Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-40477 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-09T17:46:24.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/old-age-home-management-system-using-php-and-mysql/ - https://github.com/takekaramey/CVE_Writeup/blob/main/PHPGurukul/Old%20Age%20Home%20Mgmt%20System%20v1.0/SQL%20Injection.pdf
CVE ID: CVE-2024-40478 State: PUBLISHED Published: 2024-08-09T00:00:00.000Z Last Updated: 2025-03-13T15:37:59.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/Stored%20XSS.pdf
CVE ID: CVE-2024-40479 State: PUBLISHED Published: 2024-08-09T00:00:00 Last Updated: 2024-08-09T18:29:37.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/SQL%20Injection.pdf
CVE ID: CVE-2024-40480 State: PUBLISHED Published: 2024-08-09T00:00:00.000Z Last Updated: 2025-03-14T15:12:51.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/Broken%20Acce
de-download - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/Broken%20Access%20Control%20-%20Admin%20Dashboard%20and%20User%20Deletion.pdf
CVE ID: CVE-2024-40481 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-09T13:58:06.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page "message" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/PHPGurukul/Old%20Age%20Home%20Mgmt%20System%20v1.0/Stored%20XSS.pdf
CVE ID: CVE-2024-40482 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-09T16:16:43.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Live%20Membership%20System%20v1.0/Unrestricted%20File%20Upload.pdf
CVE ID: CVE-2024-40484 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-09T17:48:47.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/takekaramey/CVE_Writeup/blob/main/PHPGurukul/Old%20Age%20Home%20Mgmt%20System%20v1.0/Reflected%20XSS.pdf
CVE ID: CVE-2024-40486 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-09T14:03:49.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12997/live-membership-system-in-php-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Live%20Membership%20System%20v1.0/SQL%20Injection.pdf
CVE ID: CVE-2024-40487 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-23T15:10:25.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/12997/live-membership-system-in-php-php-project-source-code - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Live%20Membership%20System%20v1.0/Stored%20XSS.pdf
CVE ID: CVE-2024-40488 State: PUBLISHED Published: 2024-08-08T00:00:00 Last Updated: 2024-08-09T17:50:21.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /delete_members.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://capec.mitre.org/data/definitions/62.html - https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Live%20Membership%20System%20v1.0/CSRF.pdf
CVE ID: CVE-2024-40490 State: PUBLISHED Published: 2024-11-01T00:00:00 Last Updated: 2024-11-04T20:50:03.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sbpp/sourcebans-pp/issues/975
CVE ID: CVE-2024-40492 State: PUBLISHED Published: 2024-07-17T00:00:00 Last Updated: 2024-08-02T04:33:11.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/minendie/POC_CVE-2024-40492
CVE ID: CVE-2024-40493 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-23T15:50:04.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes `coap_msg_get_payload(resp)` to return a null pointer, which is then dereferenced in a call to `memcpy`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/keith-cullen/FreeCoAP/issues/37 - https://gist.github.com/dqp10515/fe80005e2fb58ed8ada178ac017e4ad4
CVE ID: CVE-2024-40494 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-23T16:51:39.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dqp10515/security/tree/main/FreeCoAP_bug - https://gist.github.com/dqp10515/e9d7d663cb89187bfe7b39bb3aeb0113
CVE ID: CVE-2024-40495 State: PUBLISHED Published: 2024-07-24T00:00:00.000Z Last Updated: 2025-03-13T14:05:38.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://linksys.com - http://e2500.com - https://github.com/iotaMing/IOT-CVE/blob/master/Linksys/CVE-2024-40495/CVE-2024-40495.pdf
CVE ID: CVE-2024-40498 State: PUBLISHED Published: 2024-08-05T00:00:00 Last Updated: 2024-08-06T14:12:22.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Dirac231/CVE-2024-40498
CVE ID: CVE-2024-40500 State: PUBLISHED Published: 2024-08-12T00:00:00.000Z Last Updated: 2025-09-29T14:19:24.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nitipoom-jar.github.io/CVE-2024-40500/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2024-40500
CVE ID: CVE-2024-40502 State: PUBLISHED Published: 2024-07-22T00:00:00 Last Updated: 2024-08-02T04:33:11.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click function of the Loginpage.aspx Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://itsourcecode.com/free-projects/asp/hospital-management-system-project-in-asp-net-mvc-with-source-code/ - https://itsourcecode.com/author/angeljudesuarez/ - https://packetstormsecurity.com/files/179583/Hospital-Management-System-Project-In-ASP.
de.com/author/angeljudesuarez/ - https://packetstormsecurity.com/files/179583/Hospital-Management-System-Project-In-ASP.Net-MVC-1-SQL-Injection.html
CVE ID: CVE-2024-40503 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-02T04:33:11.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mivik/8927ad100a638756e1fe214dd5fca5f9
CVE ID: CVE-2024-40505 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-10-28T20:42:48.340498 Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10266 - https://coldwx.github.io/CVE-2024-40505.html
CVE ID: CVE-2024-40506 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-27T18:43:59.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Jansen-C-Moreira/CVE-2024-40506
CVE ID: CVE-2024-40507 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-27T18:33:18.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openpetra/openpetra - https://github.com/Jansen-C-Moreira/CVE-2024-40507
CVE ID: CVE-2024-40508 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-27T19:48:33.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openpetra/openpetra - https://github.com/Jansen-C-Moreira/CVE-2024-40508
CVE ID: CVE-2024-40509 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-09-27T16:13:24.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openpetra/openpetra - https://github.com/Jansen-C-Moreira/CVE-2024-40509
CVE ID: CVE-2024-40510 State: PUBLISHED Published: 2024-09-27T00:00:00.000Z Last Updated: 2025-03-14T14:47:28.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openpetra/openpetra - https://github.com/Jansen-C-Moreira/CVE-2024-405010
CVE ID: CVE-2024-40511 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-09-27T16:22:38.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openpetra/openpetra - https://github.com/Jansen-C-Moreira/CVE-2024-40511
CVE ID: CVE-2024-40512 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-09-27T16:25:26.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Jansen-C-Moreira/CVE-2024-40512
CVE ID: CVE-2024-40513 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-03T15:06:21.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/php-lover-boy/ChatVia
CVE ID: CVE-2024-40514 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-03T20:34:46.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/php-lover-boy/ChatVia
CVE ID: CVE-2024-40515 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-02T04:33:11.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/as-lky/410d6ae5c8ead88c2e0f5c641b2382ec
CVE ID: CVE-2024-40516 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-02T04:33:11.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/as-lky/2acc62c6283c7a1fe3af046b05091d15
CVE ID: CVE-2024-40518 State: PUBLISHED Published: 2024-07-12T00:00:00 Last Updated: 2024-08-02T04:33:11.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_weixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/fushuling/cve/blob/master/SeaCMS%2012.9%20admin_weixin.php%20code%20injection.md
CVE ID: CVE-2024-40519 State: PUBLISHED Published: 2024-07-12T00:00:00.000Z Last Updated: 2025-03-25T16:30:47.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_smtp.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/fushuling/cve/blob/master/SeaCMS%2012.9%20admin_smtp.php%20code%20injection.md
CVE ID: CVE-2024-40520 State: PUBLISHED Published: 2024-07-12T00:00:00 Last Updated: 2024-08-02T04:33:11.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_config_mark.php directly splicing and writing the user input data into inc_photowatermark_config.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/fushuling/cve/blob/master/SeaCMS%2012.9%20admin_config_mark.php%20code%20injecti
tainer: References: - https://gitee.com/fushuling/cve/blob/master/SeaCMS%2012.9%20admin_config_mark.php%20code%20injection.md
CVE ID: CVE-2024-40521 State: PUBLISHED Published: 2024-07-12T00:00:00.000Z Last Updated: 2025-03-13T15:21:51.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is due to the fact that although admin_template.php imposes certain restrictions on the edited file, attackers can still bypass the restrictions and write code in some way, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/fushuling/cve/blob/master/%20SeaCMS%2012.9%20admin_t
nrichment: - CVE Program Container: References: - https://gitee.com/fushuling/cve/blob/master/%20SeaCMS%2012.9%20admin_template.php%20%20code%20injection.md
CVE ID: CVE-2024-40522 State: PUBLISHED Published: 2024-07-12T00:00:00.000Z Last Updated: 2025-03-14T14:24:47.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by phomebak.php writing some variable names passed in without filtering them before writing them into the php file. An authenticated attacker can exploit this vulnerability to execute arbitrary commands and obtain system permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/fushuling/cve/blob/master/%20SeaCMS%2012.9%20phomebak.php%20code%20injection.md
CVE ID: CVE-2024-40524 State: PUBLISHED Published: 2024-07-15T00:00:00 Last Updated: 2024-08-02T04:33:11.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.yuque.com/iceqaq/rtn9q7/cdd9w9phgxuqy4to
CVE ID: CVE-2024-40530 State: PUBLISHED Published: 2024-08-05T00:00:00.000Z Last Updated: 2025-03-24T15:53:39.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://critical.lt/blog/authorization-bypass-and-mass-assignment-in-pantera-crm/
CVE ID: CVE-2024-40531 State: PUBLISHED Published: 2024-08-05T00:00:00.000Z Last Updated: 2025-03-14T18:11:11.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://critical.lt/blog/authorization-bypass-and-mass-assignment-in-pantera-crm/
CVE ID: CVE-2024-40535 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-08-22T18:27:32.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g parameter in the config_3g_para function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tt01bolt/vul/blob/main/LBT-T300-T400_Buffer%20overflow.md
CVE ID: CVE-2024-40536 State: PUBLISHED Published: 2024-07-16T00:00:00 Last Updated: 2024-12-06T21:08:04.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code parameter in the config_3g_para function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tt01bolt/vul/blob/main/LBT-T300-T400_Buffer%20overflow.md
CVE ID: CVE-2024-40539 State: PUBLISHED Published: 2024-07-12T00:00:00 Last Updated: 2024-08-02T04:33:11.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/witmy/my-springsecurity-plus/issues/IAAE8U
CVE ID: CVE-2024-40540 State: PUBLISHED Published: 2024-07-12T00:00:00 Last Updated: 2024-08-02T04:33:11.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/witmy/my-springsecurity-plus/issues/IAAGZY