Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-46554 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-13T19:14:27.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#ee86534f23b84f2cbfa9401ee1d9d179
CVE ID: CVE-2024-46555 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T14:13:34.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#e15d03bdd4b9441e8eb157fbd09969f4
CVE ID: CVE-2024-46556 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T15:03:48.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#a26d36d8c8d042299348d8ec7a0260ca
CVE ID: CVE-2024-46557 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-13T18:04:10.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#8817e09b31b04ebebdaa5d6df1415df0
CVE ID: CVE-2024-46558 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T20:40:10.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#43e2ae152385466180ebec957696ceaa
CVE ID: CVE-2024-46559 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T16:24:56.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#acee48e159494c479aecc1bfa87f0d83
CVE ID: CVE-2024-46560 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-14T15:42:24.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#2a9a497ab8214aeb991df9b9714b3c25
CVE ID: CVE-2024-46561 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-19T17:48:16.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#48ac749c7e444d8398b414f9d1d48c40
CVE ID: CVE-2024-46564 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-19T13:57:59.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#4ebd20d478124581b01338b89622363a
CVE ID: CVE-2024-46565 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-13T15:23:40.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#34ffb536a14f400680eec54e565b25f3
CVE ID: CVE-2024-46566 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T20:27:38.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#fed8e44f6b1e44fa9432a8359c36906a
CVE ID: CVE-2024-46567 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T15:46:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#c17358f2569248cea5c2b6c1bfe94306
CVE ID: CVE-2024-46568 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-17T14:01:49.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#41a3e5586f424ceb858a5a66836a40cb
CVE ID: CVE-2024-46571 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-17T14:08:44.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#b325c78d0d4643b6a2e7703a811f1dd5
CVE ID: CVE-2024-46580 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-14T14:46:53.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#230c640b5e354e20b5b529a510079eea
CVE ID: CVE-2024-46581 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T18:31:06.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#7c3324f08b21445fb00f1e8eaa26283f
CVE ID: CVE-2024-46582 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T14:02:09.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#20001f379c5641a1ab4f7ce459ce3db0
CVE ID: CVE-2024-46583 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T14:16:43.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#0f15f2bf2eb448c381255850e43cf96a
CVE ID: CVE-2024-46584 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-14T15:52:22.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#20fb6e1bcec049728e6319d9da46416d
CVE ID: CVE-2024-46585 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-17T14:11:17.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#8defec5c93be4cdfa5a1ea1078cbe7d2
CVE ID: CVE-2024-46586 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-13T15:38:35.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#3d4d22d30d164ef9b8fb1fe1024ada3a
CVE ID: CVE-2024-46588 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-13T19:29:21.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#7be91fa3afab4c9c978f7f6c1cc4c847
CVE ID: CVE-2024-46589 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-19T14:18:41.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#e170f53316c740488da5d16f57be1b52
CVE ID: CVE-2024-46590 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T14:42:22.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#e0a960e24de649b3a67c21a63592d82f
CVE ID: CVE-2024-46591 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-19T15:42:00.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#336655c8396248a2b0fc7be9da0b64c9
CVE ID: CVE-2024-46592 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T19:38:34.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#1fe94a7181d24f5fbe464a5f9417d084
CVE ID: CVE-2024-46593 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-17T17:33:18.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#f85d41a6875a4853be9a3c457bc81a33
CVE ID: CVE-2024-46594 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-19T15:10:47.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#33c5e76a919e4f04ae8a7bb039e37131
CVE ID: CVE-2024-46595 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-13T18:14:43.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#7f26d2119de54d5fbc25a8d3ebe2b16c
CVE ID: CVE-2024-46596 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-20T18:53:58.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#d049794ac4804e48968cb77589d5ec45
CVE ID: CVE-2024-46597 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-19T15:16:34.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#11467dddc16f460db85a5e8d3a6665fb
CVE ID: CVE-2024-46598 State: PUBLISHED Published: 2024-09-18T00:00:00.000Z Last Updated: 2025-03-18T15:02:45.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#0875f261ad5c4e1ba59448d49a261a99
CVE ID: CVE-2024-46600 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-25T20:27:14.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/loading15678/cms/tree/main/3/readme.md
CVE ID: CVE-2024-46601 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-09T15:46:13.364764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elspec-ltd.com/support/security-advisories/
CVE ID: CVE-2024-46602 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-09T15:46:52.022769Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elspec-ltd.com/support/security-advisories.
CVE ID: CVE-2024-46603 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-09T15:47:16.218223Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elspec-ltd.com/support/security-advisories/
CVE ID: CVE-2024-46605 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-16T19:47:12.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /admin.php?page=album of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://piwigo.com - https://drive.google.com/file/d/1-OiaEitTaY7tpEPZMZ8GYtyUH3QWVn22/view?usp=drive_link - https://github.com/Piwigo/Piwigo - https://github.com/achufistov/cve-achufistov/blob/main/CVE-2024-46605.md
CVE ID: CVE-2024-46606 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-17T13:17:48.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://piwigo.com - https://github.com/Piwigo/Piwigo - https://drive.google.com/drive/u/1/folders/1zirdhXurKVj1XtLlBESmiORuCUXtLGam - https://github.com/achufistov/cve-achufistov/blob/main/CVE-2024-46606.md
CVE ID: CVE-2024-46607 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T20:05:31.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.java file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://icecms.com - https://github.com/Thecosy/iceCMS?tab=readme-ov-file - https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46607.md
CVE ID: CVE-2024-46609 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-27T15:25:37.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Thecosy/iceCMS?tab=readme-ov-file - https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46609.md
CVE ID: CVE-2024-46610 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T20:12:52.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a crafted POST request sent to the endpoint /User/ChangeUser/s in the ChangeUser function in UserController.java Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Thecosy/iceCMS?tab=readme-ov-file - https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46610.md
CVE ID: CVE-2024-46612 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T20:35:27.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Thecosy/iceCMS?tab=readme-ov-file - https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46612.md