Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28560 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-23T19:38:04.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.niushop.com/ - https://v5.niuteam.cn - https://gitee.com/niushop-team/niushop_b2c_v5 - https://chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559
CVE ID: CVE-2024-28562 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-10-28T18:36:10.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::copyIntoFrameBuffer() component when reading images in EXR format. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 - http://www.openwall.com/lists/oss-security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security/202
2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security/2024/04/11/2
CVE ID: CVE-2024-28563 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T00:56:57.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::DwaCompressor::Classifier::Classifier() function when reading images in EXR format. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 - http://www.openwall.com/lists/oss-security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.
ll.com/lists/oss-security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security/2024/04/11/2
CVE ID: CVE-2024-28564 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-11-01T19:00:33.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO::readChars() function when reading images in EXR format. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 - http://www.openwall.com/lists/oss-security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-sec
security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security/2024/04/11/2
CVE ID: CVE-2024-28565 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-12-04T21:06:48.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImageData() function when reading images in PSD format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 - http://www.openwall.com/lists/oss-security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security
ity/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security/2024/04/11/2
CVE ID: CVE-2024-28566 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T19:01:38.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28567 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T18:52:07.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_CreateICCProfile() function when reading images in TIFF format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28568 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T19:00:33.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the read_iptc_profile() function when reading images in TIFF format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28569 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:18:57.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read() function when reading images in EXR format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28570 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:39:25.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the processMakerNote() function when reading images in JPEG format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28571 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-11-01T15:01:24.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the fill_input_buffer() function when reading images in JPEG format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28572 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:43:12.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_SetTagValue() function when reading images in JPEG format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28573 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:48:24.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile() function when reading images in JPEG format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28574 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T18:51:33.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_copy_default_tcp_and_create_tcd() function when reading images in J2K format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28575 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T18:59:35.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_read_mct() function when reading images in J2K format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28576 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:15:02.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy() function when reading images in J2K format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28577 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:40:39.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile_raw() function when reading images in JPEG format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28578 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-10-28T18:33:02.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28579 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:51:07.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() function when reading images in HDR format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28580 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T18:55:41.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28581 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T18:49:54.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28582 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T18:55:09.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28583 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-05T18:11:41.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE ID: CVE-2024-28584 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-15T15:37:55.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the J2KImageToFIBITMAP() function when reading images in J2K format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 - http://www.openwall.com/lists/oss-security/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-secur
curity/2024/04/11/3 - http://www.openwall.com/lists/oss-security/2024/04/11/10 - http://www.openwall.com/lists/oss-security/2024/04/11/2
CVE ID: CVE-2024-28589 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-02T00:56:57.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL loading from a world-writable directory during service initialization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.axigen.com/knowledgebase/Local-Privilege-Escalation-Vulnerability-on-Axigen-for-Windows-CVE-2024-28589-_402.html
CVE ID: CVE-2024-28593 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-11-05T14:47:25.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medi
standard Moodle." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe - https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt - https://docs.moodle.org/403/en/Using_Chat
CVE ID: CVE-2024-28595 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-02T17:00:28.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in update-admin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/shubham-s-pandey/CVE_POC/blob/main/CVE-2024-28595.md
CVE ID: CVE-2024-28607 State: PUBLISHED Published: 2025-03-11T00:00:00.000Z Last Updated: 2025-03-11T13:18:51.833Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: librasean Products: IP-Utils Problem Types: CWE-180 Description: The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via a falsy isPrivate return value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librasean/IP-Utils/blob/4f88799f94f21efe6ea9135129ab2bbeb0c58edc/src/IsPrivate.ts#L4 - https://gist.github.com/aydinnyunus/4d71e7d9a433f3afc658724b903f4d23
CVE ID: CVE-2024-28613 State: PUBLISHED Published: 2024-04-24T00:00:00.000Z Last Updated: 2025-03-27T20:58:58.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the task_id parameter of the task-details.php, and edit-task.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/17217/employee-management-system-php-and-mysql-free-download.html - https://github.com/hakkitoklu/hunt/blob/main/PHP%20Task%20Management%20System/sqli.md
CVE ID: CVE-2024-28623 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-15T20:17:34.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GURJOTEXPERT/ritecms
CVE ID: CVE-2024-28627 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-02T00:56:57.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.flipsnack.com/ - https://labs.integrity.pt/advisories/cve-2024-28627/
CVE ID: CVE-2024-28635 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-02T15:09:51.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/surveyjs/survey-creator/issues/5285 - https://packetstormsecurity.com/2403-exploits/surveyjssurveycreator19132-xss.txt
CVE ID: CVE-2024-28639 State: PUBLISHED Published: 2024-03-16T00:00:00.000Z Last Updated: 2025-03-26T14:40:02.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_1.md
CVE ID: CVE-2024-28640 State: PUBLISHED Published: 2024-03-16T00:00:00 Last Updated: 2024-10-28T19:00:47.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_2.md
CVE ID: CVE-2024-28662 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-11-13T16:08:01.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of missing sanitization in create_tag in admin/include/functions.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Piwigo/Piwigo/security/advisories/GHSA-8g2g-6f2c-6h7j - https://github.com/Piwigo/Piwigo/commit/5069610aaeb1da6d96d389651a5ba9b38690c580 - https://github.com/Piwigo/Piwigo/compare/14.2.0...14.3.0
CVE ID: CVE-2024-28665 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-02T20:43:28.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/777erp/cms/blob/main/1.md
CVE ID: CVE-2024-28666 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-02T20:20:08.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/777erp/cms/blob/main/2.md
CVE ID: CVE-2024-28667 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-05T18:20:08.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/777erp/cms/blob/main/6.md
CVE ID: CVE-2024-28668 State: PUBLISHED Published: 2024-03-13T00:00:00.000Z Last Updated: 2025-03-13T17:05:26.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/777erp/cms/blob/main/5.md
CVE ID: CVE-2024-28669 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-28T13:36:26.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/777erp/cms/blob/main/10.md
CVE ID: CVE-2024-28670 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-15T20:05:19.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/777erp/cms/blob/main/9.md
CVE ID: CVE-2024-28671 State: PUBLISHED Published: 2024-03-13T00:00:00.000Z Last Updated: 2025-04-15T15:25:34.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/777erp/cms/blob/main/7.md