Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-56787 State: PUBLISHED Published: 2025-01-08T17:52:03.420Z Last Updated: 2025-11-03T20:54:25.388Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as platform driver With driver_async_probe=* on kernel command line, the following trace is produced because on i.MX8M Plus hardware because the soc-imx8m.c driver calls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock driver is not yet probed. This was not detected during regular testing without driver_async_probe. Convert the SoC code to platform driver and instantiate a platform device in its current device_initcall
er_async_probe. Convert the SoC code to platform driver and instantiate a platform device in its current device_initcall() to probe the platform driver. Rework .soc_revision callback to always return valid error code and return SoC revision via parameter. This way, if anything in the .soc_revision callback return -EPROBE_DEFER, it gets propagated to .probe and the .probe will get retried later. " ------------[ cut here ]------------ WARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180 CPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603 Hardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)
0-next-20240924-00002-g2062bb554dea #603 Hardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT) pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : imx8mm_soc_revision+0xdc/0x180 lr : imx8mm_soc_revision+0xd0/0x180 sp : ffff8000821fbcc0 x29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120 x26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311 x23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb x20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff x17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8 x14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801 x11: ffff80008278ffff x10:
e1000 x15: ffff0000c03b65e8 x14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801 x11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c x8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3 x5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb Call trace: imx8mm_soc_revision+0xdc/0x180 imx8_soc_init+0xb0/0x1e0 do_one_initcall+0x94/0x1a8 kernel_init_freeable+0x240/0x2a8 kernel_init+0x28/0x140 ret_from_fork+0x10/0x20 ---[ end trace 0000000000000000 ]--- SoC: i.MX8MP revision 1.1 " Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.
MP revision 1.1 " Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e497edb8f31ec2c2b6f4ce930e175aa2da8be334 - https://git.kernel.org/stable/c/ea2ff66feb5f9b183f9e2f9d06c21340bd88de12 - https://git.kernel.org/stable/c/2129f6faa5dfe8c6b87aad11720bf75edd77d3e4 - https://git.kernel.org/stable/c/997a3c04d7fa3d1d385c14691350d096fada648c - https://git.kernel.org/stable/c/9cc832d37799dbea950c4c8a34721b02b8b5a8ff
CVE ID: CVE-2024-56788 State: PUBLISHED Published: 2025-01-11T12:35:47.985Z Last Updated: 2025-05-04T10:04:45.630Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: fix tx skb race condition between reference pointers There are two skb pointers to manage tx skb's enqueued from n/w stack. waiting_tx_skb pointer points to the tx skb which needs to be processed and ongoing_tx_skb pointer points to the tx skb which is being processed. SPI thread prepares the tx data chunks from the tx skb pointed by the ongoing_tx_skb pointer. When the tx skb pointed by the ongoing_tx_skb is processed, the tx skb pointed by the
ed by the ongoing_tx_skb pointer. When the tx skb pointed by the ongoing_tx_skb is processed, the tx skb pointed by the waiting_tx_skb is assigned to ongoing_tx_skb and the waiting_tx_skb pointer is assigned with NULL. Whenever there is a new tx skb from n/w stack, it will be assigned to waiting_tx_skb pointer if it is NULL. Enqueuing and processing of a tx skb handled in two different threads. Consider a scenario where the SPI thread processed an ongoing_tx_skb and it moves next tx skb from waiting_tx_skb pointer to ongoing_tx_skb pointer without doing any NULL check. At this time, if the waiting_tx_skb pointer is NULL then ongoing_tx_skb pointer is also assigned with NULL. After that, if a
his time, if the waiting_tx_skb pointer is NULL then ongoing_tx_skb pointer is also assigned with NULL. After that, if a new tx skb is assigned to waiting_tx_skb pointer by the n/w stack and there is a chance to overwrite the tx skb pointer with NULL in the SPI thread. Finally one of the tx skb will be left as unhandled, resulting packet missing and memory leak. - Consider the below scenario where the TXC reported from the previous transfer is 10 and ongoing_tx_skb holds an tx ethernet frame which can be transported in 20 TXCs and waiting_tx_skb is still NULL. tx_credits = 10; /* 21 are filled in the previous transfer */ ongoing_tx_skb = 20; waiting_tx_skb = NULL; /* Still NULL */ - So, (tc6
10; /* 21 are filled in the previous transfer */ ongoing_tx_skb = 20; waiting_tx_skb = NULL; /* Still NULL */ - So, (tc6->ongoing_tx_skb || tc6->waiting_tx_skb) becomes true. - After oa_tc6_prepare_spi_tx_buf_for_tx_skbs() ongoing_tx_skb = 10; waiting_tx_skb = NULL; /* Still NULL */ - Perform SPI transfer. - Process SPI rx buffer to get the TXC from footers. - Now let's assume previously filled 21 TXCs are freed so we are good to transport the next remaining 10 tx chunks from ongoing_tx_skb. tx_credits = 21; ongoing_tx_skb = 10; waiting_tx_skb = NULL; - So, (tc6->ongoing_tx_skb || tc6->waiting_tx_skb) becomes true again. - In the oa_tc6_prepare_spi_tx_buf_for_tx_skbs() ongoing_tx_skb = NULL;
_skb || tc6->waiting_tx_skb) becomes true again. - In the oa_tc6_prepare_spi_tx_buf_for_tx_skbs() ongoing_tx_skb = NULL; waiting_tx_skb = NULL; - Now the below bad case might happen, Thread1 (oa_tc6_start_xmit) Thread2 (oa_tc6_spi_thread_handler) --------------------------- ----------------------------------- - if waiting_tx_skb is NULL - if ongoing_tx_skb is NULL - ongoing_tx_skb = waiting_tx_skb - waiting_tx_skb = skb - waiting_tx_skb = NULL ... - ongoing_tx_skb = NULL - if waiting_tx_skb is NULL - waiting_tx_skb = skb To overcome the above issue, protect the moving of tx skb reference from waiting_tx_skb pointer to ongoing_tx_skb pointer and assigning new tx skb to waiting_tx_skb pointer,
skb reference from waiting_tx_skb pointer to ongoing_tx_skb pointer and assigning new tx skb to waiting_tx_skb pointer, so that the other thread can't access the waiting_tx_skb pointer until the current thread completes moving the tx skb reference safely. References: - https://git.kernel.org/stable/c/1f2eb6c32bae04b375bb7a0aedbeefb6dbbcb775 - https://git.kernel.org/stable/c/e592b5110b3e9393881b0a019d86832bbf71a47f
CVE ID: CVE-2024-56799 State: PUBLISHED Published: 2024-12-30T18:20:00.532Z Last Updated: 2024-12-30T23:14:04.231Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: TrueWinter Products: simofa Problem Types: CWE-306 Description: Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/TrueWinter/simofa/security/advisories/GHSA-83qw-5qq5-v7pq - https://github.
lnrichment: References: - https://github.com/TrueWinter/simofa/security/advisories/GHSA-83qw-5qq5-v7pq - https://github.com/TrueWinter/simofa/commit/1b04ba413a9c1d12a33dd50a32f67345c2fa6f2a
CVE ID: CVE-2024-56800 State: PUBLISHED Published: 2024-12-30T18:23:42.286Z Last Updated: 2024-12-30T23:13:14.193Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: mendableai Products: firecrawl Problem Types: CWE-918 Description: Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery (SSRF) vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address. This allowed exfiltration of local network resources through the API. The cloud service was patched on December 27th, 2024, and the maintai
ration of local network resources through the API. The cloud service was patched on December 27th, 2024, and the maintainers have checked that no user data was exposed by this vulnerability. Scraping engines used in the open sourced version of Firecrawl were patched on December 29th, 2024, except for the playwright services which the maintainers have determined to be un-patchable. All users of open-source software (OSS) Firecrawl should upgrade to v1.1.1. As a workaround, OSS Firecrawl users should supply the playwright services with a secure proxy. A proxy can be specified through the `PROXY_SERVER` env in the environment variables. Please refer to the documentation for instructions. Ensure
through the `PROXY_SERVER` env in the environment variables. Please refer to the documentation for instructions. Ensure that the proxy server one is using is setup to block all traffic going to link-local IP addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mendableai/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 - https://github.com/mendableai/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec
CVE ID: CVE-2024-56801 State: PUBLISHED Published: 2024-12-30T18:10:39.172Z Last Updated: 2024-12-30T23:38:25.303Z Vendors: InfotelGLPI Products: tasklists Problem Types: CWE-89 Description: Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/InfotelGLPI/tasklists/security/advisories/GHSA-c6fw-xw9x-gwjw - https://github.com/InfotelGLPI/tasklists/commit/6444026e3d2b8fb22d5e5ab03fb86056e1ac9e43
CVE ID: CVE-2024-56802 State: PUBLISHED Published: 2024-12-31T15:10:42.511Z Last Updated: 2024-12-31T15:52:36.405Z Vendors: PacoVK Products: tapir Problem Types: CWE-285 Description: Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PacoVK/tapir/security/advisories/GHSA-rj9m-qf65-f5gg - https://github.com/PacoVK/tapir/commit/c36360b611fa0ba4f5e250fa43ecf8a294785a03
CVE ID: CVE-2024-56803 State: PUBLISHED Published: 2024-12-31T22:48:33.167Z Last Updated: 2025-01-02T16:09:03.317Z Vendors: ghostty-org Products: ghostty Problem Types: CWE-94 Description: Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. This attack requires an attacker to send malicious escape sequences followed by convincing the user to physically press the "enter" key. Fixed
n attacker to send malicious escape sequences followed by convincing the user to physically press the "enter" key. Fixed in Ghostty v1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ghostty-org/ghostty/security/advisories/GHSA-5hcq-3j4q-4v6p - https://github.com/ghostty-org/ghostty/pull/3908
CVE ID: CVE-2024-56804 State: PUBLISHED Published: 2025-10-03T18:08:19.010Z Last Updated: 2025-10-03T18:35:12.788Z Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-89 Description: An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-32
CVE ID: CVE-2024-56805 State: PUBLISHED Published: 2025-06-06T15:53:13.936Z Last Updated: 2025-06-06T16:35:40.607Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-122 Description: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321 and later QuTS hero h5.2.4.3079 build 20250321 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/q
1 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-12
CVE ID: CVE-2024-56810 State: PUBLISHED Published: 2025-02-27T14:48:45.865Z Last Updated: 2025-02-27T15:14:08.171Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56811 State: PUBLISHED Published: 2025-02-27T14:48:06.048Z Last Updated: 2025-02-27T15:26:19.968Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56812 State: PUBLISHED Published: 2025-02-27T14:47:20.626Z Last Updated: 2025-02-27T15:51:10.880Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56826 State: PUBLISHED Published: 2025-01-09T03:40:24.613Z Last Updated: 2025-11-06T22:33:36.021Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-122 Description: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
plication crash or other undefined behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:7309 - https://access.redhat.com/security/cve/CVE-2024-56826 - https://bugzilla.redhat.com/show_bug.cgi?id=2335172 - https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8 - https://github.com/uclouvain/openjpeg/issues/1563
CVE ID: CVE-2024-56827 State: PUBLISHED Published: 2025-01-09T03:40:30.512Z Last Updated: 2025-11-06T22:33:36.987Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-122 Description: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
plication crash or other undefined behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:7309 - https://access.redhat.com/security/cve/CVE-2024-56827 - https://bugzilla.redhat.com/show_bug.cgi?id=2335174 - https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8 - https://github.com/uclouvain/openjpeg/issues/1564
CVE ID: CVE-2024-56828 State: PUBLISHED Published: 2025-01-06T00:00:00 Last Updated: 2025-01-14T20:50:37.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/member/avatar API endpoint receives a base64 string as input. This string is then passed to the memberService.uploadAvatarByBase64 method for processing. Within the service, the base64-encoded image is parsed. For example, given a string like: data:image/html;base64,PGh0bWw+PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPjwvaHRtbD4= the content after the comma is extracted and decoded using Base64.getDecoder().decode(). Th
cm9yPWFsZXJ0KDEpPjwvaHRtbD4= the content after the comma is extracted and decoded using Base64.getDecoder().decode(). The substring from the 11th character up to the first occurrence of a semicolon (;) is assigned to the suffix variable (representing the file extension). The decoded content is then written to a file. However, the file extension is not validated, and since this functionality is exposed to the frontend, it poses significant security risks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/liweiyi/ChestnutCMS - https://www.1000mz.com/ - https://github.com/Zerone0x00/CVE/blob/main/ChestnutCMS/CVE-2024-56828.md
CVE ID: CVE-2024-56829 State: PUBLISHED Published: 2025-01-02T00:00:00 Last Updated: 2025-01-06T20:36:04.563Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: CWE-434 Description: Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a SOAP request to /XSDService.asmx. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Zerone0x00/CVE/blob/main/%E9%BB%84%E8%8D%AF%E5%B8%88%E8%8D%AF%E4%B8%9A%E7%AE%A1%E7%90%86%E8%BD%AF%E4%BB%B6/UploadFile%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A
88%E8%8D%AF%E4%B8%9A%E7%AE%A1%E7%90%86%E8%BD%AF%E4%BB%B6/UploadFile%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
CVE ID: CVE-2024-56830 State: PUBLISHED Published: 2025-01-02T00:00:00.000Z Last Updated: 2025-04-08T09:03:27.274Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: n/a Problem Types: CWE-338 Description: The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes - https://github.com/briandfoy/cpan-security-advisory/issues/184
CVE ID: CVE-2024-56841 State: PUBLISHED Published: 2025-01-14T10:30:14.825Z Last Updated: 2025-01-14T14:32:55.148Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Siemens Products: Mendix LDAP Problem Types: CWE-90 Description: A vulnerability has been identified in Mendix LDAP (All versions < V1.1.2). Affected versions of the module are vulnerable to LDAP injection. This could allow an unauthenticated remote attacker to bypass username verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-314390.html
CVE ID: CVE-2024-56882 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T15:01:18.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with the modified data elements. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cves.at/posts/cve-cve-2024-56882/writeup/
CVE ID: CVE-2024-56883 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T15:04:31.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the option to do so in the user interface. To do this, a valid request to create a course simply needs to be modified, so that the current user ID in the "id" parameter is replaced with the ID of another user. Additional Analyst Notes
ied, so that the current user ID in the "id" parameter is replaced with the ID of another user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cves.at/posts/cve-cve-2024-56883/writeup/
CVE ID: CVE-2024-56889 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-03-18T14:44:40.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vigneshr232/CVE-2024-56889/blob/main/CVE-2024-56889.md
CVE ID: CVE-2024-56897 State: PUBLISHED Published: 2025-02-24T00:00:00.000Z Last Updated: 2025-03-03T19:40:36.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, disabling sounds, factory reset. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/YI-Smart-Dashcam/ - https://geochen.medium.com/cve-2024-56897-yi-car-dashcam-39304a4b21b4 - https://yitechnology.com.sg/products/dash-camera/
CVE ID: CVE-2024-56898 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-22T14:02:46.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DRAGOWN/CVE-2024-56898