Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36231 State: PUBLISHED Published: 2024-06-13T07:53:13.344Z Last Updated: 2024-10-07T13:47:20.651Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a form that causes the execu
er interaction, such as convincing a user to click on a specially crafted link or to submit a form that causes the execution of the malicious script. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html
CVE ID: CVE-2024-36232 State: PUBLISHED Published: 2024-06-13T07:52:09.444Z Last Updated: 2024-10-07T13:51:04.622Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
CVE ID: CVE-2024-36233 State: PUBLISHED Published: 2024-06-13T07:53:45.050Z Last Updated: 2024-10-07T13:53:42.800Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a victim to click on a malicious link. Additional Analyst Notes: - CISA ADP Vulnrichm
er interaction, such as convincing a victim to click on a malicious link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html
CVE ID: CVE-2024-36234 State: PUBLISHED Published: 2024-06-13T07:53:17.883Z Last Updated: 2024-10-07T14:07:04.451Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a form that triggers the vulnerabili
CVE ID: CVE-2024-36235 State: PUBLISHED Published: 2024-06-13T07:53:08.024Z Last Updated: 2024-10-07T14:10:27.068Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a form that causes the execution of
CVE ID: CVE-2024-36236 State: PUBLISHED Published: 2024-06-13T07:53:50.347Z Last Updated: 2024-10-07T14:10:38.867Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user interaction, such as convincing a victim to click on a specially crafted link. Additional Analyst Notes: - CISA ADP Vulnrichmen
CVE ID: CVE-2024-36238 State: PUBLISHED Published: 2024-06-13T07:53:54.852Z Last Updated: 2024-10-07T14:14:59.057Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a malicious link or to interact with a maliciously crafted web page. Addit
action, such as convincing a user to click on a malicious link or to interact with a maliciously crafted web page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html
CVE ID: CVE-2024-36239 State: PUBLISHED Published: 2024-06-13T07:53:54.087Z Last Updated: 2024-10-07T14:15:11.501Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user interaction, such as convincing a victim to click on a specially crafted link. Additional Analyst Notes: - CISA ADP Vulnrichmen
CVE ID: CVE-2024-36241 State: PUBLISHED Published: 2024-05-26T13:32:18.865Z Last Updated: 2024-08-02T03:30:13.174Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to enforce proper access controls which allows user to view arbitrary post contents via the /playbook add slash command Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-36242 State: PUBLISHED Published: 2024-11-13T21:11:51.911Z Last Updated: 2024-11-14T19:38:08.000Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege, CWE-693 Description: Protection mechanism failure in the SPP for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01196.html
CVE ID: CVE-2024-36243 State: PUBLISHED Published: 2024-07-02T08:13:41.186Z Last Updated: 2024-08-02T03:37:03.674Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787, CWE-125 Description: in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md
CVE ID: CVE-2024-36244 State: PUBLISHED Published: 2024-06-21T10:18:06.373Z Last Updated: 2025-11-03T21:55:10.333Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time different from (and potentially shorter than) the sum of entry intervals. We need one more restriction, which is that the cycle time itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs
me itself must be larger than N * ETH_ZLEN bit times, where N is the number of schedule entries. This restriction needs to apply regardless of whether the cycle time came from the user or was the implicit, auto-calculated value, so we move the existing "cycle == 0" check outside the "if "(!new->cycle_time)" branch. This way covers both conditions and scenarios. Add a selftest which illustrates the issue triggered by syzbot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/34d83c3e6e97867ae061d14eb52123404aab1cbc - https://git.kernel.org/stable/c/b939d1e04a90248b4cdf417b0969c270ceb992b2 - https://git.kernel.org/stable/c/
404aab1cbc - https://git.kernel.org/stable/c/b939d1e04a90248b4cdf417b0969c270ceb992b2 - https://git.kernel.org/stable/c/91f249b01fe490fce11fbb4307952ca8cce78724 - https://git.kernel.org/stable/c/fb66df20a7201e60f2b13d7f95d031b31a8831d3
CVE ID: CVE-2024-36245 State: PUBLISHED Published: 2024-11-13T21:11:39.008Z Last Updated: 2024-11-14T19:47:50.678Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VTune(TM) Profiler software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01187.html
CVE ID: CVE-2024-36246 State: PUBLISHED Published: 2024-05-31T06:11:22.238Z Last Updated: 2025-04-08T04:36:46.348Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yokogawa Rental & Lease Corporation Products: Unifier, Unifier Cast Problem Types: CWE-862 Description: Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yrl.com/fwp_support/info/khvu7f00000000q7.htm
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yrl.com/fwp_support/info/khvu7f00000000q7.html - https://www.yrl.com/fwp_support/info/khvu7f00000007j8.html - https://www.yrl.com/fwp_support/info/khvu7f0000000auf.html - https://jvn.jp/en/jp/JVN17680667/
CVE ID: CVE-2024-36247 State: PUBLISHED Published: 2024-09-16T16:38:39.051Z Last Updated: 2024-09-16T17:39:30.411Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) RAID Web Console Problem Types: denial of service, CWE-284 Description: Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html
CVE ID: CVE-2024-36248 State: PUBLISHED Published: 2024-11-26T07:38:12.712Z Last Updated: 2025-11-04T17:21:06.049Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-798 Description: API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_secur
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/ - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
CVE ID: CVE-2024-36249 State: PUBLISHED Published: 2024-11-26T07:38:18.359Z Last Updated: 2024-11-26T14:09:24.516Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respectiv
r the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/
CVE ID: CVE-2024-36250 State: PUBLISHED Published: 2024-11-09T17:18:34.703Z Last Updated: 2024-11-12T14:52:39.191Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-303 Description: Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-36251 State: PUBLISHED Published: 2024-11-26T07:38:24.464Z Last Updated: 2025-11-04T17:21:07.405Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-125 Description: The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed und
ected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/ - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
CVE ID: CVE-2024-36252 State: PUBLISHED Published: 2024-06-19T06:40:38.870Z Last Updated: 2024-08-02T03:37:03.680Z Vendors: RICOH COMPANY, LTD Products: Ricoh Streamline NX PC Client Problem Types: Improper restriction of communication channel to intended endpoints Description: Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004 - ht
E Program Container: References: - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004 - https://jvn.jp/en/jp/JVN00442488/
CVE ID: CVE-2024-36253 State: PUBLISHED Published: 2024-11-13T21:11:04.294Z Last Updated: 2024-11-14T19:40:05.306Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) SDP Tool for Windows software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01179.html
CVE ID: CVE-2024-36254 State: PUBLISHED Published: 2024-11-26T07:38:30.408Z Last Updated: 2024-11-26T14:48:35.480Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-125 Description: Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security
global.sharp/products/copier/info/info_security_2024-05.html - https://jp.sharp/business/print/information/info_security_2024-05.html - https://www.toshibatec.com/information/20240531_02.html - https://www.toshibatec.co.jp/information/20240531_02.html - https://jvn.jp/en/vu/JVNVU93051062/
CVE ID: CVE-2024-36255 State: PUBLISHED Published: 2024-05-26T13:32:56.087Z Last Updated: 2024-08-02T03:37:03.667Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-352 Description: Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper input validation on post actions which allows an attacker to run a playbook checklist task command as another user via creating and sharing a deceptive post action that unexpectedly runs a slash command in some arbitrary channel. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.co
channel. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-36257 State: PUBLISHED Published: 2024-07-03T08:29:10.457Z Last Updated: 2024-08-02T03:37:03.658Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.5.x <= 9.5.5 and 9.8.0, when using shared channels with multiple remote servers connected, fail to check that the remote server A requesting the server B to update the profile picture of a user is the remote that actually has the user as a local one . This allows a malicious remote A to change the profile images of users that belong to another remote server C that is connected to the server A. Additional Analyst
he profile images of users that belong to another remote server C that is connected to the server A. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-36258 State: PUBLISHED Published: 2025-01-14T14:21:05.397Z Last Updated: 2025-01-14T16:03:46.292Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2
ISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2046
CVE ID: CVE-2024-36259 State: PUBLISHED Published: 2025-02-25T19:10:40.570Z Last Updated: 2025-02-25T19:39:18.179Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/odoo/odoo/issues/199330
CVE ID: CVE-2024-36260 State: PUBLISHED Published: 2024-07-02T08:13:58.124Z Last Updated: 2024-08-02T03:37:05.340Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md
CVE ID: CVE-2024-36261 State: PUBLISHED Published: 2024-09-16T16:38:39.654Z Last Updated: 2024-09-16T17:39:08.551Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) RAID Web Console software Problem Types: denial of service, CWE-284 Description: Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html
CVE ID: CVE-2024-36262 State: PUBLISHED Published: 2025-02-12T21:20:22.087Z Last Updated: 2025-02-18T19:54:15.766Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) System Security Report and System Resources Defense firmware Problem Types: Escalation of Privilege, CWE-362 Description: Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01203.html