Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0672 State: PUBLISHED Published: 2024-03-28T05:00:01.874Z Last Updated: 2024-08-01T18:11:35.671Z Vendors: Unknown Products: Pz-LinkCard Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/eceb6585-5969-4aa6-9908-b6bfb578190a/
CVE ID: CVE-2024-0673 State: PUBLISHED Published: 2024-03-28T05:00:02.093Z Last Updated: 2024-08-28T14:21:46.059Z Vendors: Unknown Products: Pz-LinkCard Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d80e725d-356a-4997-a352-33565e291fc8/
CVE ID: CVE-2024-0674 State: PUBLISHED Published: 2024-01-30T12:19:00.674Z Last Updated: 2025-05-29T15:05:33.779Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lamassu Products: Bitcoin ATM Douro machines Problem Types: CWE-269 Description: Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file. This would cause the watchdog process to run as root and execute the payload stored in the updatescript.js. Additional Analyst Notes: - CVE Program Container: - CI
n as root and execute the payload stored in the updatescript.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines
CVE ID: CVE-2024-0675 State: PUBLISHED Published: 2024-01-30T12:20:13.367Z Last Updated: 2024-08-23T18:25:58.963Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lamassu Products: Bitcoin ATM Douro machines Problem Types: CWE-754 Description: Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary commands as an unprivileged user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
nds as an unprivileged user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines
CVE ID: CVE-2024-0676 State: PUBLISHED Published: 2024-01-30T12:40:12.571Z Last Updated: 2024-10-17T18:02:12.886Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Lamassu Products: Bitcoin ATM Douro machines Problem Types: CWE-521 Description: Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/n
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines
CVE ID: CVE-2024-0677 State: PUBLISHED Published: 2024-03-28T05:00:02.401Z Last Updated: 2025-03-25T18:20:13.467Z Vendors: Unknown Products: Pz-LinkCard Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/0f7757c9-69fa-49db-90b0-40f0ff29bee7/
CVE ID: CVE-2024-0678 State: PUBLISHED Published: 2024-02-05T21:21:49.043Z Last Updated: 2024-08-01T18:11:35.664Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: tychesoftwares Products: Order Delivery Date for WP e-Commerce Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scr
input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/71fb90b6-a484-4a70-a9dc-795cbf2e275e?source=cve - https://plugins.trac.wordpress.org/browser/order-delivery-date/trunk/order_delivery_date.php#L221
CVE ID: CVE-2024-0679 State: PUBLISHED Published: 2024-01-20T05:37:46.350Z Last Updated: 2025-05-30T14:24:28.724Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: themegrill Products: ColorMag Problem Types: CWE-862 Missing Authorization Description: The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to install and activate arbitrary plugins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
activate arbitrary plugins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e982d457-29db-468f-88c3-5afe04002dcf?source=cve - https://themes.trac.wordpress.org/browser/colormag/3.1.2/functions.php#L237 - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=214568%40colormag&new=214568%40colormag&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0680 State: PUBLISHED Published: 2024-02-28T08:33:06.596Z Last Updated: 2024-08-01T18:11:35.683Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: nimeshrmr Products: WP Private Content Plus Problem Types: CWE-693 Protection Mechanism Failure Description: The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program C
or unauthenticated attackers to view protected posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/43d8904f-3bc9-4c67-b44b-8d78762b6b30?source=cve - https://wordpress.org/plugins/wp-private-content-plus/
CVE ID: CVE-2024-0681 State: PUBLISHED Published: 2024-03-13T15:27:08.355Z Last Updated: 2024-08-08T20:02:18.711Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: cyberlord92 Products: Page Restriction WordPress (WP) – Protect WP Pages/Post Problem Types: CWE-693 Protection Mechanism Failure Description: The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.3.4. This is due to the plugin not properly restricting access to pages via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected pages
REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected pages. The vendor has decided that they will not implement REST API protection on posts and pages and the restrictions will only apply to the front-end of the site. The vendors solution was to add notices throughout the dashboard and recommends installing the WordPress REST API Authentication plugin for REST API coverage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a3e33a5c-df7c-4ef5-a59c-1c31abcda6d1?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_ma
ies/id/a3e33a5c-df7c-4ef5-a59c-1c31abcda6d1?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3034414%40page-and-post-restriction&new=3034414%40page-and-post-restriction&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0682 State: PUBLISHED Published: 2024-02-28T08:33:08.123Z Last Updated: 2024-08-01T18:11:35.727Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: sivel Products: Page Restrict Problem Types: CWE-693 Protection Mechanism Failure Description: The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
ackers to view protected posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/63f98fd6-eee8-4281-98ea-a267d0442c85?source=cve - https://wordpress.org/plugins/pagerestrict/
CVE ID: CVE-2024-0683 State: PUBLISHED Published: 2024-03-13T15:27:12.649Z Last Updated: 2024-08-05T15:11:42.536Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: autopolisbg Products: Bulgarisation for WooCommerce Problem Types: CWE-862 Missing Authorization Description: The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and above, to generate and delete labels. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ber-level access and above, to generate and delete labels. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be759c83-a9df-4858-a724-28006a595404?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3034198%40bulgarisation-for-woocommerce&new=3034198%40bulgarisation-for-woocommerce&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0684 State: PUBLISHED Published: 2024-02-06T08:26:58.770Z Last Updated: 2025-11-04T18:22:29.082Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-122 Description: A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-0684 - https://bugzilla.redhat.com/show_bug.cgi?id=2258948 - https://www.openwall.com/lists
at.com/security/cve/CVE-2024-0684 - https://bugzilla.redhat.com/show_bug.cgi?id=2258948 - https://www.openwall.com/lists/oss-security/2024/01/18/2
CVE ID: CVE-2024-0685 State: PUBLISHED Published: 2024-02-02T04:32:34.919Z Last Updated: 2024-08-01T18:11:35.720Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: kstover Products: Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Second Order SQL Injection via the email address value submitted through forms in all versions up to, and including, 3.7.1 due to insufficient escaping on the user supplied paramet
tted through forms in all versions up to, and including, 3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to inject SQL in their email address that will append additional into the already existing query when an administrator triggers a personal data export. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3cb73d5d-ca4a-4103-866d-f7bb369a8ce4?source=cve - https://plugins.trac.wordpress.org/changeset/3028929/ninja-forms/trunk/includes/Admin/UserDataRequests.php - htt
e=cve - https://plugins.trac.wordpress.org/changeset/3028929/ninja-forms/trunk/includes/Admin/UserDataRequests.php - https://sec.stealthcopter.com/ninja-contact-forms/
CVE ID: CVE-2024-0686 State: REJECTED Published: N/A Last Updated: 2024-03-04T14:47:46.920Z Description: No description available.
CVE ID: CVE-2024-0687 State: PUBLISHED Published: 2024-03-13T15:27:25.636Z Last Updated: 2024-08-01T18:11:35.774Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: intoxstudio Products: Restrict User Access – Ultimate Membership & Content Protection Problem Types: CWE-284 Improper Access Control Description: The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
in the contents of posts and pages via API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f67684cd-3e0f-48bb-967a-16ea2b027843?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3037773%40restrict-user-access%2Ftrunk&old=3010745%40restrict-user-access%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0688 State: PUBLISHED Published: 2024-01-25T01:55:03.332Z Last Updated: 2025-06-17T14:16:28.289Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: joshfraz Products: WebSub (FKA. PubSubHubbub) Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The "WebSub (FKA. PubSubHubbub)" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary we
is makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f07b166b-3436-4797-a2df-096ff7c27a09?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3024228%40pubsubhubbub&new=3024228%40pubsubhubbub&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0689 State: PUBLISHED Published: 2024-02-29T02:33:53.847Z Last Updated: 2024-08-01T18:11:35.646Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: mgibbs189 Products: Custom Field Suite Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a meta import in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on the meta values. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary we
is makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d8e967ce-fd36-44de-acca-c1985642ee5b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3042177%40custom-field-suite&new=3042177%40custom-field-suite&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0690 State: PUBLISHED Published: 2024-02-06T12:00:28.505Z Last Updated: 2025-11-06T21:48:28.724Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-117 Description: An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such
output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:0733 - https://access.redhat.com/errata/RHSA-2024:2246 - https://access.redhat.com/errata/RHSA-2024:3043 - https://access.redhat.com/security/cve/CVE-2024-0690 - https://bugzilla.redhat.com/show_bug.cgi?id=2259013 - https://github.com/ansible/ansible/pull/82565
CVE ID: CVE-2024-0691 State: PUBLISHED Published: 2024-02-05T21:21:43.434Z Last Updated: 2024-08-01T18:11:35.740Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: ninjateam Products: FileBird – WordPress Media Library Folders & File Manager Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and including, 5.5.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator access, to inject arbitrary we
d output escaping. This makes it possible for authenticated attackers, with administrator access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. It may also be possible to socially engineer an administrator into uploading a malicious folder import. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/47f04985-dd9b-449f-8b4c-9811fe7e4a96?source=cve - https://plugins.trac.wordpress.org/changeset/3023924/filebird
CVE ID: CVE-2024-0692 State: PUBLISHED Published: 2024-03-01T08:55:35.848Z Last Updated: 2025-04-16T20:48:48.549Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: Security Event Manager Problem Types: CWE-502 Description: The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692 - https://documentation.solarwinds.com/en/success_ce
//www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692 - https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm
CVE ID: CVE-2024-0693 State: PUBLISHED Published: 2024-01-18T22:31:04.243Z Last Updated: 2025-06-02T15:03:15.648Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: EFS Products: Easy File Sharing FTP Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in EFS Easy File Sharing FTP 2.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251479. NOTE: The vendor was contacted early about this disclo
d. The associated identifier of this vulnerability is VDB-251479. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251479 - https://vuldb.com/?ctiid.251479 - https://packetstormsecurity.com/files/176377/Easy-File-Sharing-FTP-Server-2.0-Denial-Of-Service.html - https://0day.today/exploit/description/39218 - https://www.youtube.com/watch?v=Rcl6VWg_bPY
CVE ID: CVE-2024-0694 State: REJECTED Published: N/A Last Updated: 2024-01-18T17:26:48.855Z Description: No description available.
CVE ID: CVE-2024-0695 State: PUBLISHED Published: 2024-01-18T22:31:05.275Z Last Updated: 2025-06-17T21:19:21.915Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: EFS Products: Easy Chat Server Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1. Affected by this issue is some unknown functionality of the component HTTP GET Request Handler. The manipulation of the argument USERNAME leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251480. NOTE: The vendor was c
been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251480. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251480 - https://vuldb.com/?ctiid.251480 - https://packetstormsecurity.com/files/176381/Easy-Chat-Server-3.1-Denial-Of-Service.html - https://www.exploitalert.com/view-details.html?id=40072 - https://www.youtube.com/watch?v=nGyS2Rp5aEo