Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1860 - https://access.redhat.com/errata/RHSA-2024:1861 - https://access.redhat.com/errata/RHSA-2024:1862 - https://access.redhat.com/errata/RHSA-2024:1864 - https://access.redhat.com/errata/RHSA-2024:1866 - https://access.redhat.com/errata/RHSA-2024:1867 - https://access.redhat.com/errata/RHSA-2024:1868 - https://access.redhat.com/errata/RHSA-2024:2945 - https://access.redhat.co
s://access.redhat.com/errata/RHSA-2024:1868 - https://access.redhat.com/errata/RHSA-2024:2945 - https://access.redhat.com/errata/RHSA-2024:4057 - https://access.redhat.com/security/cve/CVE-2024-1249 - https://bugzilla.redhat.com/show_bug.cgi?id=2262918
CVE ID: CVE-2024-1250 State: PUBLISHED Published: 2024-02-12T20:47:44.401Z Last Updated: 2025-05-07T20:54:41.881Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-268 Description: An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with manage_group_access_tokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/439175
CVE ID: CVE-2024-1251 State: PUBLISHED Published: 2024-02-06T16:00:06.750Z Last Updated: 2024-08-19T20:13:25.946Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /general/email/outbox/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-252990 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
signed to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252990 - https://vuldb.com/?ctiid.252990 - https://github.com/rockersiyuan/CVE/blob/main/TongDa%20Sql%20inject.md
CVE ID: CVE-2024-1252 State: PUBLISHED Published: 2024-02-06T16:31:03.742Z Last Updated: 2025-06-17T21:29:27.590Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/ask_duty/delete.php. The manipulation of the argument ASK_DUTY_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The
sed. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252991. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252991 - https://vuldb.com/?ctiid.252991 - https://github.com/b51s77/cve/blob/main/sql.md
CVE ID: CVE-2024-1253 State: PUBLISHED Published: 2024-02-06T17:00:06.968Z Last Updated: 2025-06-10T16:12:11.052Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Byzoro Products: Smart S40 Management Platform Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnera
k may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252992. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252992 - https://vuldb.com/?ctiid.252992 - https://vuldb.com/?submit.273438 - https://github.com/b51s77/cve/blob/main/upload.md
CVE ID: CVE-2024-1254 State: PUBLISHED Published: 2024-02-06T18:31:04.295Z Last Updated: 2024-08-22T19:10:58.085Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Byzoro Products: Smart S20 Management Platform Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Byzoro Smart S20 Management Platform up to 20231120. This affects an unknown part of the file /sysmanage/sysmanageajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252993 was assigned to this vulnerability. NOTE: The vendor was co
sed to the public and may be used. The identifier VDB-252993 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252993 - https://vuldb.com/?ctiid.252993 - https://vuldb.com/?submit.274042 - https://github.com/rockersiyuan/CVE/blob/main/Smart%20S20.md
CVE ID: CVE-2024-1255 State: PUBLISHED Published: 2024-02-06T19:00:06.127Z Last Updated: 2024-08-27T16:13:25.242Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: sepidz Products: SepidzDigitalMenu Problem Types: CWE-200 Description: A vulnerability has been found in sepidz SepidzDigitalMenu up to 7.1.0728.1 and classified as problematic. This vulnerability affects unknown code of the file /Waiters. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252994 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this discl
used. VDB-252994 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252994 - https://vuldb.com/?ctiid.252994
CVE ID: CVE-2024-1256 State: PUBLISHED Published: 2024-02-06T19:31:04.009Z Last Updated: 2024-08-01T18:33:25.294Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Jspxcms Problem Types: CWE-79 Description: A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filter_text.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252995. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vu
lity is VDB-252995. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252995 - https://vuldb.com/?ctiid.252995 - https://github.com/sweatxi/BugHub/blob/main/filter_txet_do.pdf
CVE ID: CVE-2024-1257 State: PUBLISHED Published: 2024-02-06T20:00:06.539Z Last Updated: 2025-06-17T21:29:27.730Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Jspxcms Problem Types: CWE-79 Description: A vulnerability was found in Jspxcms 10.2.0. It has been classified as problematic. Affected is an unknown function of the file /ext/collect/find_text.do. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252996. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com
VDB-252996. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252996 - https://vuldb.com/?ctiid.252996 - https://github.com/sweatxi/BugHub/blob/main/find_text_do.pdf
CVE ID: CVE-2024-1258 State: PUBLISHED Published: 2024-02-06T20:31:03.761Z Last Updated: 2024-08-19T20:24:12.690Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Juanpao Products: JPShop Problem Types: CWE-321 Description: A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file api/config/params.php of the component API. The manipulation of the argument JWT_KEY_ADMIN leads to use of hard-coded cryptographic key . The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be
ttack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-252997 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252997 - https://vuldb.com/?ctiid.252997 - https://vuldb.com/?submit.277418 - https://note.zhaoj.in/share/XblX1My7jNV7
CVE ID: CVE-2024-1259 State: PUBLISHED Published: 2024-02-06T21:00:07.287Z Last Updated: 2024-12-18T17:56:39.881Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Juanpao Products: JPShop Problem Types: CWE-434 Description: A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/controllers/admin/app/AppController.php of the component API. The manipulation of the argument app_pic_url leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252998 is the identifier assigned to this vulnerability. Addition
has been disclosed to the public and may be used. VDB-252998 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252998 - https://vuldb.com/?ctiid.252998 - https://note.zhaoj.in/share/rCt6PpJxBvuI
CVE ID: CVE-2024-1260 State: PUBLISHED Published: 2024-02-06T21:31:03.764Z Last Updated: 2025-05-07T20:06:35.451Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Juanpao Products: JPShop Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252999. Additional Anal
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252999. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252999 - https://vuldb.com/?ctiid.252999 - https://note.zhaoj.in/share/H73DuWdyifaI
CVE ID: CVE-2024-1261 State: PUBLISHED Published: 2024-02-06T22:00:05.519Z Last Updated: 2025-05-08T18:52:24.825Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Juanpao Products: JPShop Problem Types: CWE-434 Description: A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function actionIndex of the file /api/controllers/merchant/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253000. Additional Analyst Notes
en disclosed to the public and may be used. The identifier of this vulnerability is VDB-253000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.253000 - https://vuldb.com/?ctiid.253000 - https://note.zhaoj.in/share/v2JpHJngvw7E
CVE ID: CVE-2024-1262 State: PUBLISHED Published: 2024-02-06T22:31:03.974Z Last Updated: 2024-08-22T15:57:08.449Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Juanpao Products: JPShop Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253001 was assigned to this vulnerability
e exploit has been disclosed to the public and may be used. The identifier VDB-253001 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.253001 - https://vuldb.com/?ctiid.253001 - https://note.zhaoj.in/share/C1btykKlahBD
CVE ID: CVE-2024-1263 State: PUBLISHED Published: 2024-02-06T23:00:07.845Z Last Updated: 2024-08-19T20:11:22.610Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Juanpao Products: JPShop Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function actionUpdate of the file /api/controllers/merchant/shop/PosterController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-253002 is the identifier assigned to this vulnerability. Additio
t has been disclosed to the public and may be used. VDB-253002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.253002 - https://vuldb.com/?ctiid.253002 - https://note.zhaoj.in/share/Lkrp36sa1EHO
CVE ID: CVE-2024-1264 State: PUBLISHED Published: 2024-02-06T23:31:04.547Z Last Updated: 2024-08-01T18:33:25.487Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Juanpao Products: JPShop Problem Types: CWE-434 Description: A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253003. Additional Analyst Note
ed to the public and may be used. The associated identifier of this vulnerability is VDB-253003. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.253003 - https://vuldb.com/?ctiid.253003 - https://note.zhaoj.in/share/f8b2IX7GsZS5
CVE ID: CVE-2024-1265 State: PUBLISHED Published: 2024-02-07T00:00:09.086Z Last Updated: 2024-08-01T18:33:25.172Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: CodeAstro Products: University Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Affected is an unknown function of the file /att_add.php of the component Attendance Management. The manipulation of the argument Student Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253008. Add
y. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253008. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.253008 - https://vuldb.com/?ctiid.253008 - https://drive.google.com/file/d/1AnzEcwDC0AP56i65zCqekFAeYQY6skBH/view?usp=sharing
CVE ID: CVE-2024-1266 State: PUBLISHED Published: 2024-02-07T00:31:04.114Z Last Updated: 2024-08-01T18:33:25.184Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: CodeAstro Products: University Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /st_reg.php of the component Student Registration Form. The manipulation of the argument Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253009 was assigned to th
hed remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253009 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.253009 - https://vuldb.com/?ctiid.253009 - https://drive.google.com/file/d/16a9lQqUFBICw-Hhbe9bT5sSB7qwZjMwA/view?usp=sharing
CVE ID: CVE-2024-1267 State: PUBLISHED Published: 2024-02-07T01:00:08.559Z Last Updated: 2025-04-24T15:58:53.648Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: CodeAstro Products: Restaurant POS System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file create_account.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-253010 is the identifier assigned to this vulnerability. Additional Analyst Not
losed to the public and may be used. VDB-253010 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.253010 - https://vuldb.com/?ctiid.253010 - https://drive.google.com/drive/folders/18N_20KuGPjrBbvOMSfbvBIc1sMKyycH3?usp=sharing
CVE ID: CVE-2024-1268 State: PUBLISHED Published: 2024-02-07T01:31:04.229Z Last Updated: 2024-08-01T18:33:25.354Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: Restaurant POS System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file update_product.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253011. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
ciated identifier of this vulnerability is VDB-253011. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.253011 - https://vuldb.com/?ctiid.253011 - https://drive.google.com/drive/folders/1utXNnlH67FjUaBsYhw1cQWyZsO9MLy1i?usp=sharing
CVE ID: CVE-2024-1269 State: PUBLISHED Published: 2024-02-07T02:00:05.782Z Last Updated: 2025-06-10T16:15:09.978Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Product Management System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument supplier_name/supplier_contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253012. Additional Anal
it has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253012. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.253012 - https://vuldb.com/?ctiid.253012 - https://github.com/PrecursorYork/Product-Management-System-Using-PHP-and-MySQL-Reflected-XSS-POC/blob/main/README.md
CVE ID: CVE-2024-1271 State: REJECTED Published: N/A Last Updated: 2024-11-19T19:33:35.650Z Description: No description available.
CVE ID: CVE-2024-1272 State: PUBLISHED Published: 2024-06-05T08:28:39.699Z Last Updated: 2025-09-12T06:34:11.641Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: TNB Mobile Solutions Products: Cockpit Software Problem Types: CWE-540 Description: Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allows Retrieve Embedded Sensitive Data.This issue affects Cockpit Software: before v0.251.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-0601
CVE ID: CVE-2024-1273 State: PUBLISHED Published: 2024-03-11T17:56:05.406Z Last Updated: 2024-08-28T15:23:30.948Z Vendors: Unknown Products: Starbox Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9784d7c8-e3aa-42af-ace8-5b2b37ebc9cb/
CVE ID: CVE-2024-1274 State: PUBLISHED Published: 2024-04-02T05:15:41.805Z Last Updated: 2024-08-27T15:28:12.101Z Vendors: Unknown Products: My Calendar Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks (depending on the permissions set by the admin) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/91dba45b-9930-4bfb-a7bf-903c46864e9f/
CVE ID: CVE-2024-1275 State: PUBLISHED Published: 2024-05-31T17:23:19.207Z Last Updated: 2024-08-01T18:33:25.355Z Vendors: Baxter Products: Welch Allyn Connex Spot Monitor Problem Types: CWE-1394 Description: Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-151-02