Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22859 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-29T15:02:56.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in livewire before v3.0.4, allows remote attackers to execute arbitrary code getCsrfToken function. NOTE: the vendor disputes this because the 5d88731 commit fixes a usability problem (HTTP 419 status codes for legitimate client activity), not a security problem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/livewire/livewire/commit/5d887316f2aaf83c0e380ac5e72766f19700fa3b - https://github.com/github/advisory-da
s://github.com/livewire/livewire/commit/5d887316f2aaf83c0e380ac5e72766f19700fa3b - https://github.com/github/advisory-database/pull/3490
CVE ID: CVE-2024-22860 State: PUBLISHED Published: 2024-01-27T00:00:00.000Z Last Updated: 2025-06-09T18:49:48.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FFmpeg/FFmpeg/commit/d2e8974699a9e35cc1a926bf74a972300d629cd5 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61991
CVE ID: CVE-2024-22861 State: PUBLISHED Published: 2024-01-27T00:00:00.000Z Last Updated: 2025-05-29T15:11:33.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FFmpeg/FFmpeg/commit/87b8c1081959e45ffdcbabb3d53ac9882ef2b5ce
CVE ID: CVE-2024-22862 State: PUBLISHED Published: 2024-01-27T00:00:00.000Z Last Updated: 2025-06-20T19:40:32.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113
CVE ID: CVE-2024-22871 State: PUBLISHED Published: 2024-02-29T00:00:00.000Z Last Updated: 2025-11-04T22:05:43.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure.core$partial$fn__5920 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%40fe1w0/rymmJGida - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWWK2SO2MH4SXPO6L444MM6LHVLVFULV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25FKUOYXQZGGJM
VFULV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25FKUOYXQZGGJMFUM5HJABWMIX2TILRV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFPGUDXMW6OXKIDGCOZFEAXO74VQIB2T/
CVE ID: CVE-2024-22873 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-08-05T20:16:24.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tencent.com - http://blueking.com - https://sphenoid-enquiry-9be.notion.site/BK-CMDB-SSRF-ba21e94f4976460188fa52d26c15a6ae?pvs=4 - https://gist.github.com/exp1orer/0f190c6a64b6
uiry-9be.notion.site/BK-CMDB-SSRF-ba21e94f4976460188fa52d26c15a6ae?pvs=4 - https://gist.github.com/exp1orer/0f190c6a64b668a9b1c4c47789affa09
CVE ID: CVE-2024-22876 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-09T18:09:28.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: StrangeBee TheHive 5.1.0 to 5.1.9 and 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case attachment functionality which enables an attacker to upload a malicious HTML file with Javascript code that will be executed in the context of the The Hive application using a specific URL. The vulnerability can be used to coerce a victim account to perform specific actions on the application as helping an analyst becoming administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
helping an analyst becoming administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/StrangeBeeCorp/Security/blob/main/Security%20advisories/SB-SEC-ADV-2023-002.md
CVE ID: CVE-2024-22877 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-02T15:02:49.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: StrangeBee TheHive 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case reporting functionality. This feature allows an attacker to insert malicious JavaScript code inside the template or its variables, that will be executed in the context of the TheHive application when the HTML report is opened. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/StrangeBeeCorp/Security/blob/main/Security%20advisories/SB-SEC-ADV-2023-001.md
CVE ID: CVE-2024-22880 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:39:37.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/sAjibuu/372fd7d103218dabac95bf12580adbe4
CVE ID: CVE-2024-22889 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-10-31T14:01:29.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9
CVE ID: CVE-2024-22891 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-29T14:19:58.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EQSTLab/PoC/tree/main/2024/RCE/CVE-2024-22891
CVE ID: CVE-2024-22892 State: PUBLISHED Published: 2024-09-25T00:00:00.000Z Last Updated: 2025-03-14T15:38:29.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/mdickopp/0cab0d7f91b1f4ea0d326dd976db70e5
CVE ID: CVE-2024-22893 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-26T13:19:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/mdickopp/10e4a4ba3d7ded8315a1613ee7f2541e
CVE ID: CVE-2024-22894 State: PUBLISHED Published: 2024-01-30T00:00:00 Last Updated: 2024-08-29T19:36:54.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later, allows remote attackers to execute arbitrary code via the password component in the shadow file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Jaarden/AlphaInnotec-Password-Vulnerability/ - https://github.com/Jaarden/CVE-2024-22894
CVE ID: CVE-2024-22895 State: PUBLISHED Published: 2024-01-22T00:00:00.000Z Last Updated: 2025-06-05T16:06:50.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzq66/cve5
CVE ID: CVE-2024-22899 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-11-04T18:23:29.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://vinchin.com - https://seclists.org/fulldisclosure/2024/Jan/29 - https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
CVE ID: CVE-2024-22900 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-11-04T18:23:32.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://vinchin.com - https://seclists.org/fulldisclosure/2024/Jan/29 - https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
CVE ID: CVE-2024-22901 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-11-04T18:23:34.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://vinchin.com - https://seclists.org/fulldisclosure/2024/Jan/30 - https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
CVE ID: CVE-2024-22902 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-11-04T18:23:37.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://vinchin.com - http://default.com - https://seclists.org/fulldisclosure/2024/Jan/31 - https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
CVE ID: CVE-2024-22903 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-11-04T18:23:39.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://vinchin.com - https://seclists.org/fulldisclosure/2024/Jan/32 - https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
CVE ID: CVE-2024-22905 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-01T22:51:11.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in ARM mbed-os v.6.17.0 allows a remote attacker to execute arbitrary code via a crafted script to the hciTrSerialRxIncoming function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ARMmbed/mbed-os/blob/7c7d20da6527885237094d9d50ce099404414201/connectivity/FEATURE_BLE/source/cordio/stack_adaptation/hci_tr.c#L125 - https://github.com/ARMmbed/mbed-os/blob/7c7d20da6527885237094d9d50ce099404414201/connectivity/FEATURE_BLE/source/cordio/sta
ps://github.com/ARMmbed/mbed-os/blob/7c7d20da6527885237094d9d50ce099404414201/connectivity/FEATURE_BLE/source/cordio/stack_adaptation/hci_tr.c#L173-L175 - https://github.com/ARMmbed/mbed-os/issues/15462
CVE ID: CVE-2024-22910 State: PUBLISHED Published: 2024-05-09T18:29:05.380Z Last Updated: 2025-02-13T15:47:04.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/cgnl/672ace3cbad1116fcd9ae633e54ea9f8
CVE ID: CVE-2024-22911 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-05T16:05:49.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/216
CVE ID: CVE-2024-22912 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-17T14:46:32.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/212
CVE ID: CVE-2024-22913 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-05-30T14:27:17.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/213
CVE ID: CVE-2024-22914 State: PUBLISHED Published: 2024-01-19T00:00:00 Last Updated: 2024-09-12T17:43:02.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/214
CVE ID: CVE-2024-22915 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-05-30T14:27:12.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/215
CVE ID: CVE-2024-22916 State: PUBLISHED Published: 2024-01-16T00:00:00 Last Updated: 2024-08-29T19:53:52.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://kee02p.github.io/2024/01/13/CVE-2024-22916/
CVE ID: CVE-2024-22917 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-15T20:19:44.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-22917/blob/main/CVE-22
CVE ID: CVE-2024-22919 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-05T16:16:03.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/209
CVE ID: CVE-2024-22920 State: PUBLISHED Published: 2024-01-19T00:00:00 Last Updated: 2024-09-11T20:44:29.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/211
CVE ID: CVE-2024-22922 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-06-04T21:18:04.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://visitor.com - http://projectworlds.com - https://github.com/keru6k/CVE-2024-22922/blob/main/CVE-2024-22922.md
CVE ID: CVE-2024-22923 State: PUBLISHED Published: 2024-02-13T00:00:00.000Z Last Updated: 2025-03-13T20:49:05.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://advradius.com/demo/ - https://gist.github.com/whiteman007/
CVE ID: CVE-2024-22927 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-15T15:56:12.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/57
CVE ID: CVE-2024-22936 State: PUBLISHED Published: 2024-02-01T00:00:00 Last Updated: 2024-08-26T19:01:59.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SnoopJesus420/CVEs/blob/main/CVE-2023- - https://github.com/SnoopJesus420/CVEs/blob/main/CVEs-2024/CVE-2024-22936.md
CVE ID: CVE-2024-22938 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-05-29T15:07:50.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bosscms.net/ - https://github.com/n0Sleeper/bosscmsVuln/issues/1 - https://github.com/n0Sleeper/bosscmsVuln
CVE ID: CVE-2024-22939 State: PUBLISHED Published: 2024-02-01T00:00:00 Last Updated: 2024-08-27T18:11:36.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the system/article/category_edit component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NUDTTAN91/CVE20240109/blob/master/README.md - https://github.com/NUDTTAN91/CVE-2024-22939
CVE ID: CVE-2024-22942 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-03T14:25:57.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/1/TOTOlink%20A3300R%20setWanCfg.md
CVE ID: CVE-2024-22949 State: PUBLISHED Published: 2024-04-08T00:00:00 Last Updated: 2024-10-28T13:53:37.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jfreechart.com - https://github.com/jfree/jfreechart
E Program Container: - CISA ADP Vulnrichment: References: - http://jfreechart.com - https://github.com/jfree/jfreechart - https://gist.github.com/LLM4IG/35c46e009b205ef6acd0e290e80fb876
CVE ID: CVE-2024-22955 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-20T18:23:20.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/207
CVE ID: CVE-2024-22956 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-05-30T14:27:06.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/208
CVE ID: CVE-2024-22957 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-20T18:24:20.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/206
CVE ID: CVE-2024-22983 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-03-27T21:13:21.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://visitor.com - http://projectworlds.com - https://github.com/keru6k/CVE-2024-22983/blob/main/CVE-2024-22983.md
CVE ID: CVE-2024-22984 State: REJECTED Published: N/A Last Updated: 2024-02-07T19:12:49.553272 Description: No description available.