Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24117 State: PUBLISHED Published: 2024-10-02T00:00:00.000Z Last Updated: 2025-03-13T13:39:47.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login check state component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zty-1995/RG-NBS2009G-P-switch/tree/main/Any%20user%20login%20exists - https://gist.github.com/zty-1995/dbb3d5b2dbf65b4de5b71e57d08139ea
CVE ID: CVE-2024-24122 State: PUBLISHED Published: 2024-10-02T00:00:00 Last Updated: 2024-10-02T20:10:28.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zty007666/Shenzhen-Yitu-Software-Yitu-Project-Management-Software/tree/0215da8d
chment: References: - https://github.com/zty007666/Shenzhen-Yitu-Software-Yitu-Project-Management-Software/tree/0215da8db607824bc9523ce7532f8fc53ba1b40a/Remote%20Code%20Execution%20Vulnerability_02 - https://gist.github.com/zty-1995/effed155177edd7b22fdf2c082e32984
CVE ID: CVE-2024-24130 State: PUBLISHED Published: 2024-02-07T00:00:00 Last Updated: 2024-08-01T23:19:52.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Usr parameter at resellercenter/login.asp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/13
CVE ID: CVE-2024-24131 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-05T18:31:13.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/14
CVE ID: CVE-2024-24133 State: PUBLISHED Published: 2024-02-07T00:00:00 Last Updated: 2024-08-22T19:04:09.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hebing123/cve/issues/16
CVE ID: CVE-2024-24134 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-05-29T15:10:50.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting (XSS) via the 'Menu Name' and 'Description' fields in the Update Menu section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/2024_Online_Food_Menu_XSS/
CVE ID: CVE-2024-24135 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-06-05T18:29:25.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/2024_Product_Inventory_with_Export_to_Excel_XSS/
CVE ID: CVE-2024-24136 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-06-20T19:47:08.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/2024_Math_Game_XSS
CVE ID: CVE-2024-24139 State: PUBLISHED Published: 2024-01-29T00:00:00 Last Updated: 2024-08-23T20:07:40.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/Login_System_with_Email_Verification_SQL_Injection/
CVE ID: CVE-2024-24140 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-05-29T15:10:37.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/Daily_Habit_Tracker_App_SQL_Injection
CVE ID: CVE-2024-24141 State: PUBLISHED Published: 2024-01-29T00:00:00 Last Updated: 2024-08-23T20:05:41.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/School-Task-Manager-System-SQLi-1
CVE ID: CVE-2024-24142 State: PUBLISHED Published: 2024-02-13T00:00:00.000Z Last Updated: 2025-05-09T18:28:49.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/School-Task-Manager-SQL-Injection-2
CVE ID: CVE-2024-24146 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-03-27T20:04:45.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/307
CVE ID: CVE-2024-24147 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-29T17:49:28.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/311
CVE ID: CVE-2024-24148 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-29T14:59:46.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/308
CVE ID: CVE-2024-24149 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-13T19:02:02.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/310
CVE ID: CVE-2024-24150 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-03-27T20:38:27.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libming/libming/issues/309
CVE ID: CVE-2024-24155 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-28T15:21:11.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/919
CVE ID: CVE-2024-24156 State: PUBLISHED Published: 2024-03-16T00:00:00 Last Updated: 2024-08-19T19:39:50.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wr_content parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gnuboard/g6/issues/316
CVE ID: CVE-2024-24157 State: PUBLISHED Published: 2024-05-09T18:18:38.592Z Last Updated: 2025-03-25T15:42:13.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting (XSS) via board.py. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gnuboard/g6/issues/314
CVE ID: CVE-2024-24160 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-05-09T17:58:01.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wy876/cve/issues/1
CVE ID: CVE-2024-24161 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-12T14:55:57.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wy876/cve/issues/2
CVE ID: CVE-2024-24186 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-05-08T18:51:55.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pcmacdon/jsish/issues/98
CVE ID: CVE-2024-24188 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-09T16:17:46.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pcmacdon/jsish/issues/100
CVE ID: CVE-2024-24189 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-20T20:14:56.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pcmacdon/jsish/issues/101
CVE ID: CVE-2024-24192 State: PUBLISHED Published: 2024-06-06T21:23:15.103Z Last Updated: 2025-02-13T15:47:05.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/robertdavidgraham/robdns/issues/8
CVE ID: CVE-2024-24194 State: PUBLISHED Published: 2024-06-06T21:23:49.003Z Last Updated: 2025-02-13T15:47:06.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/robertdavidgraham/robdns/issues/10
CVE ID: CVE-2024-24195 State: PUBLISHED Published: 2024-06-06T21:24:21.590Z Last Updated: 2025-02-13T15:47:06.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/robertdavidgraham/robdns/issues/9
CVE ID: CVE-2024-24198 State: PUBLISHED Published: 2024-06-06T21:26:31.697Z Last Updated: 2025-02-13T15:47:07.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pymumu/smartdns/issues/1629
CVE ID: CVE-2024-24199 State: PUBLISHED Published: 2024-06-06T21:27:05.388Z Last Updated: 2025-03-13T13:56:49.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pymumu/smartdns/issues/1628
CVE ID: CVE-2024-24202 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-19T20:00:47.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://clammy-blizzard-8ef.notion.site/Zentao-PMS-Authorized-Remote-Code-Execution-Vulnerability-1077a870c92848e18fe0c139c4fc2176
CVE ID: CVE-2024-24213 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-19T19:55:59.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component /pg_meta/default/query. NOTE: the vendor's position is that this is an intended feature; also, it exists in the Supabase dashboard product, not the Supabase PostgreSQL product. Specifically, /pg_meta/default/query is for SQL queries that are entered in an intended UI by an authorized user. Nothing is injected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://app.flows.sh:8443/pro
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://app.flows.sh:8443/project/default%2C - https://reference1.example.com/project/default/logs/explorer%2C - https://postfixadmin.ballardini.com.ar:8443/project/default/logs/explorer. - https://github.com/940198871/Vulnerability-details/blob/main/CVE-2024-24213 - https://supabase.com/docs/guides/database/overview#the-sql-editor
CVE ID: CVE-2024-24215 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-20T20:17:27.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://reference4.example.com - https://reference3.example.com//1.222.228.4/%2C - https://github.com/940198871/Vulnerability-details/blob/main/CVE-2024-24215
CVE ID: CVE-2024-24216 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-08T18:44:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/module/repo/model.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/easysoft/zentaopms/issues/133 - https://github.com/l3s10n/ZenTaoPMS_RCE
CVE ID: CVE-2024-24230 State: PUBLISHED Published: 2024-03-18T00:00:00.000Z Last Updated: 2025-03-25T18:07:09.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime().exec followed by an OS command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.munz4u.de/posts/2023/11/cve-2023-xxxxx-rce-via-ssti-in-komm.one-cms-10.4.2.14/
CVE ID: CVE-2024-24245 State: PUBLISHED Published: 2024-04-09T00:00:00 Last Updated: 2024-08-23T20:29:57.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a local attacker to escalate privileges via the ClamXAV helper tool component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.clamxav.com/version-history/
CVE ID: CVE-2024-24246 State: PUBLISHED Published: 2024-02-29T00:00:00.000Z Last Updated: 2025-11-04T22:05:46.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/qpdf/qpdf/issues/1123 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WLK
OFUROLP3EM25ILC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3N6TULMEYVCLXO47Y5W4VWCJMSB72CB/
CVE ID: CVE-2024-24254 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-06-05T18:23:34.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp. This will result in the drone uploading overlapping geofences and mission routes. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Drone-Lab/PX4-Autopilot/blob/report-can-not-pause-vulnerability/Multi-Threaded%20Race%20Condition%20bug%20found%20in%20PX4%20cause%20drone%
ilot/blob/report-can-not-pause-vulnerability/Multi-Threaded%20Race%20Condition%20bug%20found%20in%20PX4%20cause%20drone%20can%20not%20PAUSE.md - https://github.com/PX4/PX4-Autopilot
CVE ID: CVE-2024-24255 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-08T19:03:43.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Drone-Lab/PX4-Autopilot/blob/report-the-faliure-of-precheck/report-the-faliure-of-precheck.md
CVE ID: CVE-2024-24256 State: PUBLISHED Published: 2024-02-15T00:00:00 Last Updated: 2024-11-25T17:42:08.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/l8l1/killl.github.io/blob/main/3.md
CVE ID: CVE-2024-24257 State: PUBLISHED Published: 2024-07-26T00:00:00 Last Updated: 2024-08-01T23:19:51.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://idssgmcc.github.io/aran.github.io/1.html
CVE ID: CVE-2024-24258 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-11-04T18:29:00.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md - https://github.com/freeglut/freeglut/pull/155 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/ - https://lists.fedoraproject.org/archives/list/package-announce%
aproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/
CVE ID: CVE-2024-24259 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-11-04T18:29:01.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_2.md - https://github.com/freeglut/freeglut/pull/155 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/ - https://lists.fedoraproject.org/archives/list/package
ists.fedoraproject.org/message/T43DAHPIWMGN54E4I6ABLHNYHZSTX7H5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/
CVE ID: CVE-2024-24260 State: PUBLISHED Published: 2024-02-05T00:00:00 Last Updated: 2024-08-26T18:24:18.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function at /uac/sip-uac-subscribe.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yinluming13579/media-server_defects/blob/main/media-server_1.md
CVE ID: CVE-2024-24262 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-06-06T20:15:21.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function at /uac/sip-uac-transaction.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LuMingYinDetect/media-server_detect/blob/main/media_server_detect_1.md