Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
se, the reported version is 9.4 TS1M2 and the fixed version is 9.4 TS1M3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://owasp.org/www-community/attacks/xss/ - https://medium.com/%40williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c - https://support.sas.com/kb/55/539.html
CVE ID: CVE-2023-24726 State: PUBLISHED Published: 2023-03-15T00:00:00 Last Updated: 2024-08-02T11:03:19.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24726/CVE-2023-24726.txt
CVE ID: CVE-2023-24728 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:43:06.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023
odester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24728/CVE-2023-24728.txt
CVE ID: CVE-2023-24729 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:41:50.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023
odester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24729/CVE-2023-24729.txt
CVE ID: CVE-2023-24730 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:40:46.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023
odester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24730/CVE-2023-24730.txt
CVE ID: CVE-2023-24731 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:39:24.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-2
ester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24731/CVE-2023-24731.txt
CVE ID: CVE-2023-24732 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:37:02.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-
dester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24732/CVE-2023-24732.txt
CVE ID: CVE-2023-24733 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-08-02T11:03:18.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950_new.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AetherBlack/CVE/tree/main/PMB
CVE ID: CVE-2023-24734 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-11-27T14:54:29.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AetherBlack/CVE/tree/main/PMB
CVE ID: CVE-2023-24735 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-08-02T11:03:19.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AetherBlack/CVE/tree/main/PMB
CVE ID: CVE-2023-24736 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-08-02T11:03:19.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AetherBlack/CVE/tree/main/PMB
CVE ID: CVE-2023-24737 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-08-02T11:03:18.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AetherBlack/CVE/tree/main/PMB
CVE ID: CVE-2023-24744 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-29T21:38:50.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitrary code via the onload function within the application DOM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HeidiSecurities/CVEs/blob/main/CVE-2023-24744/Rediker%20-%20XSS%20%28Reflected%20&%20DOM-based%29.md
CVE ID: CVE-2023-24747 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-13T21:03:12.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Threonic/a262c19ed5027e5a7fe0b97b62b10a08
CVE ID: CVE-2023-24751 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:38:23.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/379 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24752 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:37:02.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/378 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24754 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:37:29.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/382 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24755 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:36:38.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/384 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24756 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:35:49.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/380 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24757 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T16:08:27.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/385 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24758 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:34:59.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/383 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-24760 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:44:15.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/oufu/ofcms/issues/I6BD2Q - https://gitee.com/oufu/ofcms/issues/I6L75S
CVE ID: CVE-2023-24762 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-03-03T19:54:51.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho
CVE ID: CVE-2023-24763 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-07T16:41:14.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html - https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html
CVE ID: CVE-2023-24769 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T15:53:35.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection watch" function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dgtlmoon/changedetection.io/issues/1358 - https://www.youtube.com/watch?v=TRTpRlkU3Hc - https://www.e
https://github.com/dgtlmoon/changedetection.io/issues/1358 - https://www.youtube.com/watch?v=TRTpRlkU3Hc - https://www.edoardoottavianelli.it/CVE-2023-24769
CVE ID: CVE-2023-24773 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-05T18:46:11.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/4
CVE ID: CVE-2023-24774 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T15:25:51.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/12
CVE ID: CVE-2023-24775 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-05T14:54:48.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/9
CVE ID: CVE-2023-24776 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T15:25:32.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/7
CVE ID: CVE-2023-24777 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-05T18:43:50.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/5
CVE ID: CVE-2023-24780 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T17:42:15.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/6
CVE ID: CVE-2023-24781 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T17:43:25.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/8
CVE ID: CVE-2023-24782 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-05T18:37:01.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/3
CVE ID: CVE-2023-24785 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T15:51:54.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/peazip/tickets/734/
CVE ID: CVE-2023-24787 State: REJECTED Published: 2023-03-23T21:08:53.667Z Last Updated: 2025-02-13T15:46:38.732Z Description: No description available.
CVE ID: CVE-2023-24788 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:26:35.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/notrinos/NotrinosERP - https://github.com/arvandy/CVE/blob/main/NotrinosERP/POC.md - https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.py - https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md - http://packetstormsecurity.com/f
-24788.py - https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md - http://packetstormsecurity.com/files/171804/NotrinosERP-0.7-SQL-Injection.html
CVE ID: CVE-2023-24789 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-05T20:34:18.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/4511
CVE ID: CVE-2023-24795 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:41:22.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command execution vulnerability was discovered in JHR-N916R router firmware version<=21.11.1.1483. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/25b30ba88396408ff85200eaf3413f0c
CVE ID: CVE-2023-24796 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-13T16:44:26.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/3664387cb5b66b68c7eff4bfdb51b2d6
CVE ID: CVE-2023-24797 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:53:49.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/DrizzlingSun/D-link/blob/main/Dir882/1/1.md
CVE ID: CVE-2023-24798 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:48:59.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/DrizzlingSun/D-link/blob/main/Dir878/2/2.md
CVE ID: CVE-2023-24799 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:46:31.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/DrizzlingSun/D-link/blob/main/Dir878/1/1.md
CVE ID: CVE-2023-24800 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:45:26.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/DrizzlingSun/D-link/blob/main/Dir878/3/3.md