitHub Enterprise Server to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without r
e administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14, and 3.10.16. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.3 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.8 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.14 - https://docs.github.com/en/enter
.12.8 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.14 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.16
CVE ID: CVE-2024-6801 State: PUBLISHED Published: 2024-07-17T01:31:03.887Z Last Updated: 2024-08-01T21:45:38.019Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Student Management System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271703. Add
oit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271703. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271703 - https://vuldb.com/?ctiid.271703 - https://vuldb.com/?submit.374774 - https://github.com/aaajuna/demo/issues/1