Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-3762 State: PUBLISHED Published: 2024-04-14T20:00:40.306Z Last Updated: 2024-08-01T20:20:01.359Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Emlog Pro Problem Types: CWE-79 Description: A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-260602 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not
s the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260602 - https://vuldb.com/?ctiid.260602 - https://vuldb.com/?submit.311793 - https://github.com/fubxx/CVE/blob/main/Emlog-XSS.md
CVE ID: CVE-2024-3763 State: PUBLISHED Published: 2024-04-14T22:00:05.210Z Last Updated: 2024-08-01T20:20:01.865Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Emlog Pro Problem Types: CWE-79 Description: A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260603. NOTE: The vendor was contacted early about this disclosure but did no
ed identifier of this vulnerability is VDB-260603. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260603 - https://vuldb.com/?ctiid.260603 - https://vuldb.com/?submit.311808 - https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md
CVE ID: CVE-2024-3764 State: PUBLISHED Published: 2024-04-14T22:31:05.048Z Last Updated: 2024-08-26T16:53:40.563Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:N/A:P) Vendors: Tuya Products: SDK Problem Types: CWE-404 Description: ** DISPUTED ** A vulnerability classified as problematic has been found in Tuya SDK up to 5.0.x. Affected is an unknown function of the component MQTT Packet Handler. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. Upgrading to version 5.1.0 is able to address this issue. It is recommended t
nerability is still doubted at the moment. Upgrading to version 5.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-260604. NOTE: The vendor explains that a malicious actor would have to crack TLS first or use a legitimate login to initiate the attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.260604 - https://vuldb.com/?ctiid.260604 - https://vuldb.com/?submit.311860 - https://github.com/kzLiu2017/Tuya_Cam_CVE_Doc/blob/main/CVE%20Doc.pdf
CVE ID: CVE-2024-3765 State: PUBLISHED Published: 2024-04-14T23:00:05.199Z Last Updated: 2024-08-08T20:19:23.996Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Xiongmai Products: AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME, XM530_R80X30-PQ_8M Problem Types: CWE-284 Description: A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202
t Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.260605 - https://vuldb.com/?ctiid.260605 - https://vuldb.com/?submit.311903 - https://github.com/netsecfish/xiongmai_incorrect_access_con
vuldb.com/?ctiid.260605 - https://vuldb.com/?submit.311903 - https://github.com/netsecfish/xiongmai_incorrect_access_control - https://github.com/netsecfish/xiongmai_incorrect_access_control/blob/main/pocCheck3-en.py
CVE ID: CVE-2024-3766 State: PUBLISHED Published: 2024-04-14T23:31:04.481Z Last Updated: 2024-08-01T20:20:01.566Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: slowlyo Products: OwlAdmin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin up to 3.5.7. Affected by this issue is some unknown functionality of the file /admin-api/upload_image of the component Image File Upload. The manipulation of the argument file leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-260606 is the identifier assigned to this vulnerability. Additio
t has been disclosed to the public and may be used. VDB-260606 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260606 - https://vuldb.com/?ctiid.260606 - https://vuldb.com/?submit.311886 - https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
CVE ID: CVE-2024-3767 State: PUBLISHED Published: 2024-04-15T03:00:05.339Z Last Updated: 2025-05-30T11:19:24.174Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: News Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The manipulation of the argument posttitle/category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260614
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260614 - https://vuldb.com/?ctiid.260614 - https://vuldb.com/?submit.316290 - https://github.com/BurakSevben/CVEs/blob/main/News%20Portal/News%20Portal%20-%20SQL%20Injection%20-%203.md - https://phpgurukul.com/
CVE ID: CVE-2024-3768 State: PUBLISHED Published: 2024-04-15T03:31:04.399Z Last Updated: 2024-08-01T20:20:01.861Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul, itsourcecode Products: News Portal Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260615. Additional Analyst Notes: - CISA A
ublic and may be used. The associated identifier of this vulnerability is VDB-260615. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260615 - https://vuldb.com/?ctiid.260615 - https://vuldb.com/?submit.316291 - https://github.com/BurakSevben/CVEs/blob/main/News%20Portal/News%20Portal%20-%20SQL%20Injection%20-%204.md - https://github.com/L1OudFd8cl09/CVE/blob/main/25_07_2024_b.md
CVE ID: CVE-2024-3769 State: PUBLISHED Published: 2024-04-15T04:00:05.316Z Last Updated: 2024-08-12T13:08:32.219Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Student Record System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /login.php. The manipulation of the argument id/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260616. Additional Analyst Notes: - CVE Program Container: - CISA A
be used. The identifier of this vulnerability is VDB-260616. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.260616 - https://vuldb.com/?ctiid.260616 - https://vuldb.com/?submit.316302 - https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20Authentication%20Bypass.md
CVE ID: CVE-2024-3770 State: PUBLISHED Published: 2024-04-15T05:00:06.903Z Last Updated: 2024-08-01T20:20:02.059Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Student Record System Problem Types: CWE-89 Description: A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage-courses.php?del=1. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260617 was assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. The identifier VDB-260617 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260617 - https://vuldb.com/?ctiid.260617 - https://vuldb.com/?submit.316305 - https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20SQL%20Injection%20-%203.md
CVE ID: CVE-2024-3771 State: PUBLISHED Published: 2024-04-15T05:31:05.322Z Last Updated: 2024-08-01T20:20:01.866Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Student Record System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this issue is some unknown functionality of the file /edit-subject.php. The manipulation of the argument sub1/sub2/sub3/sub4/udate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-260618 is the identifier assigned to this vulnerability. Additional Analyst Notes:
ed to the public and may be used. VDB-260618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260618 - https://vuldb.com/?ctiid.260618 - https://vuldb.com/?submit.316306 - https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20SQL%20Injection%20-%204.md
CVE ID: CVE-2024-3772 State: PUBLISHED Published: 2024-04-15T01:42:07.888Z Last Updated: 2025-02-13T17:53:00.106Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Pydantic Products: Pydantic Problem Types: CWE-1333 Description: Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pydantic/pydantic/pull/7360 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6JBZLMSH4GAZOVBMT2JUO2LXHY7M2ALI/
CVE ID: CVE-2024-3774 State: PUBLISHED Published: 2024-04-15T02:14:39.724Z Last Updated: 2024-10-18T15:44:24.362Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: aEnrich Technology Products: a+HRD Problem Types: CWE-306, CWE-497 Description: aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing attackers to modify this parameter to access certain sensitive system configuration values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7724-c28d3-1.html
CVE ID: CVE-2024-3775 State: PUBLISHED Published: 2024-04-15T02:41:18.782Z Last Updated: 2024-08-01T20:20:01.574Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: aEnrich Technology Products: a+HRD Problem Types: CWE-88 Description: aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user input. This allows attackers to pass arbitrary arguments to youtube-dl.exe, leading to the download of partial unauthorized files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7726-e5f70-1.html
CVE ID: CVE-2024-3776 State: PUBLISHED Published: 2024-04-15T02:58:41.818Z Last Updated: 2024-08-01T20:20:02.489Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Netvision Products: airPASS Problem Types: CWE-79 Description: The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7730-584e3-1.html
CVE ID: CVE-2024-3777 State: PUBLISHED Published: 2024-04-15T03:26:27.359Z Last Updated: 2024-10-14T06:18:27.562Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ai3 Products: QbiBot Problem Types: CWE-306 Description: The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7732-9a54e-1.html
CVE ID: CVE-2024-3778 State: PUBLISHED Published: 2024-04-15T03:41:00.113Z Last Updated: 2024-08-01T20:20:01.586Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ai3 Products: QbiBot Problem Types: CWE-434 Description: The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7732-9a54e-1.html
CVE ID: CVE-2024-3779 State: PUBLISHED Published: 2024-07-16T08:17:59.962Z Last Updated: 2024-08-01T20:20:01.654Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: ESET s.r.o Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server Problem Types: CWE-276 Description: Denial of service vulnerability present shortly after product installation or upgrade, potentially allo
276 Description: Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.eset.com/en/ca8688
CVE ID: CVE-2024-3780 State: PUBLISHED Published: 2024-04-15T11:20:26.263Z Last Updated: 2024-09-03T17:50:42.001Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Technicolor Products: CGA2121 Problem Types: CWE-200 Description: A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerability allows a local attacker to obtain sensitive information stored on the device such as wifi network's SSID and their respective passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/information-exposure-vulnerability-te
ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/information-exposure-vulnerability-technicolor-cga2121
CVE ID: CVE-2024-3781 State: PUBLISHED Published: 2024-04-15T14:03:05.622Z Last Updated: 2024-08-01T20:20:01.831Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WBSAirback Products: White Bear Solutions Problem Types: CWE-78 Description: Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory integration allows the intended command to be modified when sent to a downstream component in WBSAirback 21.02.04. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-s
ainer: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3782 State: PUBLISHED Published: 2024-04-15T14:04:18.900Z Last Updated: 2024-08-01T20:20:01.745Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: WBSAirback Products: White Bear Solutions Problem Types: CWE-352 Description: Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3783 State: PUBLISHED Published: 2024-04-15T14:05:21.634Z Last Updated: 2024-08-01T20:20:02.060Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: WBSAirback Products: White Bear Solutions Problem Types: CWE-22 Description: The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low privileges to download files from the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3784 State: PUBLISHED Published: 2024-04-15T14:07:12.790Z Last Updated: 2024-11-01T19:21:19.011Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: WBSAirback Products: White Bear Solutions Problem Types: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page Description: Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 Accounts (/admin/CloudAccounts). Exploitation of this vulnerability could allow a remote user to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3785 State: PUBLISHED Published: 2024-04-15T14:07:37.552Z Last Updated: 2024-10-31T13:39:52.851Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: WBSAirback Products: White Bear Solutions Problem Types: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page Description: Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Device NAS shared section (/admin/DeviceNAS). Exploitation of this vulnerability could allow a remote user to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/
y code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3786 State: PUBLISHED Published: 2024-04-15T14:07:54.345Z Last Updated: 2024-11-06T15:06:33.522Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: WBSAirback Products: White Bear Solutions Problem Types: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page Description: Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Device Synchronizations (/admin/DeviceReplication). Exploitation of this vulnerability could allow a remote user to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.inci
bitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3787 State: PUBLISHED Published: 2024-04-15T14:08:05.794Z Last Updated: 2025-03-27T20:11:03.252Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: WBSAirback Products: White Bear Solutions Problem Types: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page Description: Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 disks (/admin/DeviceS3). Exploitation of this vulnerability could allow a remote user to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/not
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions
CVE ID: CVE-2024-3788 State: PUBLISHED Published: 2024-04-15T14:08:16.956Z Last Updated: 2024-11-21T16:09:40.306Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: WBSAirback Products: White Bear Solutions Problem Types: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page Description: Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through License (/admin/CDPUsers). Exploitation of this vulnerability could allow a remote user to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/noti
CVE ID: CVE-2024-3789 State: PUBLISHED Published: 2024-04-15T14:09:26.904Z Last Updated: 2024-09-03T18:08:43.488Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: WBSAirback Products: White Bear Solutions Problem Types: CWE-400 Description: Uncontrolled resource consumption vulnerability in White Bear Solutions WBSAirback, version 21.02.04. This vulnerability could allow an attacker to send multiple command injection payloads to influence the amount of resources consumed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-so