Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6985 State: PUBLISHED Published: 2024-10-11T15:38:08.686Z Last Updated: 2024-10-11T16:14:37.424Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: parisneo Products: parisneo/lollms Problem Types: CWE-23 Description: A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the victim's computer, even though sanitize_path is set. The issue arises due to improper sanitization of the personality_folder parameter, which can be exploited to traverse directories and access arbitrary files. Additional Analyst Notes:
y_folder parameter, which can be exploited to traverse directories and access arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/79c11579-47d8-4e68-8466-b47c3bf5ef6a - https://github.com/parisneo/lollms/commit/28ee567a9a120967215ff19b96ab7515ce469620
CVE ID: CVE-2024-6986 State: PUBLISHED Published: 2025-03-20T10:10:40.879Z Last Updated: 2025-03-20T18:18:26.767Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-79 Description: A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'full_template' variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the 'System Template' input field under main configurations. Additional Analyst No
ript code by injecting a payload into the 'System Template' input field under main configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/83e9bde1-40b2-49e9-be1c-bc1498eb8ebd
CVE ID: CVE-2024-6987 State: PUBLISHED Published: 2024-08-08T04:11:37.437Z Last Updated: 2024-08-08T13:11:16.423Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: themebeez Products: Orchid Store Problem Types: CWE-862 Description: The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchid_store_activate_plugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate the Addonify Floating Cart For WooCommerce plugin if it is installed. Additional Analyst Notes: - CISA ADP Vulnrichme
te the Addonify Floating Cart For WooCommerce plugin if it is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5402f206-0375-4c47-8a5c-e8ea5742493d?source=cve - https://themes.trac.wordpress.org/browser/orchid-store/1.5.6/functions.php#L300 - https://themes.trac.wordpress.org/changeset/237704/
CVE ID: CVE-2024-6988 State: PUBLISHED Published: 2024-08-06T15:37:21.313Z Last Updated: 2024-08-06T17:41:55.324Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/349198731
CVE ID: CVE-2024-6989 State: PUBLISHED Published: 2024-08-06T15:37:21.882Z Last Updated: 2024-08-07T20:01:16.158Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/349342289
CVE ID: CVE-2024-6990 State: PUBLISHED Published: 2024-08-01T18:05:32.171Z Last Updated: 2024-08-03T18:06:05.095Z Vendors: Google Products: Chrome Problem Types: CWE-457 Description: Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/353034820
CVE ID: CVE-2024-6991 State: PUBLISHED Published: 2024-08-06T15:37:22.845Z Last Updated: 2024-08-06T20:04:48.552Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/346618785
CVE ID: CVE-2024-6994 State: PUBLISHED Published: 2024-08-06T15:37:23.551Z Last Updated: 2024-08-07T15:39:17.704Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/339686368
CVE ID: CVE-2024-6995 State: PUBLISHED Published: 2024-08-06T15:37:23.890Z Last Updated: 2024-08-07T19:23:48.732Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/343938078
CVE ID: CVE-2024-6996 State: PUBLISHED Published: 2024-08-06T15:37:24.259Z Last Updated: 2025-03-13T13:38:54.224Z Vendors: Google Products: Chrome Problem Types: CWE-362 Description: Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/333708039
CVE ID: CVE-2024-6997 State: PUBLISHED Published: 2024-08-06T15:37:24.731Z Last Updated: 2024-08-13T16:08:13.441Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/325293263
CVE ID: CVE-2024-6998 State: PUBLISHED Published: 2024-08-06T15:37:25.110Z Last Updated: 2024-08-06T17:38:50.114Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/340098902
CVE ID: CVE-2024-6999 State: PUBLISHED Published: 2024-08-06T15:37:25.456Z Last Updated: 2025-03-14T14:54:53.843Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/340893685
CVE ID: CVE-2024-7000 State: PUBLISHED Published: 2024-08-06T15:37:26.218Z Last Updated: 2024-08-07T13:08:27.772Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/339877158
CVE ID: CVE-2024-7001 State: PUBLISHED Published: 2024-08-06T15:37:26.654Z Last Updated: 2025-03-19T15:20:12.427Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/347509736
CVE ID: CVE-2024-7003 State: PUBLISHED Published: 2024-08-06T15:37:26.991Z Last Updated: 2024-08-06T18:46:17.632Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/338233148
CVE ID: CVE-2024-7004 State: PUBLISHED Published: 2024-08-06T15:37:27.365Z Last Updated: 2024-10-29T19:46:04.841Z Vendors: Google Products: Chrome Problem Types: CWE-20 Description: Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/40063014
CVE ID: CVE-2024-7005 State: PUBLISHED Published: 2024-08-06T15:37:27.850Z Last Updated: 2024-08-06T16:12:30.726Z Vendors: Google Products: Chrome Problem Types: CWE-20 Description: Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/40068800
CVE ID: CVE-2024-7006 State: PUBLISHED Published: 2024-08-08T20:49:45.373Z Last Updated: 2025-11-06T23:16:08.989Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-476 Description: A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault.
ilures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:6360 - https://access.redhat.com/errata/RHSA-2024:8833 - https://access.redhat.com/errata/RHSA-2024:8914 - https://access.redhat.com/security/cve/CVE-2024-7006 - https://bugzilla.redhat.com/show_bug.cgi?id=2302996
CVE ID: CVE-2024-7007 State: PUBLISHED Published: 2024-07-25T16:42:43.139Z Last Updated: 2024-08-01T21:45:38.372Z Vendors: Positron S.R.L Products: Broadcast Signal Processor TRA7005 Problem Types: CWE-288 Description: Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02
CVE ID: CVE-2024-7008 State: PUBLISHED Published: 2024-08-06T03:40:01.147Z Last Updated: 2024-08-08T15:35:47.150Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Calibre Products: Calibre Problem Types: CWE-79 Description: Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/24/24-7008/ - https://github.com/kovidgoyal/calibre/commit/863abac24e7bc3e5ca0b3307362ff1953ba53fe0
CVE ID: CVE-2024-7009 State: PUBLISHED Published: 2024-08-06T03:40:33.075Z Last Updated: 2024-08-06T13:37:59.031Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Calibre Products: Calibre Problem Types: CWE-89 Description: Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/24/24-7009/ - https://github.com/kovidgoyal/calibre/commit/d56574285e8859d3d715eb7829784ee74337b7d7
CVE ID: CVE-2024-7010 State: PUBLISHED Published: 2024-10-29T12:48:29.287Z Last Updated: 2025-10-15T12:50:35.354Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: mudler Products: mudler/localai Problem Types: CWE-208 Description: mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access. Additional Analyst Notes: - CISA ADP Vulnric
on the server's response time, potentially leading to unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e286ed00-6383-47de-b5bc-9b9fad67c362 - https://github.com/mudler/localai/commit/db1159b6511e8fa09e594f9db0fec6ab4e142468
CVE ID: CVE-2024-7011 State: PUBLISHED Published: 2024-09-27T02:45:05.979Z Last Updated: 2024-11-05T20:07:10.772Z Vendors: Sharp NEC Display Solutions, Ltd. Products: NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG,
NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME372WJL, NP-ME382U, NP-ME382UG, NP-ME382UJL, NP-ME402X, NP-ME402XG, NP-ME402XJL, NP-CB4500XL, NP-CG6400UL, NP-CG6400WL, NP-CG6500XL, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP-P547ULJL, NP-P607UL+, NP-P627UL, NP-P627UL+, NP-P627ULG, NP-P627ULJL, NP-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-
-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-PV800UL-B+, NP-PV800UL-B1, NP-PV800UL-BJL, NP-PV800UL-W, NP-PV800UL-W+, NP-PV800UL-W1, NP-PV800UL-WJL, NP-CA4200X, NP-CA4265X, NP-CA4300U, NP-CA4300W, NP-CA4305X, NP-CA4400X, NP-CD2125X, NP-CD2200W, NP-CD2300U, NP-CD2310X, NP-CR2105X, NP-CR2200X, NP-CR2205W, NP-CR2300U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X, NP-MC453XG, NP-MC453XJL, NP-ME383WG, NP-ME403U, NP-ME403UG, NP-ME403UJL, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB
, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB4510XL, NP-CB4550USL, NP-CB6700UL, NP-CG6510UL, NP-PE456USL, NP-PE456USLG, NP-PE456USLJL, NP-PE456WSLG, NP-PE506UL, NP-PE506ULG, NP-PE506ULJL, NP-PE506WL, NP-PE506WLG, NP-PE506WLJL Problem Types: CWE-1242 Description: Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U
, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME372WJL, NP-ME382U, NP-ME382UG, NP-ME382UJL, NP-ME402X, NP-ME402XG, NP-ME402XJL, NP-CB4500XL, NP-CG6400UL, NP-CG6400WL, NP-CG6500XL, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP
LG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP-P547ULJL, NP-P607UL+, NP-P627UL, NP-P627UL+, NP-P627ULG, NP-P627ULJL, NP-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-PV800UL-B+, NP-PV800UL-B1, NP-PV800UL-BJL, NP-PV800UL-W, NP-PV800UL-W+, NP-PV800UL-W1, NP-PV800UL-WJL, NP-CA4200X, NP-CA4265X, NP-CA4300U, NP-CA4300W, NP-CA4305X, NP-CA4400X, NP-CD2125X, NP-CD2200W, NP-CD2300U, NP-CD2310X, NP-CR2105X, NP-CR2200X, NP-CR2205W, NP-CR2300U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X
0U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X, NP-MC453XG, NP-MC453XJL, NP-ME383WG, NP-ME403U, NP-ME403UG, NP-ME403UJL, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB4510XL, NP-CB4550USL, NP-CB6700UL, NP-CG6510UL, NP-PE456USL, NP-PE456USLG, NP-PE456USLJL, NP-PE456WSLG, NP-PE506UL, NP-PE506ULG, NP-PE506ULJL, NP-PE506WL, NP-PE506WLG, NP-PE506WLJL) allows an attacker to cause a denial-of-service (DoS) condition via SNMP service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sharp-nec-displays.com/global/support/info/Pro
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sharp-nec-displays.com/global/support/info/Projector_vulnerability_202408.html
CVE ID: CVE-2024-7012 State: PUBLISHED Published: 2024-09-04T13:41:17.877Z Last Updated: 2025-11-11T15:29:25.711Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Satellite 6.13 for RHEL 8, Red Hat Satellite 6.14 for RHEL 8, Red Hat Satellite 6.15 for RHEL 8, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9 Problem Types: CWE-287 Description: An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP
This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6335 - https://access.redhat.com/errata/RHSA-2024:6336 - https://access.redhat.com/errata/RHSA-2024:6337 - https://access.redhat.com/errata/RHSA-2024:8906 - https://access.redhat.com/security/cve/CVE-2024-7012 - https://bugzilla.redhat.com/show_bug.cgi?id=22
a/RHSA-2024:8906 - https://access.redhat.com/security/cve/CVE-2024-7012 - https://bugzilla.redhat.com/show_bug.cgi?id=2299429
CVE ID: CVE-2024-7013 State: PUBLISHED Published: 2024-08-21T05:56:06.650Z Last Updated: 2024-08-21T13:31:43.197Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Panasonic Holdings Corporation Products: Control FPWIN Pro Problem Types: CWE-121 Description: Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://industry.panasonic.eu/products/automation-devices-solutions/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro - https://indust
evices-solutions/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro - https://industry.panasonic.com/jp/ja/products/fasys/plc/software/fpwinpro7
CVE ID: CVE-2024-7014 State: PUBLISHED Published: 2024-07-23T09:55:42.837Z Last Updated: 2024-08-01T21:45:38.426Z Vendors: Android Products: Telegram for Android Problem Types: CWE-20 Description: EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/