Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-25035 State: PUBLISHED Published: 2024-12-03T16:43:29.811Z Last Updated: 2024-12-03T19:10:03.459Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Controller Problem Types: CWE-497 Description: IBM Cognos Controller 11.0.0 and 11.0.1 exposes server details that could allow an attacker to obtain information of the application environment to conduct further attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7177220
CVE ID: CVE-2024-25036 State: PUBLISHED Published: 2024-12-03T16:44:55.741Z Last Updated: 2024-12-03T19:09:42.192Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Cognos Controller Problem Types: CWE-288 Description: IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7177220
CVE ID: CVE-2024-25037 State: PUBLISHED Published: 2025-01-07T15:51:46.425Z Last Updated: 2025-01-07T16:55:19.458Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Controller, Cognos Controller Problem Types: CWE-209 Description: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7179163
CVE ID: CVE-2024-25041 State: PUBLISHED Published: 2024-06-28T18:55:55.233Z Last Updated: 2025-11-03T21:53:55.814Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-79 Description: IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Assistant. IBM X-Force ID: 282780. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156941 - https://exc
SA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/282780
CVE ID: CVE-2024-25042 State: PUBLISHED Published: 2024-12-18T16:20:06.155Z Last Updated: 2024-12-18T19:34:34.507Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-79 Description: IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 is potentially vulnerable to Cross Site Scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Explorations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7173592
CVE ID: CVE-2024-25046 State: PUBLISHED Published: 2024-04-03T12:17:45.191Z Last Updated: 2025-02-13T17:40:45.142Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service by an authenticated user using a specially crafted query. IBM X-Force ID: 282953. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145726 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/282953 - https://securi
bm.com/support/pages/node/7145726 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/282953 - https://security.netapp.com/advisory/ntap-20240517-0005/
CVE ID: CVE-2024-25047 State: PUBLISHED Published: 2024-05-02T20:09:21.479Z Last Updated: 2025-02-13T17:40:45.804Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-117 Description: IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28
: References: - https://www.ibm.com/support/pages/node/7149874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/282956 - https://security.netapp.com/advisory/ntap-20240621-0007/
CVE ID: CVE-2024-25048 State: PUBLISHED Published: 2024-04-27T12:07:33.519Z Last Updated: 2024-08-01T23:36:21.564Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: MQ Appliance Problem Types: CWE-122 Description: IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149481 - https://exchange.xforce.ibmcloud.com
E Program Container: References: - https://www.ibm.com/support/pages/node/7149481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283137
CVE ID: CVE-2024-25050 State: PUBLISHED Published: 2024-04-28T12:16:32.538Z Last Updated: 2024-08-01T23:36:21.478Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i, Rational Development Studio for i Problem Types: CWE-427 Description: IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privileges. IBM X-Force ID: 283242. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - h
ges. IBM X-Force ID: 283242. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149672 - https://www.ibm.com/support/pages/node/7149616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283242
CVE ID: CVE-2024-25051 State: PUBLISHED Published: 2025-04-02T14:57:12.391Z Last Updated: 2025-09-01T10:14:53.515Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Jazz Reporting Service Problem Types: CWE-613 Description: IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229760
CVE ID: CVE-2024-25052 State: PUBLISHED Published: 2024-06-13T13:45:31.989Z Last Updated: 2024-08-01T23:36:21.578Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Jazz Reporting Service Problem Types: CWE-256 Description: IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7157232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283363
CVE ID: CVE-2024-25053 State: PUBLISHED Published: 2024-06-28T18:53:48.828Z Last Updated: 2025-11-03T21:53:57.297Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-295 Description: IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364. Additional Analyst Notes: - CISA ADP Vulnrichm
Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283364
CVE ID: CVE-2024-25062 State: PUBLISHED Published: 2024-02-04T00:00:00.000Z Last Updated: 2025-11-03T21:53:58.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.gnome.org/GNOME/libxml2/-/tags - https://gitlab.gnome.org/GNOME/libxml2/-/issues/604
CVE ID: CVE-2024-25063 State: PUBLISHED Published: 2024-03-02T02:54:27.778Z Last Updated: 2025-03-27T15:19:11.168Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Hikvision Products: HikCentral Professional Description: Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-professional/
CVE ID: CVE-2024-25064 State: PUBLISHED Published: 2024-03-02T02:56:19.821Z Last Updated: 2025-03-19T15:53:16.696Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hikvision Products: HikCentral Professional Description: Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-professional/
CVE ID: CVE-2024-25065 State: PUBLISHED Published: 2024-02-28T15:42:50.448Z Last Updated: 2025-02-13T17:40:46.357Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-22, Path traversal allowing authentication bypass. Description: Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://ofbiz.apache.org/release-notes-18.12.12.html - https://issues.apache.org/jira/browse/OFBIZ-12887 - https://lists.ap
ps://ofbiz.apache.org/release-notes-18.12.12.html - https://issues.apache.org/jira/browse/OFBIZ-12887 - https://lists.apache.org/thread/rplfjp7ppn9ro49oo7jsrpj99m113lfc - http://www.openwall.com/lists/oss-security/2024/02/28/10
CVE ID: CVE-2024-25066 State: PUBLISHED Published: 2025-02-17T00:00:00.000Z Last Updated: 2025-02-18T16:05:07.133Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: RSA Products: Authentication Manager Problem Types: CWE-611 Description: RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rsa.com/en-us/company/vulnerability-response-policy - https://community.rsa.com/s/advisories - https://github.com/KaiwenTM/CVE_POC/bl
/company/vulnerability-response-policy - https://community.rsa.com/s/advisories - https://github.com/KaiwenTM/CVE_POC/blob/main/CVE-2024-25066.txt - https://community.rsa.com/s/article/RSA-Authentication-Manager-8-7-SP2-Patch-1-Readme
CVE ID: CVE-2024-25073 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-12-04T21:05:22.473Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the CC (Call Control module), which can lead to Denial of Service (Untrusted Pointer Dereference
a pointer specified by the CC (Call Control module), which can lead to Denial of Service (Untrusted Pointer Dereference). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-25073/
CVE ID: CVE-2024-25074 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-11-13T15:35:19.813Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check a pointer specified by the SM (Session Management module), which can lead to Denial of Service (Untrusted Pointer Deref
a pointer specified by the SM (Session Management module), which can lead to Denial of Service (Untrusted Pointer Dereference). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-25074/
CVE ID: CVE-2024-25075 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-11-21T16:22:29.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-2.html
CVE ID: CVE-2024-25076 State: PUBLISHED Published: 2024-07-10T00:00:00 Last Updated: 2024-08-01T23:36:21.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function responsible for validating the Flash Product Header directly uses a user-controllable size value (Length of Flash Config Section) to control a read from the QSPI device into a fixed sized buffer, resulting in a buffer overflow and execution of arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2
Vulnrichment: - CVE Program Container: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2024-0001.md
CVE ID: CVE-2024-25077 State: PUBLISHED Published: 2024-07-10T00:00:00 Last Updated: 2024-08-08T14:03:31.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The Nonce used for on-the-fly decryption of flash images is stored in an unsigned header, allowing its value to be modified without invalidating the signature used for secureboot image verification. Because the encryption engine for on-the-fly decryption uses AES in CTR mode without authentication, an attacker-modified Nonce can result in execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
ed Nonce can result in execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2024-0001.md
CVE ID: CVE-2024-25078 State: PUBLISHED Published: 2024-05-15T14:11:01.648Z Last Updated: 2025-02-13T15:47:09.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and kernel 5.6: IB19130163 in 05.61.07 could lead to escalating privileges in SMM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2024001
CVE ID: CVE-2024-25079 State: PUBLISHED Published: 2024-05-15T14:23:26.249Z Last Updated: 2025-02-13T15:47:10.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2024001
CVE ID: CVE-2024-25080 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-11-01T18:51:04.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.axigen.com/mail-server/axigen-older-features/ - https://www.axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2024-25080-_401.html
CVE ID: CVE-2024-25081 State: PUBLISHED Published: 2024-02-26T00:00:00.000Z Last Updated: 2025-11-04T18:29:17.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fontforge.org/en-US/downloads/ - https://github.com/fontforge/fontforge/pull/5367 - https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCH22HIO2C6M4BZWF5EYIWVFBXL5BQAH/ - http://www.openwall.com/lists/oss-security/2024/03/08
ists.fedoraproject.org/message/GCH22HIO2C6M4BZWF5EYIWVFBXL5BQAH/ - http://www.openwall.com/lists/oss-security/2024/03/08/2
CVE ID: CVE-2024-25082 State: PUBLISHED Published: 2024-02-26T00:00:00.000Z Last Updated: 2025-11-04T18:29:18.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fontforge.org/en-US/downloads/ - https://github.com/fontforge/fontforge/pull/5367 - https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCH22HIO2C6M4BZWF5EYIWVFBXL5BQAH/ - http://www.openwall.com/lists/oss-
ackage-announce%40lists.fedoraproject.org/message/GCH22HIO2C6M4BZWF5EYIWVFBXL5BQAH/ - http://www.openwall.com/lists/oss-security/2024/03/08/2
CVE ID: CVE-2024-25083 State: PUBLISHED Published: 2024-02-16T00:00:00 Last Updated: 2024-08-28T15:31:10.756Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector through which the user is able to execute any program with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.beyondtrust.com/trust-center/security-advisories/bt24-01
CVE ID: CVE-2024-25086 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-08-01T23:36:21.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-25087 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-14T15:37:11.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-25088 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-08-01T23:36:21.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-25089 State: PUBLISHED Published: 2024-02-04T00:00:00 Last Updated: 2024-08-26T18:32:35.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2300061 - https://www.binisoft.org/changelog.txt
CVE ID: CVE-2024-25090 State: PUBLISHED Published: 2024-07-26T08:36:47.021Z Last Updated: 2025-03-14T16:11:12.779Z Vendors: Apache Software Foundation Products: Apache Roller Problem Types: CWE-20, CWE-79 Description: Insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description and blogroll name features in all versions of Apache Roller on all platforms allows an authenticated user to perform an XSS attack. Mitigation: if you do not have Roller configured for untrusted users, then you need to do nothing because you trust your users to author raw HTML and other web content. If you are running with untrusted users then you should upgrade to Roller 6.1.