Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22099 State: PUBLISHED Published: 2024-01-25T07:02:59.928Z Last Updated: 2025-06-05T19:44:19.805Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Linux Products: Linux kernel Problem Types: CWE-476 Description: NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=7956 - https://lists.fedoraproject.o
CISA ADP Vulnrichment: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=7956 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVVYSTEVMPYGF6GDSOD44MUXZXAZHOHB/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSXNF4RLEFLH35BFUQGYXRRVHHUIVBAE/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2024-22100 State: PUBLISHED Published: 2024-03-01T00:37:47.300Z Last Updated: 2024-08-12T20:20:19.945Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: MicroDicom Products: DICOM Viewer Problem Types: CWE-122 Description: MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-a
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01
CVE ID: CVE-2024-22102 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-18T19:41:52.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-22103 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-08-01T22:35:34.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-22104 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-08-01T22:35:34.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-22105 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-13T19:09:13.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-22106 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-08-01T22:35:34.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-22107 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-05-15T19:50:36.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php is vulnerable to command injection via the /old/react/v1/api/system/dns/data endpoint. An authenticated attacker can abuse it to inject an arbitrary command and compromise the platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://x-c3ll.github.io/cves.html - https://adepts.of0x.cc/gtbcc-pwned
ontainer: - CISA ADP Vulnrichment: References: - https://x-c3ll.github.io/cves.html - https://adepts.of0x.cc/gtbcc-pwned/
CVE ID: CVE-2024-22108 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-05T16:19:57.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://x-c3ll.github.io/cves.html - https://adepts.of0x.cc/gtbcc-pwned/
CVE ID: CVE-2024-22113 State: PUBLISHED Published: 2024-01-22T04:17:41.024Z Last Updated: 2025-06-20T18:40:40.584Z Vendors: ANGLERSNET Co,.Ltd. Products: Access analysis CGI An-Analyzer Problem Types: Open Redirect Description: Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.anglers-net.com/anlog/update/ - https://jvn.jp/en/jp/JVN73587943/
CVE ID: CVE-2024-22114 State: PUBLISHED Published: 2024-08-09T10:15:26.509Z Last Updated: 2025-11-03T21:53:38.213Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-281 Description: User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25015
CVE ID: CVE-2024-22116 State: PUBLISHED Published: 2024-08-09T10:16:34.982Z Last Updated: 2025-11-03T21:53:39.703Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-94 Description: An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25016
CVE ID: CVE-2024-22117 State: PUBLISHED Published: 2024-11-26T14:11:57.195Z Last Updated: 2024-11-26T15:06:22.759Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-20 Description: When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
events others from adding URLs to the map element. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25610
CVE ID: CVE-2024-22119 State: PUBLISHED Published: 2024-02-09T08:26:20.006Z Last Updated: 2025-11-03T21:53:41.158Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-20 Description: The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-24070 - https://lists.debian.org/debian-lts-announce/2024/04/msg00020.html
CVE ID: CVE-2024-22120 State: PUBLISHED Published: 2024-05-17T09:53:52.798Z Last Updated: 2024-08-01T22:35:34.820Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-20 Description: Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-24505
CVE ID: CVE-2024-22121 State: PUBLISHED Published: 2024-08-09T08:34:47.392Z Last Updated: 2024-08-09T15:17:48.357Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-281 Description: A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25011
CVE ID: CVE-2024-22122 State: PUBLISHED Published: 2024-08-09T08:46:21.444Z Last Updated: 2025-11-03T21:53:42.627Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-77 Description: Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25012
CVE ID: CVE-2024-22123 State: PUBLISHED Published: 2024-08-09T10:57:08.143Z Last Updated: 2025-11-03T21:53:44.096Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-94 Description: Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file for Linux, it is possible to set another file, e.g. log file and zabbix_server will try to communicate with it as modem. As a result, log file will be broken with AT commands and small part for log file content will be leaked to UI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:
t will be leaked to UI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25013
CVE ID: CVE-2024-22124 State: PUBLISHED Published: 2024-01-09T01:19:55.940Z Last Updated: 2024-11-14T16:34:51.109Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver (Internet Communication Manager) Problem Types: CWE-497 Description: Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access information which would otherwise be restricted causing high impact on confidentiality. Additional Analy
acker to access information which would otherwise be restricted causing high impact on confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3392626 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22125 State: PUBLISHED Published: 2024-01-09T01:20:19.403Z Last Updated: 2025-06-17T20:59:11.140Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: SAP_SE Products: Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) Problem Types: CWE-497 Description: Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3386378 - https
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3386378 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22126 State: PUBLISHED Published: 2024-02-13T01:58:27.745Z Last Updated: 2025-02-11T04:13:01.325Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver AS Java (User Admin Application) Problem Types: CWE-79 Description: The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
dentiality and mild impact on integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3417627 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://me.sap.com/notes/3557138
CVE ID: CVE-2024-22127 State: PUBLISHED Published: 2024-03-12T00:29:27.295Z Last Updated: 2024-09-26T18:27:18.285Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP_SE Products: SAP NetWeaver AS Java (Administrator Log Viewer plug-in) Problem Types: CWE-77 Description: SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application. Additional Analyst Notes: - CVE Progr
use high impact on confidentiality, integrity and availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3433192 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-22128 State: PUBLISHED Published: 2024-02-13T02:02:14.281Z Last Updated: 2024-08-01T22:35:34.814Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver Business Client for HTML Problem Types: CWE-79 Description: SAP NWBC for HTML - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can inject malicious javascript to cause limited impact to confidentiality and integrity of the application data after successf
ect malicious javascript to cause limited impact to confidentiality and integrity of the application data after successful exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3396109 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22129 State: PUBLISHED Published: 2024-02-13T03:40:54.670Z Last Updated: 2024-08-01T22:35:34.889Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Companion Problem Types: CWE-79 Description: SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3404025 - https://www.sap.com/doc
CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3404025 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22130 State: PUBLISHED Published: 2024-02-13T02:29:51.706Z Last Updated: 2025-05-09T18:26:25.493Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: SAP_SE Products: SAP CRM WebClient UI Problem Types: CWE-79 Description: Print preview option in SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, S4FND 108, WEBCUIF 700, WEBCUIF 701, WEBCUIF 730, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. An attacker with low privileges can cause limited impact to confidentiality and
in Cross-Site Scripting vulnerability. An attacker with low privileges can cause limited impact to confidentiality and integrity of the appliaction data after successful exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3410875 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22131 State: PUBLISHED Published: 2024-02-13T02:30:51.886Z Last Updated: 2024-08-01T22:35:34.897Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP_SE Products: SAP ABA (Application Basis) Problem Types: CWE-94 Description: In SAP ABA (Application Basis) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as a user with a remote execution authorization can use a vulnerable interface. This allows the attacker to use the interface to invoke an application function to perform actions which they would not normally be permitted to perform. Depending on the function executed, the attack can read or modify any
h they would not normally be permitted to perform. Depending on the function executed, the attack can read or modify any user/business data and can make the entire system unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3420923 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22132 State: PUBLISHED Published: 2024-02-13T02:33:01.622Z Last Updated: 2025-04-24T15:39:56.350Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP IDES Systems Problem Types: CWE-78 Description: SAP IDES ECC-systems contain code that permits the execution of arbitrary program code of user's choice.An attacker can therefore control the behaviour of the system by executing malicious code which can potentially escalate privileges with low impact on confidentiality, integrity and availability of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3421659
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3421659 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2024-22133 State: PUBLISHED Published: 2024-03-12T00:32:50.856Z Last Updated: 2024-08-01T22:35:34.933Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Fiori Front End Server Problem Types: CWE-863 Description: SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3
on. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3417399 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-22134 State: PUBLISHED Published: 2024-01-24T11:39:10.081Z Last Updated: 2024-11-13T15:16:48.424Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Renzo Johnson Products: Contact Form 7 Extension For Mailchimp Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/contact-form-7-mailchimp-extension/wordpress-contact-form-7-extension-for-mailc
://patchstack.com/database/vulnerability/contact-form-7-mailchimp-extension/wordpress-contact-form-7-extension-for-mailchimp-plugin-0-5-70-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-22135 State: PUBLISHED Published: 2024-01-24T11:51:37.976Z Last Updated: 2025-06-17T21:19:28.298Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WebToffee Products: Order Export & Order Import for WooCommerce Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order
rences: - https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-3-arbitrary-file-upload-vulnerability?_s_id=cve