Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-30927 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:43.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30928 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:44.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30929 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:45.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30931 State: PUBLISHED Published: 2024-06-25T00:00:00 Last Updated: 2024-08-02T01:46:03.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to escalate privileges via the notifications.html component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://happy-little-accidents.pages.dev/posts/CVE-2024-30931/
CVE ID: CVE-2024-30938 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T01:46:03.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/lampSEC/semcms/blob/main/semcms.md
CVE ID: CVE-2024-30939 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-09-06T22:12:26.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40deepsahu1/yealink-ip-phone-account-take-over-9bf9e7b847c0?source=friends_link&sk=b0d664dd5b3aad5b758e4934aca997ad
CVE ID: CVE-2024-30946 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-08-02T01:46:03.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/testgo1safe/cms/blob/main/1.md
CVE ID: CVE-2024-30949 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T17:40:54.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://inbox.sourceware.org/newlib/20231129035714.469943-1-visitorckw%40gmail.com/ - https://sourceware.org/git/?p=newlib-cygwin.git%3Ba=commit%3Bh=5f15d7c5817b07a6b18cbab17342c95cb7b42be4 - https://gist.github.com/visitorckw/6b26e599241ea80210ea136b28441661
CVE ID: CVE-2024-30950 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CrownZTX/vulnerabilities/blob/main/fudforum/stored_xss_in_admsql.md
CVE ID: CVE-2024-30951 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-11-22T15:20:48.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CrownZTX/vulnerabilities/blob/main/fudforum/Reflected_xss_in_FUDforum.md
CVE ID: CVE-2024-30952 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-03-21T20:39:27.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the domain input field under /youdoamin/?g=Team&m=Setting&a=action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CrownZTX/vulnerabilities/blob/main/pescms/stored_xss.md
CVE ID: CVE-2024-30953 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CrownZTX/vulnerabilities/blob/main/htmly/stored_xss_in_Menueditor.md
CVE ID: CVE-2024-30961 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2024-12-11T16:22:05.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-planning/navigation2/issues/4175 - https://github.com/ros-planning/navigation2/pull/4180 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-30962 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2025-01-09T16:40:54.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-planning/navigation2/issues/4177 - https://github.com/ros-planning/navigation2/pull/4206 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-30963 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2024-12-06T20:04:03.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-planning/navigation2/issues/4157 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-30964 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2024-12-06T19:58:12.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-planning/navigation2/issues/4166 - https://github.com/ros-planning/navigation2/pull/4176 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-30965 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-09-04T15:50:27.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Fishkey1/cms/tree/main - https://github.com/Fishkey1/cms/commit/e9d294951ab2dd85709f1d12ad4747f25d326b1b
CVE ID: CVE-2024-30973 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-09T14:35:11.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Athos-Zago/CVE-2024-30973/tree/main
CVE ID: CVE-2024-30974 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:46:03.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/torchstar/autoexpress/blob/master/buginfodetail.md
CVE ID: CVE-2024-30977 State: PUBLISHED Published: 2024-04-05T00:00:00.000Z Last Updated: 2025-03-13T20:42:18.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.secnet.cn/newsdetail/388.html - https://github.com/wodi98k/zip_crack/blob/main/SecnetAC.pdf
CVE ID: CVE-2024-30979 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Cyber Cafe Management System 1.0 allows a remote attacker to execute arbitrary code via the compname parameter in edit-computer-details.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30979-stored-cross-site-scripting-xss-in-cyber-cafe-management-system-project-ccms-1-44b10f50817b
CVE ID: CVE-2024-30980 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-09-06T18:45:51.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the Computer Location parameter in manage-computer.php page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40shanunirwan/cve-2024-30980-sql-injection-vulnerability-in-cyber-cafe-management-system-using-php-mysql-v1-0-30bffd26dab7
CVE ID: CVE-2024-30981 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-03-28T19:29:49.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in /edit-computer-detail.php in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0 allows attackers to run arbitrary SQL commands via editid in the application URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30981-sql-injection-vulnerability-in-cyber-cafe-management-system-using-php-mysql-v1-0-534676f9bdeb
CVE ID: CVE-2024-30982 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the upid parameter in the /view-user-detail.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30982-sql-injection-vulnerability-in-cyber-cafe-management-system-using-php-mysql-v1-0-2024a9eed6d7
CVE ID: CVE-2024-30983 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the compname parameter in /edit-computer-detail.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30983-sql-injection-vulnerability-in-cyber-cafe-management-system-using-php-mysql-v1-0-e67289ffb08a
CVE ID: CVE-2024-30985 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30985-sql-injection-vulnerability-in-client-management-system-using-php-mysql-1-1-c21fecbda062
CVE ID: CVE-2024-30986 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30986-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-3fb702d9d510
CVE ID: CVE-2024-30987 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:03.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30987-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-b6a7a177d254
CVE ID: CVE-2024-30988 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:04.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30988-cross-site-scripting-vulnerability-in-client-management-system-using-php-mysql-1-1-e7a677936c23
CVE ID: CVE-2024-30989 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-03-14T16:08:11.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30989-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-3cfa1c54e4a6
CVE ID: CVE-2024-30990 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T01:46:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40shanunirwan/cve-2024-30990-sql-injection-vulnerability-in-invoices-page-of-client-management-system-using-php-58baa94a1761
CVE ID: CVE-2024-30998 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-02T01:46:03.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/efekaanakkar/CVEs/blob/main/PHPGurukul-Men-Salon-Management-System-2.0.md
CVE ID: CVE-2024-31002 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-10-28T13:58:51.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache() at Ap4Utils.cpp component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/939 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-31002
CVE ID: CVE-2024-31003 State: PUBLISHED Published: 2024-04-02T00:00:00.000Z Last Updated: 2025-03-25T16:15:03.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial at Ap4ByteStream.cpp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/939 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-31003
CVE ID: CVE-2024-31004 State: PUBLISHED Published: 2024-04-02T00:00:00.000Z Last Updated: 2025-03-27T16:42:29.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_StsdAtom::AP4_StsdAtom,mp4fragment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/941 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-31004
CVE ID: CVE-2024-31005 State: PUBLISHED Published: 2024-04-02T00:00:00.000Z Last Updated: 2025-03-13T16:27:07.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/941 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-31005
CVE ID: CVE-2024-31007 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-21T20:35:12.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial of service via a crafted file. Affected component is IrfanView 32bit 4.66 with plugin formats.dll. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kirito999/IrfanViewBug - https://www.fosshub.com/IrfanView.html?dwl=iview466_setup.exe - https://www.fosshub.com/IrfanView.html?dwl=iview466_plugins.zip - https://mediaside.net/irfanview-italia/2024/04/12/4-67-data-di-rilascio-5-aprile-2024/
CVE ID: CVE-2024-31008 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-02T01:46:04.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/majic-banana/vulnerability/blob/main/POC/WUZHICMS4.1.0-Captcha%20bypass%20%28logic%20vulnerability%29.md
CVE ID: CVE-2024-31009 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-02T01:46:04.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ss122-0ss/semcms/blob/main/README.md
CVE ID: CVE-2024-31010 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-14T19:50:38.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ss122-0ss/semcms/blob/main/README.md
CVE ID: CVE-2024-31011 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-20T14:57:33.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ss122-0ss/beescms/blob/main/readme.md
CVE ID: CVE-2024-31012 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-02T01:46:03.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ss122-0ss/semcmsv4.8/blob/main/readme.md
CVE ID: CVE-2024-31013 State: PUBLISHED Published: 2024-04-03T00:00:00.000Z Last Updated: 2025-03-17T15:07:07.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to the bottom of the homepage in footer_info parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/291
CVE ID: CVE-2024-31022 State: PUBLISHED Published: 2024-04-08T00:00:00 Last Updated: 2024-08-02T01:46:04.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.xuxblog.top/2024/03/25/CandyCMS-Pre-Auth-RCE/