Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
agement%20System%20-%20vuln%207.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdf
CVE ID: CVE-2024-33409 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-12-03T19:47:27.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%201.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Co
m%20-%20vuln%201.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%208.pdf
CVE ID: CVE-2024-33410 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%205.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Mana
Management%20System%20-%20vuln%205.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdf
CVE ID: CVE-2024-33411 State: PUBLISHED Published: 2024-05-06T00:00:00.000Z Last Updated: 2025-02-04T16:59:21.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the my_index parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%208.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20S
%20School%20Management%20System%20-%20vuln%208.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2010.pdf
CVE ID: CVE-2024-33423 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_language_cmsimple_5.15
CVE ID: CVE-2024-33424 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_language_cmsimple_5.15
CVE ID: CVE-2024-33427 State: REJECTED Published: N/A Last Updated: 2025-02-13T15:52:36.762Z Description: No description available.
CVE ID: CVE-2024-33428 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-09-06T18:42:33.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stsaz/phiola/issues/29 - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/heap-buffer-overflow-1 - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-1/heap-buffer-overflow-1.md - https://github.com/Helson-S/FuzzyTesting/blob/master
ob/master/phiola/heap-buffer-overflow-1/heap-buffer-overflow-1.md - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-1/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-1/heap-buffer-overflow-1.assets/image-20240420005017430.png
CVE ID: CVE-2024-33429 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/stsaz/phiola/ - https://github.com/stsaz/phiola/issues/30 - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/heap-buffer-overflow-2 - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-2/heap-buffer-overflow-2.md - https://github.com/
thub.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-2/heap-buffer-overflow-2.md - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-2/poc/ - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-2/heap-buffer-overflow-2.assets/image-20240420011116818.png
CVE ID: CVE-2024-33430 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/stsaz/phiola/ - https://github.com/stsaz/phiola/issues/28 - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1 - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/ph
om/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/poc/I2ZFI3~5 - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/segmentFault-1.md - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/segmentFault-1.assets/image-20240420011601263.png
CVE ID: CVE-2024-33431 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/stsaz/phiola/ - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/flowPointException-1 - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/flowPointException-1/flowPointException-1.md - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/flowPointExcept
owPointException-1/flowPointException-1.md - https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/flowPointException-1/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/flowPointException-1/poc/I0I72U~G - https://github.com/stsaz/phiola/issues/27 - https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/flowPointException-1/flowPointException-1.assets/image-20240420004701828.png
CVE ID: CVE-2024-33433 State: PUBLISHED Published: 2024-05-13T19:56:22.474Z Last Updated: 2025-02-13T15:52:37.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_2_Guest_Access_Control/README.md
CVE ID: CVE-2024-33434 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:27:53.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in tiagorlampert CHAOS before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the `filename` argument into the `buildStr` string without any sanitization or filtering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tiagorlampert/CHAOS/pull/95 - https://gist.github.com/slimwang/d1ec6645ba9012a551ea436679244496
CVE ID: CVE-2024-33435 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vulreport3r/cve-reports/blob/main/Ncast_Yingshi_has_RCE_vulnerabilities/report.md
CVE ID: CVE-2024-33436 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-14T17:31:58.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS variables Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mlgualtieri/CSS-Exfil-Protection/issues/41 - https://github.com/randshell/vulnerability-research/tree/main/CVE-2024-33436
CVE ID: CVE-2024-33437 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-28T23:23:59.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mlgualtieri/CSS-Exfil-Protection/issues/41 - https://github.com/randshell/vulnerability-research/tree/main/CVE-2024-33437
CVE ID: CVE-2024-33438 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cubecart/v6 - https://forums.cubecart.com/topic/59046-cubecart-655-released-minor-security-update/ - https://github.com/julio-cfa/CVE-2024-33438 - https://github.com/cubecart/v6/commit/31a5ec39b0924b2111fbc3aa419bd8c5c3fc1841
CVE ID: CVE-2024-33439 State: PUBLISHED Published: 2024-11-20T00:00:00 Last Updated: 2024-11-27T16:37:10.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker to execute arbitrary OS commands via cgi parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/QuartzDust/848acfddff02c881eb86dd302e859e80
CVE ID: CVE-2024-33442 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/summerwayace/cms/blob/main/1.md
CVE ID: CVE-2024-33443 State: PUBLISHED Published: 2024-04-29T00:00:00.000Z Last Updated: 2025-03-25T16:10:20.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/liu21st/onethink/issues/40 - https://gist.github.com/LioTree/a81111fb0c598a920cb49aaf0bd64e58
CVE ID: CVE-2024-33444 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/liu21st/onethink/issues/39 - https://gist.github.com/LioTree/1971a489dd5ff619b89e7a9e1da91152 - https://github.com/liu21st/onethink
CVE ID: CVE-2024-33445 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hisiphp/hisiphp/issues/11 - https://gist.github.com/LioTree/04a4ece38df53af4027d52b2aeb7aff6
CVE ID: CVE-2024-33449 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://grumpz.net/uncovering-an-ssrf-vulnerability-in-pdfmyurl-affecting-numerous-users - https://pdfmyurl.com/
CVE ID: CVE-2024-33450 State: PUBLISHED Published: 2024-05-28T19:07:43.778Z Last Updated: 2025-03-25T17:45:46.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/DKGIXL/1c8bddeb6c5f083ccc3a7bcecfe40398
CVE ID: CVE-2024-33452 State: PUBLISHED Published: 2025-04-22T00:00:00.000Z Last Updated: 2025-11-03T19:29:49.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn - https://www.benasin.space/2025/03/18/OpenResty-lua-nginx-module-v0-10-26-HTTP-Request-Smuggling-in-HEAD-requests/
CVE ID: CVE-2024-33453 State: PUBLISHED Published: 2024-10-17T00:00:00 Last Updated: 2024-10-18T19:10:25.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ant1sec-ops/CVE-2024-33453
CVE ID: CVE-2024-33454 State: PUBLISHED Published: 2024-05-09T15:57:23.806Z Last Updated: 2025-02-13T15:52:38.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Zakary-D/30f565c4266c02c62aa9089c363e78e9
CVE ID: CVE-2024-33465 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hbzms.github.io/
CVE ID: CVE-2024-33469 State: PUBLISHED Published: 2025-02-11T00:00:00.000Z Last Updated: 2025-02-13T14:16:58.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Team Amaze Amaze File Manager v.3.8.5 and fixed in v.3.10 allows a local attacker to execute arbitrary code via the onCreate method of DatabaseViewerActivity.java. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/981c1cb3-d1e7-4f5c-8a24-155662d33787 - https://github.com/blackbeard666/security-research/tree/main/CVE-2024-33469
CVE ID: CVE-2024-33470 State: PUBLISHED Published: 2024-05-24T15:03:59.077Z Last Updated: 2025-02-13T15:52:39.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://avtech.com/articles/27443/security-advisory-smtp-password-disclosure-in-dom/
CVE ID: CVE-2024-33471 State: PUBLISHED Published: 2024-05-24T18:12:59.568Z Last Updated: 2025-02-13T15:52:39.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://avtech.com/articles/27472/security-advisory-smtp-credentials-pass-back/
CVE ID: CVE-2024-33485 State: PUBLISHED Published: 2024-05-14T17:59:41.569Z Last Updated: 2025-11-12T15:31:32.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49463 - https://github.com/CveSecLook/cve/issues/17
CVE ID: CVE-2024-33489 State: PUBLISHED Published: 2024-05-14T10:02:50.566Z Last Updated: 2024-08-02T02:36:02.819Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge Problem Types: CWE-122 Description: A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-589937.html
CVE ID: CVE-2024-33490 State: PUBLISHED Published: 2024-05-14T10:02:51.775Z Last Updated: 2024-08-02T02:36:03.385Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-589937.html
CVE ID: CVE-2024-33491 State: PUBLISHED Published: 2024-05-14T10:02:52.964Z Last Updated: 2024-08-02T02:36:02.808Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
CVE ID: CVE-2024-33492 State: PUBLISHED Published: 2024-05-14T10:02:54.177Z Last Updated: 2024-08-02T02:36:03.981Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
CVE ID: CVE-2024-33493 State: PUBLISHED Published: 2024-05-14T10:02:55.387Z Last Updated: 2024-08-02T02:36:02.831Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
CVE ID: CVE-2024-33494 State: PUBLISHED Published: 2024-05-14T10:02:56.636Z Last Updated: 2024-08-02T02:36:02.830Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-345 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), S