Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-13059 State: PUBLISHED Published: 2025-02-10T18:53:04.561Z Last Updated: 2025-02-10T23:18:49.345Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-29 Description: A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling of non-ASCII filenames in the multer library. This vulnerability can lead to arbitrary file write, which can subsequently result in remote code execution. The issue arises when the filename transformation introduces '../' sequences, which are not sanitized by multer, allowing attackers with manager
e filename transformation introduces '../' sequences, which are not sanitized by multer, allowing attackers with manager or admin roles to write files to arbitrary locations on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/92a875fe-c5b3-485c-b03f-d3185189e0b1 - https://github.com/mintplex-labs/anything-llm/commit/0b7bf68f2c02ca68075970fbf85d5a70ca5e94ca
CVE ID: CVE-2024-13060 State: PUBLISHED Published: 2025-03-20T10:08:46.465Z Last Updated: 2025-10-15T12:49:34.786Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-862 Description: A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/98a49c90-e095-441f-900c-59d463dc8e8f - https://github.com/mintplex-labs/anything-llm/commit/
https://huntr.com/bounties/98a49c90-e095-441f-900c-59d463dc8e8f - https://github.com/mintplex-labs/anything-llm/commit/696af19c45473172ad4d3ca749281800a4d1a45a
CVE ID: CVE-2024-13061 State: PUBLISHED Published: 2024-12-31T11:13:46.744Z Last Updated: 2025-01-02T00:56:52.995Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: 2100 Technology Electronic Products: Official Document Management System Problem Types: CWE-290 Description: The Electronic Official Document Management System from 2100 Technology has an Authentication Bypass vulnerability. Although the product enforces an IP whitelist for the API used to query user tokens, unauthenticated remote attackers can still deceive the server to obtain tokens of arbitrary users, which can then be used to log into the system. Additional Analyst Notes: - CISA ADP Vulnrich
tokens of arbitrary users, which can then be used to log into the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8339-570fa-1.html - https://www.twcert.org.tw/en/cp-139-8340-d8b16-2.html - https://www.chtsecurity.com/news/ade9e9af-61d0-4e3c-8aa0-e8524ee2cfbc - https://www.chtsecurity.com/news/255984da-6630-4e25-ba9b-5ce6933935a6
CVE ID: CVE-2024-13062 State: PUBLISHED Published: 2025-01-02T09:09:45.871Z Last Updated: 2025-01-06T20:32:58.212Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: Router Problem Types: CWE-912, CWE-77 Description: An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/content/asus-product-security-advisory/
CVE ID: CVE-2024-13063 State: PUBLISHED Published: 2025-09-03T08:33:39.134Z Last Updated: 2025-09-03T13:24:01.027Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: Akinsoft Products: MyRezzta Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing.This issue affects MyRezzta: from s2.02.02 before v2.05.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0205
CVE ID: CVE-2024-13064 State: PUBLISHED Published: 2025-09-03T08:40:36.938Z Last Updated: 2025-09-03T13:15:43.055Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: MyRezzta Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting (XSS).This issue affects MyRezzta: from s2.02.02 before v2.05.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0205
CVE ID: CVE-2024-13065 State: PUBLISHED Published: 2025-09-03T08:48:48.851Z Last Updated: 2025-09-03T14:40:56.016Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: MyRezzta Problem Types: CWE-841, CWE-400 Description: Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding.This issue affects MyRezzta: from s2.02.02 before v2.05.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0205
CVE ID: CVE-2024-13066 State: PUBLISHED Published: 2025-09-03T13:05:20.054Z Last Updated: 2025-09-03T13:26:27.354Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: LimonDesk Problem Types: CWE-1021 Description: Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking.This issue affects LimonDesk: from s1.02.14 before v1.02.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0206
CVE ID: CVE-2024-13067 State: PUBLISHED Published: 2024-12-31T09:00:52.751Z Last Updated: 2024-12-31T15:48:37.653Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: CodeAstro Products: Online Food Ordering System Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/all_users.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289823 - https://vuldb.com/?ctiid.289823 - https://vuldb.com/?submit.472081 - https://github.com/shaturo1337/POCs/blob/main/Broken%20Access%20Control%20in%20Online%20Food%20Ordering%20System.md - https://codeastro.com/
CVE ID: CVE-2024-13068 State: PUBLISHED Published: 2025-09-03T13:12:12.966Z Last Updated: 2025-09-03T15:43:13.343Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: LimonDesk Problem Types: CWE-346 Description: Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.This issue affects LimonDesk: from s1.02.14 before v1.02.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0206
CVE ID: CVE-2024-13069 State: PUBLISHED Published: 2024-12-31T10:38:12.305Z Last Updated: 2024-12-31T15:13:06.099Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Multi Role Login System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289824 - https://vuldb.com/?ctiid.289824 - https://vuldb.com/?submit.469520 - https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20Multi%20Role%20Login%20System.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-13070 State: PUBLISHED Published: 2024-12-31T14:31:05.847Z Last Updated: 2024-12-31T14:53:56.238Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/update_users.php of the component Update User Page. The manipulation of the argument user_upd leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289825 - https://vuldb.com/?ctiid.289825 - https://vuldb.com/?submit.472104 - https://github.com/shaturo1337/POCs/blob/main/RCE%20via%20SQL%20Injection%20in%20Online%20Food%20Ordering%20System.md - https://codeastro.com/
CVE ID: CVE-2024-13071 State: PUBLISHED Published: 2025-09-04T07:40:22.506Z Last Updated: 2025-09-04T13:27:43.858Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: e-Mutabakat Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft e-Mutabakat allows Cross-Site Scripting (XSS).This issue affects e-Mutabakat: from 2.02.05 before v2.02.06. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0207
CVE ID: CVE-2024-13072 State: PUBLISHED Published: 2024-12-31T15:00:11.315Z Last Updated: 2024-12-31T15:53:19.078Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 1000 Projects Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additiona
injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289826 - https://vuldb.com/?ctiid.289826 - https://vuldb.com/?submit.472165 - https://github.com/lings3346/CVE/blob/main/SQL_Injection_in_Beauty_Parlour_Management_System.md - https://1000projects.org/
CVE ID: CVE-2024-13073 State: PUBLISHED Published: 2025-09-04T08:31:36.871Z Last Updated: 2025-09-04T20:08:00.246Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: TaskPano Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft TaskPano allows Cross-Site Scripting (XSS).This issue affects TaskPano: s1.06.04. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0208
CVE ID: CVE-2024-13074 State: PUBLISHED Published: 2024-12-31T16:24:59.551Z Last Updated: 2024-12-31T17:23:41.412Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289827 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289827 - https://vuldb.com/?ctiid.289827 - https://vuldb.com/?submit.472181 - https://phpgurukul.com/
CVE ID: CVE-2024-13075 State: PUBLISHED Published: 2024-12-31T17:31:05.450Z Last Updated: 2025-01-02T19:20:42.697Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in PHPGurukul Land Record System 1.0. This vulnerability affects unknown code of the file /admin/add-propertytype.php. The manipulation of the argument Land Property Type leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.28
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289828 - https://vuldb.com/?ctiid.289828 - https://vuldb.com/?submit.472183 - https://phpgurukul.com/
CVE ID: CVE-2024-13076 State: PUBLISHED Published: 2024-12-31T18:00:11.627Z Last Updated: 2025-01-02T19:20:06.315Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Land Record System 1.0. This issue affects some unknown processing of the file /admin/edit-propertytype.php. The manipulation of the argument Property Type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289829 - https://vuldb.com/?ctiid.289829 - https://vuldb.com/?submit.472185 - https://phpgurukul.com/
CVE ID: CVE-2024-13077 State: PUBLISHED Published: 2024-12-31T18:31:05.394Z Last Updated: 2024-12-31T19:06:59.663Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/add-property.php. The manipulation of the argument Land Subtype leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289830 - https://vuldb.com/?ctiid.289830 - https://vuldb.com/?submit.472186 - https://phpgurukul.com/
CVE ID: CVE-2024-13078 State: PUBLISHED Published: 2024-12-31T19:00:15.596Z Last Updated: 2025-01-02T19:19:13.185Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289831 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289831 - https://vuldb.com/?ctiid.289831 - https://vuldb.com/?submit.472187 - https://phpgurukul.com/
CVE ID: CVE-2024-13079 State: PUBLISHED Published: 2024-12-31T19:31:05.679Z Last Updated: 2025-01-02T17:39:55.258Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/property-details.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289832
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289832 - https://vuldb.com/?ctiid.289832 - https://vuldb.com/?submit.472188 - https://phpgurukul.com/
CVE ID: CVE-2024-13080 State: PUBLISHED Published: 2024-12-31T20:00:14.153Z Last Updated: 2025-04-30T18:32:26.699Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Land Record System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/aboutus.php. The manipulation of the argument Page Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289833 - https://vuldb.com/?ctiid.289833 - https://vuldb.com/?submit.472190 - https://phpgurukul.com/
CVE ID: CVE-2024-13081 State: PUBLISHED Published: 2024-12-31T20:31:05.663Z Last Updated: 2024-12-31T21:39:04.921Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Land Record System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/contactus.php. The manipulation of the argument Page Description leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289834 - https://vuldb.com/?ctiid.289834 - https://vuldb.com/?submit.472192 - https://phpgurukul.com/
CVE ID: CVE-2024-13082 State: PUBLISHED Published: 2024-12-31T21:00:14.505Z Last Updated: 2024-12-31T21:40:49.199Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Land Record System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/search-property.php. The manipulation of the argument Search By leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289835 - https://vuldb.com/?ctiid.289835 - https://vuldb.com/?submit.472193 - https://phpgurukul.com/
CVE ID: CVE-2024-13083 State: PUBLISHED Published: 2024-12-31T21:31:06.150Z Last Updated: 2025-01-02T16:45:02.379Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument Admin Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289836 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289836 - https://vuldb.com/?ctiid.289836 - https://vuldb.com/?submit.472194 - https://phpgurukul.com/
CVE ID: CVE-2024-13084 State: PUBLISHED Published: 2024-12-31T22:00:13.841Z Last Updated: 2025-01-02T16:44:29.639Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search-property.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289837 - https://vuldb.com/?ctiid.289837 - https://vuldb.com/?submit.472195 - https://phpgurukul.com/
CVE ID: CVE-2024-13085 State: PUBLISHED Published: 2024-12-31T22:31:05.941Z Last Updated: 2025-01-02T16:24:47.432Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.28
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289838 - https://vuldb.com/?ctiid.289838 - https://vuldb.com/?submit.472196 - https://phpgurukul.com/
CVE ID: CVE-2024-13086 State: PUBLISHED Published: 2025-03-07T16:12:39.065Z Last Updated: 2025-03-07T17:55:56.464Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-200 Description: An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later QuTS hero h5.2.0.2851 build 20240808 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qna
ro h5.2.0.2851 build 20240808 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-03