Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-29316 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-11-15T20:29:31.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group via "isadmin":true. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nodebb.org/bounty/ - https://medium.com/%40krityamkarma858041/broken-access-control-nodebb-v3-6-7-eebc59c24deb
CVE ID: CVE-2024-29318 State: PUBLISHED Published: 2024-07-05T00:00:00.000Z Last Updated: 2025-03-13T17:56:22.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29318
CVE ID: CVE-2024-29319 State: PUBLISHED Published: 2024-07-05T00:00:00 Last Updated: 2024-08-02T01:10:54.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-29319
CVE ID: CVE-2024-29320 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T01:10:54.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ellite/Wallos - https://github.com/ellite/Wallos/releases/tag/v1.15.3 - https://injasec.com/open-source-software-oss/cve-2024-29320-sql-injection-in-wallos/
CVE ID: CVE-2024-29338 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-26T13:42:56.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/PWwwww123/cms/blob/main/1.md
CVE ID: CVE-2024-29366 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-02T01:10:54.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/20Yiju/DLink/blob/master/DIR-845L/CI.md
CVE ID: CVE-2024-29368 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-11-05T17:07:48.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file handling module of moziloCMS v2.0 allows attackers to bypass extension restrictions via file renaming, potentially leading to unauthorized file execution or storage of malicious content. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/becpn/mozilocms
CVE ID: CVE-2024-29374 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-15T20:08:18.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/fir3storm/f9c7f3ec1a6496498517ed216d2640b2
CVE ID: CVE-2024-29375 State: PUBLISHED Published: 2024-04-04T00:00:00.000Z Last Updated: 2025-03-28T20:44:23.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to the Project Description, Identifiers, Custom Triangle Name (inside Input Triangles) and Yield Curve Name parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ismailcemunver/CVE-2024-29375
CVE ID: CVE-2024-29376 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-11-22T14:28:29.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/r2tunes/Reports/blob/main/Sylius.md
CVE ID: CVE-2024-29384 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T01:10:55.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information via the content.js and parseCSSRules functions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mlgualtieri/CSS-Exfil-Protection/issues/41 - https://github.com/randshell/vulnerability-research/tree/main/CVE-2024-29384
CVE ID: CVE-2024-29385 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-23T19:31:06.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/songah119/Report/blob/main/CI-1.md
CVE ID: CVE-2024-29386 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-19T19:21:03.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.anas-cherni.me/2024/04/04/cve-2024-29386/
CVE ID: CVE-2024-29387 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-16T17:35:40.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.anas-cherni.me/2024/04/04/cve-2024-29387/
CVE ID: CVE-2024-29390 State: PUBLISHED Published: 2024-06-20T00:00:00.000Z Last Updated: 2025-03-27T19:07:43.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done by injecting specially crafted SQL queries that make the database perform time-consuming operations, thereby confirming the presence of the SQL injection vulnerability based on the delay in the server's response. Additional Anal
confirming the presence of the SQL injection vulnerability based on the delay in the server's response. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CyberSentryX/CVE_Hunting/blob/main/CVE-2024-29390/README.md
CVE ID: CVE-2024-29392 State: PUBLISHED Published: 2024-05-22T15:58:05.308Z Last Updated: 2025-02-13T15:47:45.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/phulelouch/48ee63a7c46078574f3b3dc9a739052c
CVE ID: CVE-2024-29399 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-08-28T17:58:19.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ally-petitt/CVE-2024-29399
CVE ID: CVE-2024-29400 State: PUBLISHED Published: 2024-04-12T00:00:00 Last Updated: 2024-08-02T01:10:55.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Fr1ezy/RuoYi_info
CVE ID: CVE-2024-29401 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-05T18:39:16.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/menghaining/PoC/blob/main/xzs-mysql/xzs-mysql%20--%20PoC.md
CVE ID: CVE-2024-29402 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-11-07T15:14:38.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cskefu/cskefu/issues/781 - https://github.com/cskefu/cskefu/pull/803 - https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
CVE ID: CVE-2024-29404 State: PUBLISHED Published: 2024-12-03T00:00:00 Last Updated: 2024-12-13T13:58:33.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export parameter of the Chroma Effects function in the Profiles component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/blog/2022/3/16/abusing-arbitrary-file-deletes-to-escalate-privilege-and-other-great-tricks - https://www.razer.com/synapse-3 - https://github.com/mansk1es/CVE-2024-29404_Razer
CVE ID: CVE-2024-29409 State: PUBLISHED Published: 2025-03-14T00:00:00.000Z Last Updated: 2025-03-17T18:33:24.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nestjs/nest/issues/13311#issuecomment-1993839495 - https://gist.github.com/aydinnyunus/801342361584d1491c67a820a714f53f
CVE ID: CVE-2024-29413 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-27T19:51:47.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RealestName/Vulnerability-Research/tree/main/CVE-2024-29413
CVE ID: CVE-2024-29415 State: PUBLISHED Published: 2024-05-27T20:04:14.756Z Last Updated: 2025-02-13T15:47:46.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/indutny/node-ip/pull/143 - https://github.com/indutny/node-ip/pull/144 - https://github.com/indutny/node-ip/issues/150
CVE ID: CVE-2024-29417 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T01:10:55.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blog.pridesec.com.br/en/horacius-unauthenticated-privilege-escalation/
CVE ID: CVE-2024-29419 State: PUBLISHED Published: 2024-03-20T00:00:00.000Z Last Updated: 2025-03-27T20:33:26.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_6_Wireless_settings/XSS.md
CVE ID: CVE-2024-29421 State: PUBLISHED Published: 2024-05-22T17:27:17.361Z Last Updated: 2025-02-13T15:47:46.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SpikeReply/advisories/blob/530dbd7ce68600a22c47dd1bcbe360220feda1d9/cve/xmedcon/cve-2024-29421.md
CVE ID: CVE-2024-29432 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-09-04T16:04:34.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Raybye/alldata-bug/blob/main/alldata.md - https://gist.github.com/Raybye/4b377eb06b5f9c324f090d39a0d25c2b
CVE ID: CVE-2024-29433 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-09-04T15:57:51.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Raybye/496a871c66715a531750d58651d2b5c4
CVE ID: CVE-2024-29434 State: PUBLISHED Published: 2024-04-02T00:00:00.000Z Last Updated: 2025-03-28T23:38:55.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Raybye/alldata-bug/blob/main/alldata.md - https://gist.github.com/Raybye/6cf4aa273e12a220056e38bec764d42d
CVE ID: CVE-2024-29435 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-09-04T16:02:47.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Raybye/ea3a46adc5ea51e659c42218f05153fa
CVE ID: CVE-2024-29439 State: REJECTED Published: 2024-04-10T00:00:00 Last Updated: 2024-05-27T00:14:02.671Z Description: No description available.
CVE ID: CVE-2024-29440 State: REJECTED Published: 2024-03-25T00:00:00 Last Updated: 2024-05-27T00:14:02.864Z Description: No description available.
CVE ID: CVE-2024-29441 State: REJECTED Published: 2024-04-10T00:00:00 Last Updated: 2024-05-27T00:14:03.049Z Description: No description available.
CVE ID: CVE-2024-29442 State: REJECTED Published: 2024-03-25T00:00:00 Last Updated: 2024-05-27T00:14:03.237Z Description: No description available.
CVE ID: CVE-2024-29443 State: REJECTED Published: 2024-04-10T00:00:00 Last Updated: 2024-05-27T00:14:03.404Z Description: No description available.
CVE ID: CVE-2024-29444 State: REJECTED Published: 2024-04-10T00:00:00 Last Updated: 2024-05-27T00:14:03.579Z Description: No description available.
CVE ID: CVE-2024-29445 State: REJECTED Published: 2024-04-10T00:00:00 Last Updated: 2024-05-27T00:14:03.761Z Description: No description available.
CVE ID: CVE-2024-29447 State: REJECTED Published: 2024-04-10T00:00:00 Last Updated: 2024-05-27T00:14:03.921Z Description: No description available.
CVE ID: CVE-2024-29448 State: REJECTED Published: 2024-04-11T00:00:00 Last Updated: 2024-05-27T00:14:04.104Z Description: No description available.
CVE ID: CVE-2024-29449 State: REJECTED Published: 2024-04-11T00:00:00 Last Updated: 2024-05-27T00:14:04.262Z Description: No description available.
CVE ID: CVE-2024-29450 State: REJECTED Published: 2024-04-11T00:00:00 Last Updated: 2024-05-27T00:14:04.419Z Description: No description available.
CVE ID: CVE-2024-29452 State: REJECTED Published: 2024-04-11T00:00:00 Last Updated: 2024-05-27T00:14:04.592Z Description: No description available.
CVE ID: CVE-2024-29454 State: REJECTED Published: 2024-04-11T00:00:00 Last Updated: 2024-05-27T00:14:04.754Z Description: No description available.
CVE ID: CVE-2024-29455 State: REJECTED Published: 2024-04-11T00:00:00 Last Updated: 2024-05-27T00:14:04.903Z Description: No description available.
CVE ID: CVE-2024-29460 State: PUBLISHED Published: 2024-04-10T00:00:00 Last Updated: 2024-08-02T01:10:55.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Drone-Lab/PX4-Autopilot/blob/report-can%27t-finish-mission/report-can%27t-finish-mission.md
CVE ID: CVE-2024-29461 State: PUBLISHED Published: 2024-04-12T00:00:00.000Z Last Updated: 2025-03-17T15:19:58.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial of service via the datapath id component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/floodlight/floodlight/issues/867 - https://gist.github.com/ErodedElk/399a226905c574efe705e3bff77955e3
CVE ID: CVE-2024-29466 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-20T19:23:51.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.java component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Xiqinger/b3cb51f390d408c3c66c66e645ba5ac0
CVE ID: CVE-2024-29469 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-28T20:20:53.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE ID: CVE-2024-29470 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-10-27T21:59:31.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}}/links. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE ID: CVE-2024-29471 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-15T19:41:31.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE ID: CVE-2024-29472 State: PUBLISHED Published: 2024-03-20T00:00:00.000Z Last Updated: 2025-03-13T17:58:02.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE ID: CVE-2024-29473 State: PUBLISHED Published: 2024-03-20T00:00:00.000Z Last Updated: 2025-03-28T17:09:16.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Role Management module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE ID: CVE-2024-29474 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T19:37:14.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE ID: CVE-2024-29477 State: PUBLISHED Published: 2024-04-03T00:00:00.000Z Last Updated: 2025-03-28T20:41:13.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://dolibarr.com - https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md
CVE ID: CVE-2024-29489 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-22T18:55:01.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecma_get_object_type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5101 - https://github.com/jerryscript-project/jerryscript/pull/5129 - https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6 - https://gist.github.com/gandalf4a/9826a897ae1e3c8d1c7e71a1ec71d415
CVE ID: CVE-2024-29499 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-02T01:10:55.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/daddywolf/cms/blob/main/1.md