Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273525 - https://vuldb.com/?ctiid.273525 - https://vuldb.com/?submit.383839 - https://yjz233.notion.site/0213043a8c7e498a9e73a0b6f0fa9f29?pvs=4
CVE ID: CVE-2024-7441 State: PUBLISHED Published: 2024-08-03T17:31:04.573Z Last Updated: 2024-08-07T16:24:42.771Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Vivotek Products: SD9364 Problem Types: CWE-121 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273526 is the identifier assigned to this vulnerability. NOTE: This vulnerability onl
to the public and may be used. VDB-273526 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273526 - https://vuldb.com/?ctiid.273526 - https://vuldb.com/?submit.383842 - https://yjz233.notion.site/vivotek-SD9364-has-stack-buffer-overflow-vulnerability-in-httpd-c9dabd0511d04093865d1d75110429d1?pvs=4
CVE ID: CVE-2024-7442 State: PUBLISHED Published: 2024-08-03T18:00:09.890Z Last Updated: 2024-08-05T15:04:43.133Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Vivotek Products: SD9364 Problem Types: CWE-77 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-273527. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Ve
y is VDB-273527. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273527 - https://vuldb.com/?ctiid.273527 - https://vuldb.com/?submit.383843 - https://yjz233.notion.site/vivotek-SD9364-has-command-injection-vulnerability-in-upload_file-cgi-5cef6da27b25479497dda0b73670f565?pvs=4
CVE ID: CVE-2024-7443 State: PUBLISHED Published: 2024-08-03T19:00:09.314Z Last Updated: 2024-08-05T18:43:32.506Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Vivotek Products: IB8367A Problem Types: CWE-77 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-273528. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was co
3528. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273528 - https://vuldb.com/?ctiid.273528 - https://vuldb.com/?submit.383844 - https://yjz233.notion.site/vivotek-IB8367A-has-command-injection-vulnerability-in-upload_file-cgi-899e5d529fb14b4189534b2b9830bfff?pvs=4
CVE ID: CVE-2024-7444 State: PUBLISHED Published: 2024-08-03T19:31:04.261Z Last Updated: 2024-08-05T15:03:04.088Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Ticket Reservation System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273529 was assigned to this vulnerability. Addition
has been disclosed to the public and may be used. The identifier VDB-273529 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273529 - https://vuldb.com/?ctiid.273529 - https://vuldb.com/?submit.383643 - https://github.com/DeepMountains/Mirage/blob/main/CVE10-1.md
CVE ID: CVE-2024-7445 State: PUBLISHED Published: 2024-08-03T20:00:06.384Z Last Updated: 2024-08-05T14:58:00.222Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: itsourcecode Products: Ticket Reservation System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file checkout_ticket_save.php. The manipulation of the argument data leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273530 is the identifier assigned to this vulnerability. Additional Anal
en disclosed to the public and may be used. VDB-273530 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273530 - https://vuldb.com/?ctiid.273530 - https://vuldb.com/?submit.383644 - https://github.com/DeepMountains/Mirage/blob/main/CVE10-2.md
CVE ID: CVE-2024-7446 State: PUBLISHED Published: 2024-08-03T21:00:09.382Z Last Updated: 2024-08-05T14:04:45.432Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: itsourcecode Products: Ticket Reservation System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file list_tickets.php. The manipulation of the argument prefSeat_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273531. Additional Analyst Notes: - CISA
public and may be used. The associated identifier of this vulnerability is VDB-273531. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273531 - https://vuldb.com/?ctiid.273531 - https://vuldb.com/?submit.383645 - https://github.com/DeepMountains/Mirage/blob/main/CVE10-3.md
CVE ID: CVE-2024-7447 State: PUBLISHED Published: 2024-08-28T11:31:24.972Z Last Updated: 2024-08-28T13:25:43.796Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: funnelforms Products: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free Problem Types: CWE-862 Description: The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'fnsf_af2_handel_file_upload' function in all versions up to, and including, 3.7.3.2. This makes it possible for unauthenticated attacker
file_upload' function in all versions up to, and including, 3.7.3.2. This makes it possible for unauthenticated attackers to upload arbitrary media to the site, even if no forms exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9871f683-136e-45b5-90fb-a373a771014b?source=cve - https://plugins.trac.wordpress.org/browser/funnelforms-free/trunk/frontend/frontend.php#L2577 - https://plugins.trac.wordpress.org/changeset/3141470/
CVE ID: CVE-2024-7448 State: PUBLISHED Published: 2024-08-21T16:09:51.994Z Last Updated: 2024-09-03T14:40:02.273Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Magnet Forensics Products: AXIOM Problem Types: CWE-78 Description: Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must acquire data from a malicious mobile device. The specific flaw exists within the Android device image acquisition functionality. The issue results
us mobile device. The specific flaw exists within the Android device image acquisition functionality. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-23964. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1129/ - https://docs.magnetforensics.com/docs/axiom/release_notes.html
CVE ID: CVE-2024-7449 State: PUBLISHED Published: 2024-08-04T02:31:04.594Z Last Updated: 2024-08-04T11:12:07.804Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273540. Additional Analyst Notes: - CISA ADP Vulnrichment:
and may be used. The identifier of this vulnerability is VDB-273540. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273540 - https://vuldb.com/?ctiid.273540 - https://vuldb.com/?submit.383859 - https://github.com/DeepMountains/Mirage/blob/main/CVE11-1.md
CVE ID: CVE-2024-7450 State: PUBLISHED Published: 2024-08-04T03:00:09.243Z Last Updated: 2024-08-07T18:01:05.387Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-434 Description: A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resume_upload.php of the component Image Handler. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifie
upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273541 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273541 - https://vuldb.com/?ctiid.273541 - https://vuldb.com/?submit.383860 - https://github.com/DeepMountains/Mirage/blob/main/CVE11-2.md
CVE ID: CVE-2024-7451 State: PUBLISHED Published: 2024-08-04T03:31:04.186Z Last Updated: 2024-08-05T15:47:10.999Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file apply_now.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273542 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP
blic and may be used. VDB-273542 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273542 - https://vuldb.com/?ctiid.273542 - https://vuldb.com/?submit.383864 - https://github.com/DeepMountains/Mirage/blob/main/CVE11-3.md
CVE ID: CVE-2024-7452 State: PUBLISHED Published: 2024-08-04T04:00:06.127Z Last Updated: 2024-08-07T18:23:08.719Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_company.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273543. Additional Analyst Notes: - CISA ADP
lic and may be used. The associated identifier of this vulnerability is VDB-273543. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273543 - https://vuldb.com/?ctiid.273543 - https://vuldb.com/?submit.383865 - https://github.com/DeepMountains/Mirage/blob/main/CVE11-4.md
CVE ID: CVE-2024-7453 State: PUBLISHED Published: 2024-08-04T04:31:04.139Z Last Updated: 2024-08-05T14:02:03.351Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: FastAdmin Problem Types: CWE-79 Description: A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /[admins_url].php/general/attachment/edit/ids/4?dialog=1 of the component Attachment Management Section. The manipulation of the argument row[url]/row[imagewidth]/row[imageheight] leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identif
ripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273544. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273544 - https://vuldb.com/?ctiid.273544 - https://vuldb.com/?submit.384320 - https://github.com/Hebing123/cve/issues/65 - https://github.com/Hebing123/cve/issues/66
CVE ID: CVE-2024-7454 State: PUBLISHED Published: 2024-08-04T09:00:09.255Z Last Updated: 2024-08-07T18:24:22.215Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patient_name of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273548. Additional Analyst Notes: - CISA ADP V
o the public and may be used. The identifier of this vulnerability is VDB-273548. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273548 - https://vuldb.com/?ctiid.273548 - https://vuldb.com/?submit.385005 - https://github.com/lche511/cve/blob/main/sql.md
CVE ID: CVE-2024-7455 State: PUBLISHED Published: 2024-08-04T11:31:04.327Z Last Updated: 2024-08-05T10:20:36.661Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file partedit.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273549 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnr
nd may be used. The identifier VDB-273549 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273549 - https://vuldb.com/?ctiid.273549 - https://vuldb.com/?submit.385442 - https://github.com/Wumshi/cve/issues/3
CVE ID: CVE-2024-7456 State: PUBLISHED Published: 2024-11-01T12:05:12.189Z Last Updated: 2024-11-01T13:19:19.973Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-89 Description: A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, allowing for SQL injection. The `orderByClause` variable is constructed without server-side validation or sanitization, enabling an attacker to execute arbitrary SQL commands. Successful exploitation can lead to complete data loss, mo
tion, enabling an attacker to execute arbitrary SQL commands. Successful exploitation can lead to complete data loss, modification, or corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/bfb3015e-5642-4d94-ab49-e8b49c4e07e4 - https://github.com/lunary-ai/lunary/commit/6a0bc201181e0f4a0cc375ccf4ef0d7ae65c8a8e
CVE ID: CVE-2024-7457 State: PUBLISHED Published: 2025-06-10T23:19:47.186Z Last Updated: 2025-06-11T13:52:22.705Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Stash Products: Stash Problem Types: CWE-863 Description: The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights() using its own privileged context (root), effectively authorizing itself rather than the client. As a result, it grants the system.preferences.admin right internally, regardless of the requesting client's privileges. Thi
a result, it grants the system.preferences.admin right internally, regardless of the requesting client's privileges. This flawed logic allows unprivileged clients to invoke privileged operations via XPC, including unauthorized changes to system-wide network preferences such as SOCKS, HTTP, and HTTPS proxy settings. The absence of proper code-signing checks further enables arbitrary processes to exploit this flaw, leading to man-in-the-middle (MITM) attacks through traffic redirection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pentraze.com/
CVE ID: CVE-2024-7458 State: PUBLISHED Published: 2024-08-04T22:00:07.342Z Last Updated: 2024-08-05T14:55:41.487Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: elunez Products: eladmin Problem Types: CWE-27 Description: A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversal: 'dir/../../filename'. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-27355
e exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273551. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273551 - https://vuldb.com/?ctiid.273551 - https://vuldb.com/?submit.380498 - https://github.com/elunez/eladmin/issues/851
CVE ID: CVE-2024-7459 State: PUBLISHED Published: 2024-08-04T22:31:03.567Z Last Updated: 2024-08-07T18:27:26.452Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: OSWAPP Products: Warehouse Inventory System Problem Types: CWE-352 Description: A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /edit_account.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273552. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
be used. The identifier of this vulnerability is VDB-273552. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273552 - https://vuldb.com/?ctiid.273552 - https://vuldb.com/?submit.379590 - https://gist.github.com/topsky979/26ab4dc35349a3f670fb8688c69a5cad
CVE ID: CVE-2024-7460 State: PUBLISHED Published: 2024-08-04T23:00:08.599Z Last Updated: 2024-08-05T14:48:53.659Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: OSWAPP Products: Warehouse Inventory System Problem Types: CWE-352 Description: A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change_password.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273553 was assigned to this vulnerability. Additional Analyst Notes: - CI
the public and may be used. The identifier VDB-273553 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273553 - https://vuldb.com/?ctiid.273553 - https://vuldb.com/?submit.379593 - https://gist.github.com/topsky979/b178dd940d98828d1dfd0ccaaaddeb6b
CVE ID: CVE-2024-7461 State: PUBLISHED Published: 2024-08-04T23:31:04.455Z Last Updated: 2024-08-07T20:38:29.189Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ForIP Tecnologia Products: Administração PABX Problem Types: CWE-89 Description: A vulnerability was found in ForIP Tecnologia Administração PABX 1.x. It has been rated as critical. Affected by this issue is some unknown functionality of the file /authMonitCallcenter of the component monitcallcenter. The manipulation of the argument user leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273554 is the identifier assigned to th
ched remotely. The exploit has been disclosed to the public and may be used. VDB-273554 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273554 - https://vuldb.com/?ctiid.273554 - https://vuldb.com/?submit.380816 - https://docs.google.com/document/d/1mlEC73Tdqr8L39ogilAbWSj4ZvCRmprtI82zvawWCzE/edit
CVE ID: CVE-2024-7462 State: PUBLISHED Published: 2024-08-05T00:00:08.868Z Last Updated: 2024-08-05T10:19:25.079Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: N350RT Problem Types: CWE-120 Description: A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273555. NOTE: The vendor was contacted early about this disclosure