Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OXPS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24478. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1358/
CVE ID: CVE-2024-9763 State: PUBLISHED Published: 2024-11-22T21:02:05.773Z Last Updated: 2024-11-23T01:26:28.200Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Tungsten Automation Products: Power PDF Problem Types: CWE-125 Description: Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files.
target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24479. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1359/
CVE ID: CVE-2024-9764 State: PUBLISHED Published: 2024-11-22T21:02:17.678Z Last Updated: 2024-11-25T15:15:32.239Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tungsten Automation Products: Power PDF Problem Types: CWE-416 Description: Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue re
visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24480. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1362/
CVE ID: CVE-2024-9765 State: PUBLISHED Published: 2025-05-15T20:07:23.119Z Last Updated: 2025-05-16T20:28:21.213Z Vendors: Unknown Products: EKC Tournament Manager Problem Types: CWE-552 Files or Directories Accessible to External Parties Description: The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c86157b0-43f3-4e82-9697-7dd9401b48d6/
CVE ID: CVE-2024-9766 State: PUBLISHED Published: 2024-11-22T21:02:41.157Z Last Updated: 2024-12-04T21:17:50.652Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Wacom Products: Center Problem Types: CWE-59 Description: Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within WTabletServicePro process. By creating a symbolic link, an attacker can abuse the serv
. The specific flaw exists within WTabletServicePro process. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-24304. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1336/
CVE ID: CVE-2024-9767 State: PUBLISHED Published: 2024-11-22T21:11:14.223Z Last Updated: 2024-11-25T16:15:44.110Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IrfanView Products: IrfanView Problem Types: CWE-125 Description: IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SID files. The issue results from the lack of proper validation of us
le. The specific flaw exists within the parsing of SID files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23277. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1371/
CVE ID: CVE-2024-9768 State: PUBLISHED Published: 2024-11-21T06:00:09.876Z Last Updated: 2024-11-21T17:40:38.527Z Vendors: Unknown Products: Formidable Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Formidable Forms WordPress plugin before 6.14.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3c4ff11b-4a06-433d-8f0e-4069865721c0/
CVE ID: CVE-2024-9769 State: PUBLISHED Published: 2024-12-06T03:25:38.678Z Last Updated: 2024-12-06T14:18:27.540Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: totalsoft Products: Video Gallery – YouTube Gallery and Vimeo Gallery Problem Types: CWE-79 Description: The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute
d attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b57c9e58-64a6-48e8-8ef6-25608e4131e6?source=cve - https://packetstormsecurity.com/files/179304/WordPress-Gallery-2.3.6-Cross-Site-Scripting.html
CVE ID: CVE-2024-9770 State: PUBLISHED Published: 2025-03-25T06:00:13.942Z Last Updated: 2025-03-25T14:15:15.197Z Vendors: Unknown Products: WP-Recall Problem Types: CWE-89 SQL Injection Description: The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d31f8713-b807-4ac4-8897-7d62a93bb2db/
CVE ID: CVE-2024-9771 State: PUBLISHED Published: 2025-04-28T06:00:02.288Z Last Updated: 2025-04-28T16:52:20.234Z Vendors: Unknown Products: WP-Recall Problem Types: CWE-89 SQL Injection, CWE-79 Cross-Site Scripting (XSS) Description: The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c33adc08-99c5-42e1-a2e3-e7c3412a6a3f/
CVE ID: CVE-2024-9772 State: PUBLISHED Published: 2024-10-26T09:35:19.550Z Last Updated: 2024-10-28T20:19:23.252Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: uiuxlab Products: Uix Shortcodes – Compatible with Gutenberg Problem Types: CWE-94 Description: The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.9.9. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: -
tcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3000758d-68e0-46a6-aef0-e2407a828168?source=cve - https://wordpress.org/plugins/uix-shortcodes/#developers - https://plugins.trac.wordpress.org/browser/uix-shortcodes/trunk/shortcodes/templates/default/frontpage-init.php#L9
CVE ID: CVE-2024-9773 State: PUBLISHED Published: 2025-03-27T12:31:27.475Z Last Updated: 2025-03-27T13:07:40.267Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-77 Description: An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/is
wn in the UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/498557 - https://hackerone.com/reports/2671808
CVE ID: CVE-2024-9774 State: PUBLISHED Published: 2024-12-27T02:00:12.451Z Last Updated: 2025-08-30T21:04:45.504Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Problem Types: CWE-150 Description: A vulnerability was found in python-sql where unary operators do not escape non-Expression. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-9774 - https://bugzilla.redhat.com/show_bug.cgi?id=2332734 - https://discuss.tryton.org/t/security-release-for-issue-93/7889/3
CVE ID: CVE-2024-9775 State: PUBLISHED Published: 2024-11-09T02:32:02.746Z Last Updated: 2024-11-09T15:44:23.166Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: shtheme Products: Anih - Creative Agency WordPress Theme Problem Types: CWE-79 Description: The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execu
ated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8b2b6a6b-73c2-441e-893d-ec171a659546?source=cve - https://themeforest.net/item/anih-creative-agency-wordpress-theme/36381357
CVE ID: CVE-2024-9776 State: PUBLISHED Published: 2024-10-12T05:39:41.095Z Last Updated: 2024-10-14T16:27:29.355Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: butterflymedia Products: ImagePress – Image Gallery Problem Types: CWE-79 Description: The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected p
permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/655c08e6-4ef2-438e-b381-1bc3748c3771?source=cve - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/page-settings.php - https://plugins.trac.wordpress.org/changeset/3167164/
CVE ID: CVE-2024-9777 State: PUBLISHED Published: 2024-11-19T12:45:33.062Z Last Updated: 2024-11-19T14:01:50.136Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: wproyal Products: Ashe Problem Types: CWE-79 Description: The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.243. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ce6c2f36-9eed-482f-9201-8d26e8c5c369?source=cve - https://wordpress.org/themes/ashe/ - https://themes.trac.wordpress.org/browser/ashe/2.242/functions.php#L101 - https://themes.trac.wordpress.org/browser/ashe/2.242/functions.php#L112 - https://themes.trac.wordpress.org/changeset/248853/
CVE ID: CVE-2024-9778 State: PUBLISHED Published: 2024-10-12T05:39:38.745Z Last Updated: 2024-10-15T01:36:25.269Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: butterflymedia Products: ImagePress – Image Gallery Problem Types: CWE-352 Description: The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on the 'imagepress_admin_page' function. This makes it possible for unauthenticated attackers to update plugin settings, including redirection URLs, via a forged request granted they can trick a site administrator into per
e plugin settings, including redirection URLs, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/200b3446-6107-434b-b46d-2078461f3f94?source=cve - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/page-settings.php#L106 - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/page-settings.php#L267 - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/page-settings.php#L380 - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/include
e-gallery/trunk/includes/page-settings.php#L380 - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/page-settings.php#L461 - https://plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/page-settings.php#L2 - https://plugins.trac.wordpress.org/changeset/3167164/
CVE ID: CVE-2024-9779 State: PUBLISHED Published: 2024-12-17T22:59:07.511Z Last Updated: 2025-11-20T19:59:25.173Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N) Vendors: Red Hat Products: Red Hat Advanced Cluster Management for Kubernetes 2 Problem Types: CWE-501 Description: A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an a
so named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager's token and steal any service account token by creating and mounting the target service account to control the whole cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-9779 - https://bugzilla.redhat.com/show_bug.cgi?id=2317916 - https://github.com/open-cluster-management-io/ocm/pull/325 - https://github.com/open-cluster-management-io/ocm/releases/tag/v0.13.0 - https://github.com/open-cluster-management-io/registration-operator/issues/36
r-management-io/ocm/releases/tag/v0.13.0 - https://github.com/open-cluster-management-io/registration-operator/issues/361
CVE ID: CVE-2024-9780 State: PUBLISHED Published: 2024-10-10T06:30:49.710Z Last Updated: 2024-10-10T14:39:44.522Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-456 Description: ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-12.html - https://gitlab.com/wireshark/wireshark/-/issues/20026
CVE ID: CVE-2024-9781 State: PUBLISHED Published: 2024-10-10T06:30:54.729Z Last Updated: 2024-10-10T14:37:33.798Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-230 Description: AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-13.html - https://gitlab.com/wireshark/wireshark/-/issues/20114
CVE ID: CVE-2024-9782 State: PUBLISHED Published: 2024-10-10T11:31:05.102Z Last Updated: 2024-10-10T13:43:31.123Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L B1 Problem Types: CWE-120 Description: A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formEasySetupWWConfig of the file /goform/formEasySetupWWConfig. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279934 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279934 - https://vuldb.com/?ctiid.279934 - https://vuldb.com/?submit.414549 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-619L/formEasySetupWWConfig.md - https://www.dlink.com/
CVE ID: CVE-2024-9783 State: PUBLISHED Published: 2024-10-10T11:31:06.986Z Last Updated: 2024-10-10T13:41:15.651Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L B1 Problem Types: CWE-120 Description: A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formLogDnsquery of the file /goform/formLogDnsquery. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279935 - https://vuldb.com/?ctiid.2799
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279935 - https://vuldb.com/?ctiid.279935 - https://vuldb.com/?submit.414550 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-619L/formLogDnsquery.md - https://www.dlink.com/
CVE ID: CVE-2024-9784 State: PUBLISHED Published: 2024-10-10T12:00:08.620Z Last Updated: 2024-10-10T13:36:08.593Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L B1 Problem Types: CWE-120 Description: A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279936 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279936 - https://vuldb.com/?ctiid.279936 - https://vuldb.com/?submit.414552 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-619L/formResetStatistic.md - https://www.dlink.com/
CVE ID: CVE-2024-9785 State: PUBLISHED Published: 2024-10-10T13:00:08.123Z Last Updated: 2024-10-10T13:38:02.091Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L B1 Problem Types: CWE-120 Description: A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formSetDDNS of the file /goform/formSetDDNS. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279937 - https://vuldb.com/?ctiid.279937
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279937 - https://vuldb.com/?ctiid.279937 - https://vuldb.com/?submit.414553 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-619L/formSetDDNS.md - https://www.dlink.com/
CVE ID: CVE-2024-9786 State: PUBLISHED Published: 2024-10-10T13:00:10.763Z Last Updated: 2024-10-10T13:33:24.784Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-619L B1 Problem Types: CWE-120 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. Affected by this issue is the function formSetLog of the file /goform/formSetLog. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279938 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279938 - https://vuldb.com/?ctiid.279938 - https://vuldb.com/?submit.414554 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-619L/formSetLog.md - https://www.dlink.com/