Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34828 State: PUBLISHED Published: 2024-05-10T08:16:22.154Z Last Updated: 2024-08-02T02:59:22.593Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Andy Moyle Products: Church Admin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.1.32. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/church-admin/wordpress-church-admin-plugin-4-1-32-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-34831 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T19:26:48.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/enzored/CVE-2024-34831
CVE ID: CVE-2024-34832 State: PUBLISHED Published: 2024-06-06T14:45:49.273Z Last Updated: 2025-02-13T15:53:27.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/julio-cfa/CVE-2024-34832
CVE ID: CVE-2024-34833 State: PUBLISHED Published: 2024-06-17T00:00:00 Last Updated: 2024-08-05T16:54:37.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ShellUnease/payroll-management-system-rce - https://packetsto
- CISA ADP Vulnrichment: References: - https://github.com/ShellUnease/payroll-management-system-rce - https://packetstormsecurity.com/files/179106/Payroll-Management-System-1.0-Remote-Code-Execution.html
CVE ID: CVE-2024-34852 State: PUBLISHED Published: 2024-05-28T16:29:35.891Z Last Updated: 2025-02-13T15:53:27.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php file. An unauthenticated remote attacker can exploit this vulnerability by sending a file name containing command injection. Successful exploitation of this vulnerability may allow the attacker to execute system commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Yang-Nankai/Vulnerabilities/blob/ma
: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCube3%20Shell%20Code%20Injection.md
CVE ID: CVE-2024-34854 State: PUBLISHED Published: 2024-05-28T16:30:49.517Z Last Updated: 2025-02-13T15:53:28.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.` Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCube3%20Shell%20Code%20Injection.md
CVE ID: CVE-2024-34882 State: PUBLISHED Published: 2024-11-04T00:00:00 Last Updated: 2024-11-05T16:58:15.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bitrix24.com - https://github.com/DrieVlad/BitrixVulns
CVE ID: CVE-2024-34883 State: PUBLISHED Published: 2024-11-04T00:00:00 Last Updated: 2024-11-05T16:56:36.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bitrix24.com - https://github.com/DrieVlad/BitrixVulns
CVE ID: CVE-2024-34885 State: PUBLISHED Published: 2024-11-04T00:00:00 Last Updated: 2024-11-05T16:45:59.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bitrix24.com - https://github.com/DrieVlad/BitrixVulns
CVE ID: CVE-2024-34887 State: PUBLISHED Published: 2024-11-04T00:00:00 Last Updated: 2024-11-05T16:53:49.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bitrix24.com - https://github.com/DrieVlad/BitrixVulns
CVE ID: CVE-2024-34891 State: PUBLISHED Published: 2024-11-04T00:00:00 Last Updated: 2024-11-05T16:43:46.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bitrix24.com - https://github.com/DrieVlad/BitrixVulns
CVE ID: CVE-2024-34896 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-14T16:32:06.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Nedis SmartLife Video Doorbell (WIFICDP10GY), Nedis SmartLife IOS v1.4.0 causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to live video feed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://nedis.com - https://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-359419
CVE ID: CVE-2024-34897 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-18T20:29:23.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://nedis.com - https://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-359419
CVE ID: CVE-2024-34899 State: PUBLISHED Published: 2024-05-13T18:40:25.814Z Last Updated: 2025-03-27T20:14:43.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: WWBN AVideo 12.4 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackerdna.com/courses/cve/cve-2024-34899
CVE ID: CVE-2024-34905 State: PUBLISHED Published: 2024-05-16T14:09:58.576Z Last Updated: 2025-02-13T15:53:29.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CloudWise-OpenSource/FlyFish/issues/191
CVE ID: CVE-2024-34906 State: PUBLISHED Published: 2024-05-15T19:26:32.658Z Last Updated: 2025-02-13T15:53:30.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kuaifan/dootask/issues/210
CVE ID: CVE-2024-34909 State: PUBLISHED Published: 2024-05-15T19:26:33.785Z Last Updated: 2025-02-13T15:53:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in KYKMS v1.0.1 and below allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/KYKMS_Cross_site%20_scripting%20_vulnerability
CVE ID: CVE-2024-34913 State: PUBLISHED Published: 2024-05-15T19:26:34.613Z Last Updated: 2025-02-13T15:53:31.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/r-pan-scaffolding_Cross_site%20_scripting%20_vulnerability
CVE ID: CVE-2024-34914 State: PUBLISHED Published: 2024-05-14T15:14:15.606Z Last Updated: 2025-02-13T15:53:31.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its remember_key value. This allows attackers to bruteforce to bruteforce the remember_key value to gain access to accounts that have checked "remember me" when logging in. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chmod744.super.site/redacted-vulnerability
CVE ID: CVE-2024-34919 State: PUBLISHED Published: 2024-05-17T13:43:54.849Z Last Updated: 2025-02-13T15:53:32.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CveSecLook/cve/issues/20
CVE ID: CVE-2024-34921 State: PUBLISHED Published: 2024-05-13T19:23:40.944Z Last Updated: 2025-02-13T15:53:32.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cainiao159357/x5000r_poc/blob/main/README.md
CVE ID: CVE-2024-34923 State: PUBLISHED Published: 2024-05-27T19:49:56.463Z Last Updated: 2025-02-13T15:53:33.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ka1ne1.github.io/avocent_xss.html - https://github.com/Ka1ne1/ka1ne1.github.io/blob/main/avocent_xss.html
CVE ID: CVE-2024-34927 State: PUBLISHED Published: 2024-05-23T16:22:36.239Z Last Updated: 2025-02-13T15:53:33.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2021.pdf
CVE ID: CVE-2024-34928 State: PUBLISHED Published: 2024-05-23T16:23:34.729Z Last Updated: 2025-02-13T15:53:34.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2025.pdf
CVE ID: CVE-2024-34929 State: PUBLISHED Published: 2024-05-23T16:25:18.387Z Last Updated: 2025-02-13T15:53:35.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the my_index parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf
CVE ID: CVE-2024-34930 State: PUBLISHED Published: 2024-05-23T16:26:04.192Z Last Updated: 2025-02-13T15:53:35.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2026.pdf
CVE ID: CVE-2024-34931 State: PUBLISHED Published: 2024-05-23T16:31:56.924Z Last Updated: 2025-02-13T15:53:36.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2024.pdf
CVE ID: CVE-2024-34932 State: PUBLISHED Published: 2024-05-23T16:33:14.447Z Last Updated: 2025-02-13T15:53:37.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2022.pdf
CVE ID: CVE-2024-34933 State: PUBLISHED Published: 2024-05-23T16:33:35.078Z Last Updated: 2025-02-13T15:53:37.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admission_fee parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2023.pdf
CVE ID: CVE-2024-34934 State: PUBLISHED Published: 2024-05-23T16:33:58.084Z Last Updated: 2025-02-13T15:53:38.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2028.pdf
CVE ID: CVE-2024-34935 State: PUBLISHED Published: 2024-05-23T16:34:28.795Z Last Updated: 2025-02-13T15:53:38.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2027.pdf
CVE ID: CVE-2024-34936 State: PUBLISHED Published: 2024-05-23T16:34:47.750Z Last Updated: 2025-02-13T15:53:39.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2029.pdf
CVE ID: CVE-2024-34942 State: PUBLISHED Published: 2024-05-10T12:52:26.230Z Last Updated: 2025-02-13T15:53:39.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/formexeCommand-200db77a90d34c708b903c935c7c65c0
CVE ID: CVE-2024-34943 State: PUBLISHED Published: 2024-05-10T12:51:20.301Z Last Updated: 2025-02-13T15:53:40.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/fromNatStaticSetting-fae26e1bfbe64b49a46230a629b6d198
CVE ID: CVE-2024-34944 State: PUBLISHED Published: 2024-05-10T12:49:00.996Z Last Updated: 2025-02-13T15:53:41.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tendacn.com/hk/download/detail-2344.html
CVE ID: CVE-2024-34945 State: PUBLISHED Published: 2024-05-10T12:50:15.763Z Last Updated: 2025-02-13T15:53:41.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/fromWizardHandle-98e188c072984620a907ea5df0d80ad5
CVE ID: CVE-2024-34946 State: PUBLISHED Published: 2024-05-10T12:44:23.683Z Last Updated: 2025-02-13T15:53:42.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/fromDhcpListClient_page-c9ee71f670534555a5ef2d99320da48e
CVE ID: CVE-2024-34947 State: PUBLISHED Published: 2024-05-20T16:16:29.639Z Last Updated: 2025-03-25T15:41:43.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/wuyuhang422/56f1e03fad8b91a3c979093f53cbbe7a
CVE ID: CVE-2024-34948 State: PUBLISHED Published: 2024-05-20T16:20:56.318Z Last Updated: 2025-03-13T16:01:44.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 allows attackers to cause a Denial of Service (DoS) when attempting to make TCP connections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/wuyuhang422/8de771b0b4538eb6fa23cf8282061209
CVE ID: CVE-2024-34949 State: PUBLISHED Published: 2024-05-20T17:47:50.073Z Last Updated: 2025-02-13T15:53:44.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://charm-august-88a.notion.site/CVE-2024-34949-SQL-injection-vulnerability-in-Likeshop-2-5-7-6139a82f9ab7423c9ef7c95950f68301
CVE ID: CVE-2024-34950 State: PUBLISHED Published: 2024-05-14T15:27:35.329Z Last Updated: 2025-02-13T15:53:44.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dear-sunshine-ba5.notion.site/D-Link-DIR-822-v1-0-5-Stack-Overflow-e77ff3d9c31f4a98bfa0fa71eca54000
CVE ID: CVE-2024-34952 State: PUBLISHED Published: 2024-05-20T13:09:50.516Z Last Updated: 2025-03-27T19:23:18.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted .ncm file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_FixMetadata - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.md - https://github.com/H
- https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.md - https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_FixMetadata/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/poc/I1DWE0~U - https://github.com/taurusxin/ncmdump/issues/18 - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.assets/debug-coredump.png