Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-55500 State: PUBLISHED Published: 2024-12-10T00:00:00 Last Updated: 2024-12-11T15:44:09.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/avwo/whistle/commit/d1b8ca275dc4e453bd2efed392c0fd4b92f73cdf - https://www.sonarsource.com/blog/never-underestimate-csrf-why-origin-reflection-is-a-bad-idea/
CVE ID: CVE-2024-55503 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-01-31T20:24:34.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SyFi/CVE-2024-55503
CVE ID: CVE-2024-55504 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-02-04T15:32:13.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploit_combined.dylib component on MacOS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://apps.apple.com/us/app/rar-extractor-unarchiver-pro/id647505820?mt=12 - https://github.com/Audit00r/RAR-Extractor-Unarchiver-Pro-Dylib-injection - https://github.com/SyFi/CVE-2024-55504
CVE ID: CVE-2024-55505 State: PUBLISHED Published: 2024-12-18T00:00:00.000Z Last Updated: 2025-04-04T20:37:03.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CV1523/CVEs/blob/main/CVE-2024-55505.md
CVE ID: CVE-2024-55506 State: PUBLISHED Published: 2024-12-18T00:00:00 Last Updated: 2024-12-26T19:24:52.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CV1523/CVEs/blob/main/CVE-2024-55506.md
CVE ID: CVE-2024-55507 State: PUBLISHED Published: 2025-01-03T00:00:00 Last Updated: 2025-01-03T20:21:42.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CV1523/CVEs/blob/main/CVE-2024-55507.md
CVE ID: CVE-2024-55509 State: PUBLISHED Published: 2024-12-20T00:00:00 Last Updated: 2024-12-26T19:27:35.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/prithivilakshmanan/CSV/blob/main/CVE-2024-55509.md
CVE ID: CVE-2024-55511 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-05T17:08:59.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://updates.macrium.com/reflect/v8/v8.1.8017/details8.1.8017.htm - https://github.com/nikosecurity/CVE-2024-55511
CVE ID: CVE-2024-55513 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-18T16:02:30.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_netaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060
CVE ID: CVE-2024-55514 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-18T15:39:26.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060
CVE ID: CVE-2024-55515 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-18T16:00:45.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060
CVE ID: CVE-2024-55516 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-18T15:57:47.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060
CVE ID: CVE-2024-55517 State: PUBLISHED Published: 2025-01-08T00:00:00 Last Updated: 2025-01-08T19:44:06.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackmd.io/@AowPhwc/SyvEiDsIye
CVE ID: CVE-2024-55529 State: PUBLISHED Published: 2025-01-06T00:00:00 Last Updated: 2025-01-06T20:13:55.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fengyijiu520/Z-Blog-
CVE ID: CVE-2024-55532 State: PUBLISHED Published: 2025-03-03T16:04:54.856Z Last Updated: 2025-03-04T16:10:02.790Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0. Users are recommended to upgrade to version 2.6.0, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2024-55538 State: PUBLISHED Published: 2025-01-02T14:14:20.929Z Last Updated: 2025-01-02T14:49:58.959Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis True Image Problem Types: CWE-306 Description: Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis True Image (Windows) before build 41736. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-2209
CVE ID: CVE-2024-55539 State: PUBLISHED Published: 2024-12-23T14:05:20.298Z Last Updated: 2025-06-04T13:55:45.518Z Severity: LOW (CVSS 2.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent, Acronis Cyber Protect 16 Problem Types: CWE-327 Description: Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, Acronis Cyber Protect 16 (Linux) before build 39938. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-5825
CVE ID: CVE-2024-55540 State: PUBLISHED Published: 2025-01-02T15:25:48.887Z Last Updated: 2025-01-02T17:09:38.773Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Acronis Products: Acronis Cyber Protect 16 Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-2245
CVE ID: CVE-2024-55541 State: PUBLISHED Published: 2025-01-02T15:26:55.281Z Last Updated: 2025-01-02T16:52:29.222Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 16 Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3647
CVE ID: CVE-2024-55542 State: PUBLISHED Published: 2025-01-02T15:26:40.928Z Last Updated: 2025-04-24T03:55:28.346Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Acronis Products: Acronis Cyber Protect 16, Acronis Cyber Protect Cloud Agent Problem Types: CWE-266 Description: Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/S
895. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-5342
CVE ID: CVE-2024-55543 State: PUBLISHED Published: 2025-01-02T15:24:26.589Z Last Updated: 2025-01-02T17:10:10.488Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect 16 Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-6418
CVE ID: CVE-2024-55544 State: PUBLISHED Published: 2024-12-10T16:04:34.147Z Last Updated: 2025-11-03T22:32:32.429Z Vendors: ORing Products: IAP-420 Problem Types: CWE-77 Description: Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/
CVE ID: CVE-2024-55545 State: PUBLISHED Published: 2024-12-10T16:14:17.299Z Last Updated: 2025-11-03T22:32:33.898Z Vendors: ORing Products: IAP-420 Problem Types: CWE-79 Description: Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/
CVE ID: CVE-2024-55546 State: PUBLISHED Published: 2024-12-10T16:21:33.244Z Last Updated: 2025-11-03T22:32:35.343Z Vendors: ORing Products: IAP-420 Problem Types: CWE-79 Description: Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/
CVE ID: CVE-2024-55547 State: PUBLISHED Published: 2024-12-10T16:27:07.033Z Last Updated: 2025-11-03T22:32:36.781Z Vendors: ORing Products: IAP-420 Problem Types: CWE-77 Description: SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/
CVE ID: CVE-2024-55548 State: PUBLISHED Published: 2024-12-10T16:34:02.230Z Last Updated: 2025-11-03T22:32:38.230Z Vendors: ORing Products: IAP-420 Problem Types: CWE-703 Description: Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/
CVE ID: CVE-2024-55549 State: PUBLISHED Published: 2025-03-14T00:00:00.000Z Last Updated: 2025-11-03T20:48:48.086Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: xmlsoft Products: libxslt Problem Types: CWE-416 Description: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxslt/-/issues/127
CVE ID: CVE-2024-55550 State: PUBLISHED Published: 2024-12-10T00:00:00.000Z Last Updated: 2025-10-21T22:55:34.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mi
le modification or privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029
CVE ID: CVE-2024-55551 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-08-27T21:43:05.467Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Exasol Products: JDBC driver Problem Types: CWE-471 Description: An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackhat.com/eu-24/briefings/schedule/index.html#a-novel-attack-surface-
ISA ADP Vulnrichment: References: - https://www.blackhat.com/eu-24/briefings/schedule/index.html#a-novel-attack-surface-java-authentication-and-authorization-service-jaas-42179 - https://docs.exasol.com/db/latest/connect_exasol/drivers/jdbc.htm - https://gist.github.com/azraelxuemo/9565ec9219e0c3e9afd5474904c39d0f - https://docs.exasol.com/db/7.1/release_notes_drivers_jdbc/24.2.1.htm
CVE ID: CVE-2024-55553 State: PUBLISHED Published: 2025-01-06T00:00:00.000Z Last Updated: 2025-01-23T18:03:27.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than this number of updates during an update interval (usually 30 minutes). Additionally, this effect regularly occurs organically. Furthermore, an attacker can use this to trigger route validation continuously. Given that routers wit
curs organically. Furthermore, an attacker can use this to trigger route validation continuously. Given that routers with large full tables may need more than 30 minutes to fully re-validate the table, continuous issuance/withdrawal of large numbers of ROA may be used to impact the route handling performance of all FRR instances using RPKI globally. Additionally, the re-validation will cause heightened BMP traffic to ingestors. Fixed Versions: 10.0.3, 10.1.2, 10.2.1, >= 10.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/17586/commits/b0800bfdf04b4fcf48504737ebfe4ba7f05268d3 - https://frrouting.org/security/cve
ithub.com/FRRouting/frr/pull/17586/commits/b0800bfdf04b4fcf48504737ebfe4ba7f05268d3 - https://frrouting.org/security/cve-2024-55553/
CVE ID: CVE-2024-55554 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-17T16:57:46.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.intrexx.com/en/security-advisories/ixsa-20241204-01/
CVE ID: CVE-2024-55555 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-07T19:14:30.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client.php file can be accessed without authentication. The parameter {hash} is passed to the function decrypt that expects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usab
pects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usable to trigger remote command execution from arbitrary deserialization.) Therefore, an attacker in possession of the APP_KEY is able to fully control a string passed to an unserialize function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/invoiceninja/invoiceninja/commit/d9302021472c3e7e23bac8c3d5fbec57a5f38f0c - https://www.synacktiv.com/advisories/invoiceninja-unauthenticated-remote-command-execution-when-appkey-known
CVE ID: CVE-2024-55556 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T19:24:43.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on the server by manipulating the laravel_session cookie, exploiting arbitrary deserialization through the encrypted session data. The exploitation vector of this vulnerability relies on an attacker obtaining Laravel's secret APP_KEY, which would allow them to decrypt and manipulate session cookies (laravel_session) containing serialized data. By altering this data and re-encrypting it with th
ipulate session cookies (laravel_session) containing serialized data. By altering this data and re-encrypting it with the APP_KEY, the attacker could trigger arbitrary deserialization on the server, potentially leading to remote command execution (RCE). The vulnerability is primarily exploited by accessing an exposed cookie and manipulating it using the secret key to gain malicious access to the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synacktiv.com/ - https://github.com/crater-invoice/crater - https://www.synacktiv.com/advisories/crater-invoice-unauthenticated-remote-command-execution-when-appkey-known
CVE ID: CVE-2024-55557 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-17T15:13:46.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://apps.microsoft.com/detail/9nhtv46lg4nh?hl=en-us&gl=US - https://github.com/nroduit/Weasis/releases/tag/v4.5.1 - https://github.com/partywavesec/CVE-2024-55557 - https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1
CVE ID: CVE-2024-55560 State: PUBLISHED Published: 2024-12-08T00:00:00 Last Updated: 2024-12-09T15:58:37.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mailcleaner.net/infobox/mc-info-box.php - https://github.com/MailCleaner/MailCleaner/wiki/Watchdogs#host_keys - https://github.com/MailCleaner/MailCleaner/commit/28d913eaa044b689eb114f72ebe92d48cb4aaca7
CVE ID: CVE-2024-55563 State: PUBLISHED Published: 2024-12-09T00:00:00.000Z Last Updated: 2025-03-04T21:33:22.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transactions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://bitcoincore.org - https://delvingbitcoin.org/t/full-disclosure-transaction-rel
n_Vulnerabilities_and_Exposures - https://bitcoincore.org - https://delvingbitcoin.org/t/full-disclosure-transaction-relay-throughput-overflow-attacks-against-off-chain-protocols/1305 - https://gnusha.org/pi/bitcoindev/CALZpt+EptER=p+P7VN3QAb9n=dODA9_LnR9xZwWpRsdAwedv=w@mail.gmail.com/T/#u - https://ariard.github.io
CVE ID: CVE-2024-55564 State: PUBLISHED Published: 2024-12-09T00:00:00 Last Updated: 2024-12-09T15:38:01.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/dist/POSIX-2008/changes
CVE ID: CVE-2024-55565 State: PUBLISHED Published: 2024-12-09T00:00:00.000Z Last Updated: 2025-11-03T22:32:41.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ai/nanoid/pull/510 - https://github.com/ai/nanoid/releases/tag/5.0.9 - https://github.com/ai/nanoid/compare/3.3.7...3.3.8