Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-26465 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-11-25T18:49:09.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DOM based cross-site scripting (XSS) vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before commit ef22ad7 allows attackers to execute arbitrary Javascript via sending a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/cd80/89527424f733b2b82de876e02d163150
CVE ID: CVE-2024-26466 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-10-30T19:48:24.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DOM based cross-site scripting (XSS) vulnerability in the component /dom/ranges/Range-test-iframe.html of web-platform-tests/wpt before commit 938e843 allows attackers to execute arbitrary Javascript via sending a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/cd80/8e41a17bc0c2113f6347581cec726d11
CVE ID: CVE-2024-26467 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-10-31T15:05:40.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/cd80/50463b0e62067ec861b7006cbf46b068
CVE ID: CVE-2024-26468 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-11-06T14:45:36.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DOM based cross-site scripting (XSS) vulnerability in the component index.html of jstrieb/urlpages before commit 035b647 allows attackers to execute arbitrary Javascript via sending a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/cd80/87b41cf58ba04564d55f4a26152bf0a9
CVE ID: CVE-2024-26469 State: PUBLISHED Published: 2024-03-03T00:00:00 Last Updated: 2024-12-04T21:04:57.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service (DoS) and escalate privileges via the url parameter in the postProcess() method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-918.md
CVE ID: CVE-2024-26470 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-28T15:41:54.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nuget.org/packages/FullStackHero.WebAPI.Boilerplate - https://github.com/fullstackhero/dotnet-webapi-boilerplate - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2024-26470
CVE ID: CVE-2024-26471 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-27T20:03:00.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zhimengzhe/iBarn - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2024-26471
CVE ID: CVE-2024-26472 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-10-31T15:20:51.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' or 'validator' parameters of 'create-new-pwd.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/msaad1999/KLiK-SocialMediaWebsite/ - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2024-26472
CVE ID: CVE-2024-26473 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-11-06T15:36:36.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows attackers to inject malicious JavaScript into the web browser of a victim via the poll parameter in poll.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/msaad1999/KLiK-SocialMediaWebsite/ - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2024-26473
CVE ID: CVE-2024-26475 State: PUBLISHED Published: 2024-03-14T00:00:00.000Z Last Updated: 2025-03-27T20:00:44.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/TronciuVlad/CVE-2024-26475
CVE ID: CVE-2024-26476 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-12T18:01:15.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mpdf/mpdf/issues/867 - https://github.com/c4v4r0n/Research/blob/main/openemr_BlindSSRF/README.md
CVE ID: CVE-2024-26481 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-14T19:53:55.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kirby CMS v4.1.0 was discovered to contain a reflected self-XSS vulnerability via the URL parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shrouded-trowel-50c.notion.site/Kirby-CMS-4-1-0-Self-Cross-Site-Scripting-d877183d20af49f8a8f58554bc06d51c?pvs=4 - https://github.com/getkirby/kirby/security/advisories/GHSA-57f2-8p89-66x6
CVE ID: CVE-2024-26482 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-29T18:01:13.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0. NOTE: the vendor disputes the significance of this report because some HTML formatting (such as with an H1 element) is allowed, but there is backend sanitization such that the reporter's mentioned "injecting malicious scripts" would not occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shrouded-trowel-50c.notion.site/Kirby-CMS-4-1-0-HTML-Injection-19ca19686d0a4533ab4b0c53fc977eef
t: References: - https://shrouded-trowel-50c.notion.site/Kirby-CMS-4-1-0-HTML-Injection-19ca19686d0a4533ab4b0c53fc977eef?pvs=4
CVE ID: CVE-2024-26483 State: PUBLISHED Published: 2024-02-22T00:00:00.000Z Last Updated: 2025-04-22T16:22:51.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://shrouded-trowel-50c.notion.site/Kirby-CMS-4-1-0-Unrestricted-File-Upload-dc60ce3132f04442b73f2dba2631fae0?pvs=4 - https://github.com/getkirby/kirby/security/advisories/GHSA-xrvh-rvc4-5m43
CVE ID: CVE-2024-26484 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-26T18:57:24.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Edit Content Layout module of Kirby CMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link field. NOTE: the vendor's position is that this issue did not affect any version of Kirby CMS. The only effect was on the trykirby.com demo site, which is not customer-controlled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shrouded-trowel-50c.notion.site/Kirby-CMS-4-1-
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shrouded-trowel-50c.notion.site/Kirby-CMS-4-1-0-Stored-Cross-Site-Scripting-153b4eb557a2488188ad8167734ca226?pvs=4 - https://github.com/getkirby/demokit/commit/d4877a6715cbf6517cb04ff57798851ffbd0cd7e
CVE ID: CVE-2024-26489 State: PUBLISHED Published: 2024-02-22T00:00:00.000Z Last Updated: 2025-03-13T17:32:29.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2111715623/cms/blob/main/3.md
CVE ID: CVE-2024-26490 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-10-31T15:15:53.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/2111715623/cms/blob/main/2.md
CVE ID: CVE-2024-26491 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-28T19:16:01.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2111715623/cms/blob/main/1.md
CVE ID: CVE-2024-26492 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-11-18T20:24:06.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50660 - https://packetstormsecurity.com/files/165555/Online-Diagnostic-Lab-Management-System-1.0-Missing-Access-Control.html
CVE ID: CVE-2024-26495 State: PUBLISHED Published: 2024-04-03T00:00:00.000Z Last Updated: 2025-03-18T19:59:31.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/friendica/friendica/issues/13884
CVE ID: CVE-2024-26503 State: PUBLISHED Published: 2024-03-14T00:00:00 Last Updated: 2024-08-28T15:03:36.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.less-secure.com/2024/03/open-eclass-cve-2024-26503-unrestricted.html
CVE ID: CVE-2024-26504 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T00:07:19.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Wifire Hotspot v.4.5.3 allows a local attacker to execute arbitrary code via a crafted payload to the dst parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/601.html - https://portswigger.net/kb/issues/00500100_open-redirection-reflected - https://wifire.me/en/hotspot - https://tomiodarim.io/posts/cve-2024-26504/
CVE ID: CVE-2024-26507 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-08-02T00:07:19.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit v.7.00.6700 and before allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://belong2yourself.github.io/vulnerabilities/docs/AIDA/Elevation-of-Privileges/readme/
CVE ID: CVE-2024-26517 State: PUBLISHED Published: 2024-05-08T21:03:19.149Z Last Updated: 2025-02-13T15:47:14.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/16877/school-task-manager-using-php-source-code.html - https://github.com/unrealjbr/CVE-2024-26517
CVE ID: CVE-2024-26519 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-23T16:17:31.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the /www/cgi-bin/nas.cgi component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cybercx.com.au/blog/zero-day-rce-in-netcomm-ntc-221-industrial-iot-m2m-lte-4g-router/
CVE ID: CVE-2024-26520 State: PUBLISHED Published: 2024-07-26T00:00:00 Last Updated: 2024-08-02T00:07:19.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://idssgmcc.github.io/aran.github.io/2.html
CVE ID: CVE-2024-26521 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-08-27T20:13:50.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the english.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/capture0x/Phoenix - https://github.com/hackervegas001/CVE-2024-26521
CVE ID: CVE-2024-26529 State: PUBLISHED Published: 2024-03-13T00:00:00.000Z Last Updated: 2025-03-14T16:04:20.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of src/mms/iso_mms/server/mms_named_variable_list_service.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mz-automation/libiec61850/issues/492 - https://github.com/mz-automation/libiec61850/issues/495
CVE ID: CVE-2024-26540 State: PUBLISHED Published: 2024-03-15T00:00:00 Last Updated: 2024-08-27T17:41:34.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GreycLab/CImg/issues/403
CVE ID: CVE-2024-26542 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-15T20:39:55.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a crafted payload to the Groups Display name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/c0d3x27/CVEs/blob/main/CVE-2024-26542/README.md
CVE ID: CVE-2024-26548 State: PUBLISHED Published: 2024-02-29T00:00:00.000Z Last Updated: 2025-03-13T13:49:07.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cwh031600/vivotek/blob/main/vivotek-FD8166A-uploadfile-dos/vivotek-FD8166A-uploadfile-analysis.md
CVE ID: CVE-2024-26557 State: PUBLISHED Published: 2024-03-22T00:00:00.000Z Last Updated: 2025-03-27T14:16:23.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/18
CVE ID: CVE-2024-26559 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-15T19:59:26.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in uverif v.2.0 allows a remote attacker to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://syst1m.cn/2024/01/22/U%E9%AA%8C%E8%AF%81%E7%BD%91%E7%BB%9C%E7%94%A8%E6%88%B7%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E/
CVE ID: CVE-2024-26566 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-06T14:00:36.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://cute.com - https://github.com/GZLDL/CVE/tree/main/Cute%20Http%20File%20Server%20JWT - https://github.com/GZLDL/CVE/blob/main/CVE-2024-26566/CVE-2024-26566%20English.md
CVE ID: CVE-2024-26574 State: PUBLISHED Published: 2024-04-08T00:00:00 Last Updated: 2024-10-28T13:57:27.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://filmora.wondershare.com/ - https://github.com/Alaatk/CVE-2024-26574/tree/main
CVE ID: CVE-2024-26577 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-05T19:53:04.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application hang) via a spoofed UDP packet containing at least 10 digits in JSON data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/guusec/VSeeDoS
CVE ID: CVE-2024-26578 State: PUBLISHED Published: 2024-02-22T09:28:15.274Z Last Updated: 2025-03-20T19:16:28.646Z Vendors: Apache Software Foundation Products: Apache Answer Problem Types: CWE-362 Description: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly submit multiple registrations using scripts, it can result in the creation of multiple user accounts simultaneously with the same name. Users are recommended to upgrade to version [1.2.5], whic
n of multiple user accounts simultaneously with the same name. Users are recommended to upgrade to version [1.2.5], which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/ko0ksnznt2484lxt0zts2ygr82ldkhcb - http://www.openwall.com/lists/oss-security/2024/02/22/3
CVE ID: CVE-2024-26579 State: PUBLISHED Published: 2024-05-08T15:06:23.829Z Last Updated: 2025-03-28T18:52:24.649Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick [1], [2] to solve it. [1] https://github.com/apache/inlong/pull/9694 [2] https://github.com/apache/inlong/pull/9707 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/d2
tional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/d2hndtvh6bll4pkl91o2oqxyynhr54k3 - https://github.com/advisories/GHSA-fgh3-pwmp-3qw3 - http://www.openwall.com/lists/oss-security/2024/05/09/2
CVE ID: CVE-2024-26580 State: PUBLISHED Published: 2024-03-06T12:07:28.140Z Last Updated: 2025-02-13T17:41:17.092Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.10.0, the attackers can use the specific payload to read from an arbitrary file. Users are advised to upgrade to Apache InLong's 1.11.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/9673 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/xvomf66l58x4dmoyzojflvx52gkzcdmk
DP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/xvomf66l58x4dmoyzojflvx52gkzcdmk - http://www.openwall.com/lists/oss-security/2024/03/06/1
CVE ID: CVE-2024-26581 State: PUBLISHED Published: 2024-02-20T12:52:57.398Z Last Updated: 2025-10-01T19:10:25.971Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb - https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8 - https://gi