Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rely on ansible_base.oauth2_provider for OAuth2 authentication. While the impact is limited to actions within the user’s assigned permissions, it undermines scoped access controls, potentially allowing unintended modifications in the application and consuming services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:11145 - https://access.redhat.com/security/cve/CVE-2024-11483 - https://bugzilla.redhat.com/show_bug.cgi?id=2327579 - https://github.com/ansible/django-ansible-base/commit/845b3e1838cc0762a7f9f3e0379c5274519d9a44
CVE ID: CVE-2024-11484 State: PUBLISHED Published: 2024-11-20T15:31:03.905Z Last Updated: 2024-12-02T18:53:53.826Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Code4Berry Products: Decoration Management System Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical was found in Code4Berry Decoration Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /decoration/admin/update_image.php of the component User Image Handler. The manipulation of the argument productimage1 leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vend
ss controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285499 - https://vuldb.com/?ctiid.285499 - https://vuldb.com/?submit.441913
CVE ID: CVE-2024-11485 State: PUBLISHED Published: 2024-11-20T15:31:05.032Z Last Updated: 2024-12-02T18:53:19.951Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Code4Berry Products: Decoration Management System Problem Types: CWE-275, CWE-266 Description: A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0. Affected by this issue is some unknown functionality of the file /decoration/admin/userregister.php of the component User Handler. The manipulation leads to permission issues. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about thi
aunched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285500 - https://vuldb.com/?ctiid.285500 - https://vuldb.com/?submit.441914
CVE ID: CVE-2024-11486 State: PUBLISHED Published: 2024-11-20T16:00:11.888Z Last Updated: 2024-12-02T18:52:49.375Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Code4Berry Products: Decoration Management System Problem Types: CWE-275, CWE-266 Description: A vulnerability, which was classified as problematic, was found in Code4Berry Decoration Management System 1.0. This affects an unknown part of the file /decoration/admin/user_permission.php of the component User Permission Handler. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was conta
ible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285501 - https://vuldb.com/?ctiid.285501 - https://vuldb.com/?submit.441916
CVE ID: CVE-2024-11487 State: PUBLISHED Published: 2024-11-20T16:00:13.520Z Last Updated: 2024-12-02T18:52:09.410Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Code4Berry Products: Decoration Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndates_report.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact
e attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285502 - https://vuldb.com/?ctiid.285502 - https://vuldb.com/?submit.441917
CVE ID: CVE-2024-11488 State: PUBLISHED Published: 2024-11-20T16:31:03.682Z Last Updated: 2024-12-02T18:51:24.318Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: 115cms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in 115cms up to 20240807 and classified as problematic. This issue affects some unknown processing of the file /app/admin/view/web_user.html. The manipulation of the argument ks leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnr
dor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285503 - https://vuldb.com/?ctiid.285503 - https://github.com/Hebing123/cve/issues/70
CVE ID: CVE-2024-11489 State: PUBLISHED Published: 2024-11-20T16:31:04.910Z Last Updated: 2024-11-20T16:49:44.775Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: 115cms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in 115cms up to 20240807. It has been classified as problematic. Affected is an unknown function of the file /index.php/admin/web/file.html. The manipulation of the argument ks leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA AD
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285504 - https://vuldb.com/?ctiid.285504 - https://github.com/Hebing123/cve/issues/70
CVE ID: CVE-2024-11490 State: PUBLISHED Published: 2024-11-20T17:00:10.721Z Last Updated: 2024-11-20T19:17:27.319Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: 115cms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in 115cms up to 20240807. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the argument type leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285505 - https://vuldb.com/?ctiid.285505 - https://github.com/Hebing123/cve/issues/70
CVE ID: CVE-2024-11491 State: PUBLISHED Published: 2024-11-20T17:00:12.361Z Last Updated: 2024-11-20T19:17:27.442Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: 115cms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in 115cms up to 20240807. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the argument ks leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Note
ay be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285506 - https://vuldb.com/?ctiid.285506 - https://github.com/Hebing123/cve/issues/70
CVE ID: CVE-2024-11492 State: PUBLISHED Published: 2024-11-20T17:31:03.878Z Last Updated: 2024-11-20T21:06:32.373Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: 115cms Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in 115cms up to 20240807. This affects an unknown part of the file /index.php/admin/web/appurladd.html. The manipulation of the argument tid leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP V
vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285507 - https://vuldb.com/?ctiid.285507 - https://github.com/Hebing123/cve/issues/70
CVE ID: CVE-2024-11493 State: PUBLISHED Published: 2024-11-20T17:31:05.094Z Last Updated: 2024-11-20T18:45:52.660Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: 115cms Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in 115cms up to 20240807. This vulnerability affects unknown code of the file /index.php/setpage/admin/pageAE.html. The manipulation of the argument tid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vuln
ndor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285508 - https://vuldb.com/?ctiid.285508 - https://vuldb.com/?submit.442037 - https://github.com/Hebing123/cve/issues/70
CVE ID: CVE-2024-11494 State: PUBLISHED Published: 2024-11-20T09:36:06.694Z Last Updated: 2024-11-20T14:52:28.867Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: P-6101C firmware Problem Types: CWE-287 Description: **UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP_20140331 could allow an unauthenticated attacker to read some device information via a crafted HTTP HEAD method. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/stevenyu113228/78e0169d2ff110e9a65539eb29660d25
CVE ID: CVE-2024-11495 State: PUBLISHED Published: 2024-11-20T12:28:22.802Z Last Updated: 2024-11-20T14:51:51.258Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: OllyDbg Products: OllyDbg.exe Problem Types: CWE-119 Description: Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/buffer-overflow-ollydbg
CVE ID: CVE-2024-11496 State: PUBLISHED Published: 2025-01-07T04:22:20.164Z Last Updated: 2025-01-07T16:19:18.040Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: infility Products: Infility Global Problem Types: CWE-862 Description: The Infility Global plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the infility_global_ajax function in all versions up to, and including, 2.9.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin options and potentially break the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
ugin options and potentially break the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d0fd1c19-b752-4562-9365-165d709b91b2?source=cve - https://plugins.trac.wordpress.org/browser/infility-global/trunk/infility_global.php#L121 - https://plugins.trac.wordpress.org/browser/infility-global/trunk/include/class/action.class.php#L80
CVE ID: CVE-2024-11497 State: PUBLISHED Published: 2025-01-14T13:55:57.890Z Last Updated: 2025-01-14T14:17:44.111Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, CHARX SEC-3150 Problem Types: CWE-732 Description: An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2024-070
CVE ID: CVE-2024-11498 State: PUBLISHED Published: 2024-11-25T13:08:07.140Z Last Updated: 2024-11-25T13:55:13.205Z Vendors: libjxl Products: libjxl Problem Types: CWE-400 Description: There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libjxl/libjxl/pull/3943
CVE ID: CVE-2024-11499 State: PUBLISHED Published: 2025-03-25T12:30:42.034Z Last Updated: 2025-03-25T13:11:58.573Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: RTU500 Problem Types: CWE-476 Description: A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
an attacker successfully exploits this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentId=8DBD000207&languageCode=en&Preview=true
CVE ID: CVE-2024-11501 State: PUBLISHED Published: 2024-12-07T11:09:53.288Z Last Updated: 2024-12-09T16:06:10.220Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: webdzier Products: Gallery Problem Types: CWE-502 Description: The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target
present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/778f7d9b-6376-4026-a291-1fedeabe8c99?source=cve - https://plugins.trac.wordpress.org/browser/multi-gallery/tags/1.3/partials/Shortcode.php#L21
CVE ID: CVE-2024-11502 State: PUBLISHED Published: 2025-05-15T20:06:50.205Z Last Updated: 2025-05-20T19:33:58.874Z Vendors: Unknown Products: Planning Center Online Giving Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Planning Center Online Giving WordPress plugin through 1.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d9bea52e-af32-449f-97b6-1dcfb2051bda/
CVE ID: CVE-2024-11503 State: PUBLISHED Published: 2025-03-25T06:00:10.786Z Last Updated: 2025-03-25T13:57:34.727Z Vendors: Unknown Products: WP Tabs Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/25592b6c-b9ab-4d9e-b314-091594ce9189/
CVE ID: CVE-2024-11504 State: PUBLISHED Published: 2025-03-28T12:54:11.472Z Last Updated: 2025-03-28T13:41:20.694Z Vendors: Streamsoft Products: Streamsoft Prestiż Problem Types: CWE-89 Description: Input from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, which might be exploited by an authenticated remote attacker. This issue was fixed in 18.1.376.37 version of the software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/03/CVE-2024-7407/ - https://www.streamsoft.pl/streamsoft-prestiz/
CVE ID: CVE-2024-11505 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:35.644Z Description: No description available.
CVE ID: CVE-2024-11506 State: PUBLISHED Published: 2024-11-22T20:50:08.016Z Last Updated: 2024-11-22T21:35:45.941Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IrfanView Products: IrfanView Problem Types: CWE-125 Description: IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of u
ile. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22169. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1594/
CVE ID: CVE-2024-11507 State: PUBLISHED Published: 2024-11-22T20:50:54.287Z Last Updated: 2024-11-22T21:21:16.743Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IrfanView Products: IrfanView Problem Types: CWE-843 Description: IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22177. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1604/
CVE ID: CVE-2024-11508 State: PUBLISHED Published: 2024-11-22T20:50:50.307Z Last Updated: 2024-11-22T21:25:43.491Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IrfanView Products: IrfanView Problem Types: CWE-843 Description: IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22184. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1603/
CVE ID: CVE-2024-11509 State: PUBLISHED Published: 2024-11-22T20:50:45.811Z Last Updated: 2024-11-22T21:25:43.603Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IrfanView Products: IrfanView Problem Types: CWE-122 Description: IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SVG files. The issue results from the lack of proper validat
icious file. The specific flaw exists within the parsing of SVG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22185. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1602/
CVE ID: CVE-2024-11510 State: PUBLISHED Published: 2024-11-22T20:46:04.011Z Last Updated: 2024-11-22T21:45:51.008Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IrfanView Products: IrfanView Problem Types: CWE-121 Description: IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WB1 files. The issue results from the lack of pr
r open a malicious file. The specific flaw exists within the parsing of WB1 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22718. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1557/