Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6089 State: PUBLISHED Published: 2024-07-16T17:10:21.810Z Last Updated: 2024-08-01T21:33:04.327Z Vendors: Rockwell Automation Products: 5015 - AENFTXT Problem Types: CWE-20 Description: An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1680.html
CVE ID: CVE-2024-6090 State: PUBLISHED Published: 2024-06-27T18:40:51.125Z Last Updated: 2025-10-15T12:50:32.559Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-22 Description: A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to authenticate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bo
enticate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c - https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705
CVE ID: CVE-2024-6091 State: PUBLISHED Published: 2024-09-11T12:49:07.293Z Last Updated: 2024-09-11T18:23:23.728Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: significant-gravitas Products: significant-gravitas/autogpt Problem Types: CWE-78 Description: A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can circumvent this restriction by executing commands with a modified path, such as '/bin/./whoami', which is not recognized by the denylist. Additional
y executing commands with a modified path, such as '/bin/./whoami', which is not recognized by the denylist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8a742c13-bb5e-4bc9-8b86-049d8a386050 - https://github.com/significant-gravitas/autogpt/commit/ef691359b774a1f9f80cf4f5ace9821967b718ed
CVE ID: CVE-2024-6093 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:24.715Z Description: No description available.
CVE ID: CVE-2024-6094 State: PUBLISHED Published: 2024-07-24T06:00:02.906Z Last Updated: 2024-08-01T21:33:03.283Z Vendors: Unknown Products: WP ULike Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/019b3f34-7b85-4728-8dd7-ca472d6b2d06/
CVE ID: CVE-2024-6095 State: PUBLISHED Published: 2024-07-06T17:48:46.735Z Last Updated: 2024-08-01T21:33:03.282Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: mudler Products: mudler/localai Problem Types: CWE-918 Description: A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latter can lead to LFI. However, the output is limited due to the length of the error message. This vulnerability can be exploited by an attacker with network access to the LocalAI instance, potentiall
rror message. This vulnerability can be exploited by an attacker with network access to the LocalAI instance, potentially allowing unauthorized access to internal HTTP(s) servers and partial reading of local files. The issue is fixed in version 2.17. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/4799262d-72dc-43c8-bc99-81d0dce996dc - https://github.com/mudler/localai/commit/2fc6fe806b903ac0a70218b21b5c84443a1b0866
CVE ID: CVE-2024-6096 State: PUBLISHED Published: 2024-07-24T14:00:19.107Z Last Updated: 2025-04-25T23:02:56.247Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: Telerik Reporting Problem Types: CWE-470 Description: In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.telerik.com/reporting/knowledge-base/unsafe-reflection-CVE-2024-6096
CVE ID: CVE-2024-6097 State: PUBLISHED Published: 2025-02-12T17:37:10.917Z Last Updated: 2025-02-12T18:54:37.572Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Progress Software Corporation Products: Progress® Telerik® Reporting Problem Types: CWE-36 Description: In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through an absolute path vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.telerik.com/reporting/knowledge-base/kb-security-absolute-path-traversal-CVE-2024-6097
CVE ID: CVE-2024-6098 State: PUBLISHED Published: 2024-08-16T14:57:51.023Z Last Updated: 2024-08-19T17:32:48.721Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PTC, Software Toolbox, GE Products: Kepware ThingWorx Kepware Server, Kepware KEPServerEX, TOP Server, IGS Problem Types: CWE-770 Description: When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configured correctly, could deliver a response leading to unrestricted or unregulated resource allocation. This could cause a denial-of-service condition and crash the Kepware application. By default, these fu
ource allocation. This could cause a denial-of-service condition and crash the Kepware application. By default, these functions are turned off, yet they remain accessible for users who recognize and require their advantages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-228-11 - https://www.ptc.com/en/support/article/CS423892
CVE ID: CVE-2024-6099 State: PUBLISHED Published: 2024-07-02T11:01:35.868Z Last Updated: 2024-08-01T21:33:04.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: thimpress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-420 Unprotected Alternate Channel Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in the 'check_validate_fields' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.
t possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7ee714c7-4c9b-4627-9ba9-f83aeca6a0a5?source=cve - https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/class-lp-checkout.php#L124 - https://plugins.trac.wordpress.org/changeset/3109339/
CVE ID: CVE-2024-6100 State: PUBLISHED Published: 2024-06-19T23:40:56.341Z Last Updated: 2025-02-13T17:54:38.326Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html - https://issues.chromium.org/issues/344608204 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO
4 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
CVE ID: CVE-2024-6101 State: PUBLISHED Published: 2024-06-19T23:49:14.434Z Last Updated: 2025-02-13T17:54:38.995Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html - https://issues.chromium.org/issues/343748812 - https://lists.fedoraproject.org/archives/list/package-announce@lists
ml - https://issues.chromium.org/issues/343748812 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
CVE ID: CVE-2024-6102 State: PUBLISHED Published: 2024-06-19T23:49:14.776Z Last Updated: 2025-02-13T17:54:39.616Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html - https://issues.chromium.org/issues/339169163 - https://lists.fedoraproject.org/archives/list/package-announce@lists
ml - https://issues.chromium.org/issues/339169163 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
CVE ID: CVE-2024-6103 State: PUBLISHED Published: 2024-06-19T23:39:25.295Z Last Updated: 2025-02-13T17:54:40.283Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html - https://issues.chromium.org/issues/344639860 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEH
issues/344639860 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
CVE ID: CVE-2024-6104 State: PUBLISHED Published: 2024-06-24T17:06:21.150Z Last Updated: 2024-08-01T21:33:04.395Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: HashiCorp Products: Shared library Problem Types: CWE-532 Description: go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.hashicorp.com/c/security
CVE ID: CVE-2024-6105 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:23.930Z Description: No description available.
CVE ID: CVE-2024-6106 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:23.145Z Description: No description available.
CVE ID: CVE-2024-6107 State: PUBLISHED Published: 2025-07-21T08:52:56.608Z Last Updated: 2025-07-21T17:07:16.633Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H) Vendors: Canonical Products: MAAS Problem Types: CWE-287 Description: Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/maas/+bug/2069094
CVE ID: CVE-2024-6108 State: PUBLISHED Published: 2024-06-18T10:00:04.950Z Last Updated: 2024-08-01T21:33:05.244Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Genexis Products: Tilgin Home Gateway Problem Types: CWE-80 Description: A vulnerability was found in Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/vood_view.cgi?act=index&lang=EN# of the component Login. The manipulation of the argument errmsg leads to basic cross site scripting. It is possible to launch the attack remotely. VDB-268854 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted earl
ch the attack remotely. VDB-268854 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268854 - https://vuldb.com/?ctiid.268854 - https://vuldb.com/?submit.353708
CVE ID: CVE-2024-6109 State: PUBLISHED Published: 2024-06-18T11:31:03.956Z Last Updated: 2024-08-01T21:33:04.477Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file addmeasurement.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268855. Additional Analys
isclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268855. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268855 - https://vuldb.com/?ctiid.268855 - https://vuldb.com/?submit.358590 - https://github.com/PHJ-doit/cve/issues/1
CVE ID: CVE-2024-6110 State: PUBLISHED Published: 2024-06-18T11:31:05.386Z Last Updated: 2024-08-01T21:33:04.568Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Magbanua Beach Resort Online Reservation System Problem Types: CWE-434 Description: A vulnerability was found in itsourcecode Magbanua Beach Resort Online Reservation System up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file controller.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability
e launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268856. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268856 - https://vuldb.com/?ctiid.268856 - https://vuldb.com/?submit.358592 - https://github.com/Laster-dev/CVE/issues/1
CVE ID: CVE-2024-6111 State: PUBLISHED Published: 2024-06-18T12:31:04.382Z Last Updated: 2024-08-01T21:33:04.607Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Pool of Bethesda Online Reservation System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268857 was assigned to this vulnerability. Additional Analyst
sclosed to the public and may be used. The identifier VDB-268857 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268857 - https://vuldb.com/?ctiid.268857 - https://vuldb.com/?submit.358988 - https://github.com/wangyuan-ui/CVE/issues/1
CVE ID: CVE-2024-6112 State: PUBLISHED Published: 2024-06-18T12:31:06.073Z Last Updated: 2024-08-01T21:33:04.295Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Pool of Bethesda Online Reservation System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument log_email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-268858 is the identifier assigned to this vulnerability. Additional Analyst N
sclosed to the public and may be used. VDB-268858 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268858 - https://vuldb.com/?ctiid.268858 - https://vuldb.com/?submit.358990 - https://github.com/wangyuan-ui/CVE/issues/2
CVE ID: CVE-2024-6113 State: PUBLISHED Published: 2024-06-20T05:18:03.352Z Last Updated: 2024-08-01T21:33:04.903Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Monbela Tourist Inn Online Reservation System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The identifier VDB-268865 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Con
fier VDB-268865 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268865 - https://vuldb.com/?ctiid.268865 - https://vuldb.com/?submit.358991 - https://github.com/wangyuan-ui/CVE/issues/3
CVE ID: CVE-2024-6114 State: PUBLISHED Published: 2024-06-18T13:00:05.407Z Last Updated: 2024-08-01T21:33:04.356Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Monbela Tourist Inn Online Reservation System Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up to 1.0. Affected is an unknown function of the file controller.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268866 is the identifier assigned to this vulnerabil
. The exploit has been disclosed to the public and may be used. VDB-268866 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268866 - https://vuldb.com/?ctiid.268866 - https://vuldb.com/?submit.358995 - https://github.com/wangyuan-ui/CVE/issues/4
CVE ID: CVE-2024-6115 State: PUBLISHED Published: 2024-06-18T13:00:07.459Z Last Updated: 2024-08-01T21:33:04.467Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Simple Online Hotel Reservation System Problem Types: CWE-434 Description: A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file add_room.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268867. Ad
loit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268867. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268867 - https://vuldb.com/?ctiid.268867 - https://vuldb.com/?submit.358996 - https://github.com/wangyuan-ui/CVE/issues/5
CVE ID: CVE-2024-6116 State: PUBLISHED Published: 2024-06-18T13:31:03.695Z Last Updated: 2024-08-01T21:33:04.607Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Simple Online Hotel Reservation System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file edit_room.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268868. A
ely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268868. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268868 - https://vuldb.com/?ctiid.268868 - https://vuldb.com/?submit.359002 - https://github.com/wangyuan-ui/CVE/issues/6
CVE ID: CVE-2024-6117 State: PUBLISHED Published: 2024-08-05T04:20:36.092Z Last Updated: 2024-08-05T14:45:28.267Z Vendors: Hamastar Technology Products: MeetingHub Paperless Meetings Problem Types: CWE-434 Description: A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2024-02
CVE ID: CVE-2024-6118 State: PUBLISHED Published: 2024-08-05T04:21:23.711Z Last Updated: 2024-08-05T14:34:57.112Z Vendors: Hamastar Technology Products: MeetingHub Paperless Meetings Problem Types: CWE-256 Description: A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2024-03