Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0562 State: PUBLISHED Published: 2024-01-15T19:01:36.947Z Last Updated: 2025-11-15T08:17:20.196Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-416 Description: A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule ban
further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0412 - https://access.redhat.com/security/cve/CVE-2024-0562 - https://bugzilla.redhat.com/show_bug.cgi?id=2258475 - https://patchwork.kernel.org/project/linux-mm/patch/20220801155034.3772543-1-khazhy@google.com/
CVE ID: CVE-2024-0563 State: PUBLISHED Published: 2024-02-23T08:52:38.347Z Last Updated: 2024-08-27T10:17:18.220Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: M-Files Corporation Products: M-Files Server Problem Types: CWE-770 Description: Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5) allows anonymous user to cause denial of service against other anonymous users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://product.m-files.com/security-advisories/cve-2024-0563/
CVE ID: CVE-2024-0564 State: PUBLISHED Published: 2024-01-30T15:01:08.057Z Last Updated: 2025-11-21T06:24:25.705Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-203 Description: A flaw was found in the Linux kernel's memory deduplication mechanism. The max page sharing of Kernel Samepage Merging (KSM), added in Linux kernel version 4.4.0-96.119, can create a side channel. When the attacker and the victim share the same host and the default setting of KSM is "max page sharing=256", it is possible for the attacker
the victim share the same host and the default setting of KSM is "max page sharing=256", it is possible for the attacker to time the unmap to merge with the victim's page. The unmapping time depends on whether it merges with the victim's page and additional physical pages are created beyond the KSM's "max page share". Through these operations, the attacker can leak the victim's page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-0564 - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1680513 - https://bugzilla.redhat.com/show_bug.cgi?id=2258514 - https://link.springer.com/conference/wisa - https:/
+bug/1680513 - https://bugzilla.redhat.com/show_bug.cgi?id=2258514 - https://link.springer.com/conference/wisa - https://wisa.or.kr/accepted
CVE ID: CVE-2024-0565 State: PUBLISHED Published: 2024-01-15T20:02:02.639Z Last Updated: 2025-11-06T19:54:35.381Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, RHOL-5.7-RHEL-8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-191 Description: An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in
191 Description: An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1188 - https://access.redhat.com/errata/RHSA-2024:1404 - https://access.redhat.com/errata/RHSA-2024:1532 - https://access.redhat.com/errata/RHSA-2024:1533 - https://access.redhat.com/errata/RHSA-2024:1607 - https://access.redhat.com/errata/RHSA-2024:1614 - https://access.redhat.com/errata/RHSA-2024
com/errata/RHSA-2024:1607 - https://access.redhat.com/errata/RHSA-2024:1614 - https://access.redhat.com/errata/RHSA-2024:2093 - https://access.redhat.com/errata/RHSA-2024:2394 - https://access.redhat.com/security/cve/CVE-2024-0565 - https://bugzilla.redhat.com/show_bug.cgi?id=2258518 - https://www.spinics.net/lists/stable-commits/msg328851.html
CVE ID: CVE-2024-0566 State: PUBLISHED Published: 2024-02-12T16:05:59.810Z Last Updated: 2025-05-07T20:54:04.579Z Vendors: Unknown Products: Smart Manager Problem Types: CWE-89 SQL Injection Description: The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ca83db95-4a08-4615-aa8d-016022404c32/
CVE ID: CVE-2024-0567 State: PUBLISHED Published: 2024-01-16T14:01:59.178Z Last Updated: 2025-11-20T18:09:19.787Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, RHODF-4.15-RHEL-9, RHOL-5.8-RHEL-9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 3.11 Problem Types: CWE-347 Description: A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensu
ficate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0533 - https://access.redhat.com/errata/RHSA-2024:1082 - https://access.redhat.com/errata/RHSA-2024:1383 - https://access.redhat.com/errata/RHSA-2024:2094 - https://access.redhat.com/security/cve/CVE-2024-0567 - https://bugzilla.redhat.com/show_bug.cgi?id=2258544 - https://gitlab.com/gnutls/gnutls/-/issues/1521 - https://lists.gnupg.org/p
bugzilla.redhat.com/show_bug.cgi?id=2258544 - https://gitlab.com/gnutls/gnutls/-/issues/1521 - https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
CVE ID: CVE-2024-0568 State: PUBLISHED Published: 2024-02-14T16:58:59.811Z Last Updated: 2025-05-08T15:18:00.228Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: Harmony Control Relay RMNF22TB30, Harmony Timer Relay RENF22R2MMW Problem Types: CWE-287 Description: CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-02.pd
der-electric.com/files?p_Doc_Ref=SEVD-2024-044-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-02.pdf
CVE ID: CVE-2024-0569 State: PUBLISHED Published: 2024-01-16T12:31:04.083Z Last Updated: 2025-06-02T15:11:26.010Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Totolink Products: T8 Problem Types: CWE-200 Description: A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function getSysStatusCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument ssid/key leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.5cu.862_B20230228 is able to addr
The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.5cu.862_B20230228 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-250785 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250785 - https://vuldb.com/?ctiid.250785 - https://vuldb.com/?submit.263653 - https://www.chtsecurity.com/news/8f270890-12cc-4623-99a3-a81e00758c29 - https://drive.google.com/file/d/1WSWrGEKUkvPk8hq1VRng-wbR7T6CknGY/view?usp=sharing - https://www.chtsecurity.com/news/8aa31e69-1e7c-4186-8554-7d5d6baeaa84
CVE ID: CVE-2024-0570 State: PUBLISHED Published: 2024-01-16T13:31:04.015Z Last Updated: 2025-05-09T18:25:36.857Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Totolink Products: N350RT Problem Types: CWE-284 Description: A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
s the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250786 - https://vuldb.com/?ctiid.250786 - https://vuldb.com/?submit.263655 - https://www.chtsecurity.com/news/f6d7ae2c-fb1e-4c31-a9ce-bfc5ee038eb1 - https://www.chtsecurity.com/news/16e4f985-8248-4353-a26e-b77ca487ce31
CVE ID: CVE-2024-0571 State: PUBLISHED Published: 2024-01-16T13:31:05.024Z Last Updated: 2025-06-17T19:40:07.658Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue affects the function setSmsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument text leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250787. NOTE: The vendor was contacted early a
c and may be used. The associated identifier of this vulnerability is VDB-250787. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250787 - https://vuldb.com/?ctiid.250787 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/1/README.md
CVE ID: CVE-2024-0572 State: PUBLISHED Published: 2024-01-16T14:00:06.253Z Last Updated: 2025-06-17T21:19:15.748Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250788. NOTE: The vendor was contacted early about th
ublic and may be used. The identifier of this vulnerability is VDB-250788. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250788 - https://vuldb.com/?ctiid.250788 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/2/README.md
CVE ID: CVE-2024-0573 State: PUBLISHED Published: 2024-01-16T14:31:05.136Z Last Updated: 2024-08-01T18:11:35.583Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250789 was assigned to this vulnerability. NOTE: The vendor was contacte
the public and may be used. The identifier VDB-250789 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.250789 - https://vuldb.com/?ctiid.250789 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/3/README.md
CVE ID: CVE-2024-0574 State: PUBLISHED Published: 2024-01-16T15:00:06.288Z Last Updated: 2025-06-02T15:11:09.156Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early ab
ic and may be used. VDB-250790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250790 - https://vuldb.com/?ctiid.250790 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/4/README.md
CVE ID: CVE-2024-0575 State: PUBLISHED Published: 2024-01-16T15:00:07.449Z Last Updated: 2024-09-10T18:24:14.242Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250791. NOTE: The vendor was contact
the public and may be used. The associated identifier of this vulnerability is VDB-250791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250791 - https://vuldb.com/?ctiid.250791 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/5/README.md
CVE ID: CVE-2024-0576 State: PUBLISHED Published: 2024-01-16T15:31:03.567Z Last Updated: 2025-06-06T20:08:24.740Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sPort leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250792. NOTE: The vendor was contacted earl
d to the public and may be used. The identifier of this vulnerability is VDB-250792. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250792 - https://vuldb.com/?ctiid.250792 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/6/README.md
CVE ID: CVE-2024-0577 State: PUBLISHED Published: 2024-01-16T15:31:04.643Z Last Updated: 2025-06-02T15:11:03.432Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250793 was assigned to this vulnerability. NOTE: The vendor was contacted early about
d may be used. The identifier VDB-250793 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250793 - https://vuldb.com/?ctiid.250793 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/7/README.md
CVE ID: CVE-2024-0578 State: PUBLISHED Published: 2024-01-16T16:00:06.865Z Last Updated: 2024-08-01T18:11:35.628Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Totolink Products: LR1200GB Problem Types: CWE-121 Description: A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250794 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about
and may be used. VDB-250794 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.250794 - https://vuldb.com/?ctiid.250794 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/8/README.md
CVE ID: CVE-2024-0579 State: PUBLISHED Published: 2024-01-16T16:31:03.805Z Last Updated: 2025-06-03T13:37:01.332Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Totolink Products: X2000R Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional A
ublic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250795 - https://vuldb.com/?ctiid.250795 - https://vuldb.com/?submit.263721 - https://github.com/jylsec/vuldb/blob/main/TOTOLINK/X2000R/1/README.md - https://www.totolink.net/
CVE ID: CVE-2024-0580 State: PUBLISHED Published: 2024-01-18T08:47:16.711Z Last Updated: 2025-06-02T15:04:10.228Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: IDMSistemas Products: Sinergia, Sinergia 2.0, and Sinergia Corporativo Problem Types: CWE-639 Description: Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
pports values 1,2,3, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/omission-key-controlled-authorization-qsige
CVE ID: CVE-2024-0581 State: PUBLISHED Published: 2024-01-16T13:14:27.788Z Last Updated: 2025-06-02T15:11:20.344Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Sandsprite Products: Scdbg Problem Types: CWE-400 Description: An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this shellcode sequence to shut down the application and evade the scan. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
the application and evade the scan. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-resource-consumption-vulnerability-sandsprite-scdbg
CVE ID: CVE-2024-0582 State: PUBLISHED Published: 2024-01-16T14:33:44.744Z Last Updated: 2025-11-20T07:09:06.068Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-416 Description: A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
tially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-0582 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2504 - https://bugzilla.redhat.com/show_bug.cgi?id=2254050 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2d
CVE ID: CVE-2024-0584 State: REJECTED Published: 2024-01-16T14:02:02.411Z Last Updated: 2024-02-14T05:55:44.036Z Description: No description available.
CVE ID: CVE-2024-0585 State: PUBLISHED Published: 2024-02-05T21:21:41.130Z Last Updated: 2024-08-01T18:11:35.629Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery widget in all versions up to, and including, 5.9.4 due to insuffic