Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the 3gp2 file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/94afe3e2-a1f1-470b-afaf-c7926beaec9a?source=cve - https://plugins.trac.wordpress.org/browser/blog2social/tags/7.5.4/includes/Ajax/Post.php#L78 - https://wordpress.org/plugins/blog2social/#developers - https://plugins.trac.wordpress.org/changeset/3128861/ - https://plugins.trac.wordpress.org/changeset/3128861/#file434
CVE ID: CVE-2024-7303 State: PUBLISHED Published: 2024-07-31T07:31:04.472Z Last Updated: 2024-07-31T18:19:41.657Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: itsourcecode Products: Online Blood Bank Management System Problem Types: CWE-79 Description: A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-2731
attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273185 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273185 - https://vuldb.com/?ctiid.273185 - https://vuldb.com/?submit.382035 - https://github.com/cl4irv0yance/CVEs/issues/1
CVE ID: CVE-2024-7304 State: PUBLISHED Published: 2024-08-27T06:48:04.267Z Last Updated: 2024-08-27T13:56:41.164Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: techjewel Products: Ninja Tables – Easiest Data Table Builder Problem Types: CWE-79 Description: The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user access
s, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b1eb6896-2de3-4d4d-9b5f-253aaffd193b?source=cve - https://plugins.trac.wordpress.org/browser/ninja-tables/tags/5.0.12/app/Hooks/filters.php#L28 - https://wordpress.org/plugins/ninja-tables/#developers - https://plugins.trac.wordpress.org/changeset/3140370/#file408 - https://plugins.trac.wordpress.org/changeset/3140370/
CVE ID: CVE-2024-7305 State: PUBLISHED Published: 2024-08-19T23:28:23.356Z Last Updated: 2025-08-26T19:57:54.129Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: AutoCAD, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D, Civil 3D, Advance Steel, AutoCAD LT, DWG TrueView, AutoCAD Map 3D Problem Types: CWE-787 Description: A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current pr
e this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0014
CVE ID: CVE-2024-7306 State: PUBLISHED Published: 2024-07-31T08:00:07.508Z Last Updated: 2024-07-31T14:01:23.941Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Establishment Billing Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of the file /manage_block.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273198 is the identifier assigned to this vulnerability. Additiona
has been disclosed to the public and may be used. VDB-273198 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273198 - https://vuldb.com/?ctiid.273198 - https://vuldb.com/?submit.382327 - https://gist.github.com/topsky979/0d5ec3fac4f1fc895478344be5521575
CVE ID: CVE-2024-7307 State: PUBLISHED Published: 2024-07-31T08:31:04.295Z Last Updated: 2024-07-31T15:30:22.442Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Establishment Billing Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_billing.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VD
ely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273199. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273199 - https://vuldb.com/?ctiid.273199 - https://vuldb.com/?submit.382328 - https://gist.github.com/topsky979/df642bf14cce32c58d4805b6f6cf44e0
CVE ID: CVE-2024-7308 State: PUBLISHED Published: 2024-07-31T09:00:06.811Z Last Updated: 2024-07-31T15:29:32.867Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Establishment Billing Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_bill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273200. Additional Analys
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273200. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273200 - https://vuldb.com/?ctiid.273200 - https://vuldb.com/?submit.382329 - https://gist.github.com/topsky979/c11fd2c1b9027831031de2e58cbf5ff3
CVE ID: CVE-2024-7309 State: PUBLISHED Published: 2024-07-31T09:31:03.900Z Last Updated: 2024-07-31T15:28:43.079Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273201 was assigned to this vulnerability. Additional Analyst Notes: - CISA A
public and may be used. The identifier VDB-273201 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273201 - https://vuldb.com/?ctiid.273201 - https://vuldb.com/?submit.382506 - https://github.com/zw-a11y/VUL/blob/main/Record-Management-System-1.md
CVE ID: CVE-2024-7310 State: PUBLISHED Published: 2024-07-31T10:00:07.354Z Last Updated: 2024-07-31T13:13:05.965Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file sort_user.php. The manipulation of the argument sort leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273202 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA A
public and may be used. VDB-273202 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273202 - https://vuldb.com/?ctiid.273202 - https://vuldb.com/?submit.382507 - https://github.com/zw-a11y/VUL/blob/main/Record-Management-System-2.md
CVE ID: CVE-2024-7311 State: PUBLISHED Published: 2024-07-31T10:31:04.706Z Last Updated: 2024-07-31T13:29:51.210Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Online Bus Reservation Site Problem Types: CWE-89 Description: A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the argument Email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273203. Additional Analyst Notes: - CISA ADP
lic and may be used. The associated identifier of this vulnerability is VDB-273203. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273203 - https://vuldb.com/?ctiid.273203 - https://vuldb.com/?submit.383201 - https://github.com/23588hk/cve/issues/1
CVE ID: CVE-2024-7312 State: PUBLISHED Published: 2024-09-11T15:28:43.452Z Last Updated: 2024-09-11T19:32:42.844Z Vendors: Payara Platform Products: Payara Server Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before 5.67.0, from 4.1.2.191.0 before 4.1.2.191.50. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.payara.fish/enterprise/docs/5.67.0/Release%20Notes/Release%20Notes%205.67.0.
DP Vulnrichment: References: - https://docs.payara.fish/enterprise/docs/5.67.0/Release%20Notes/Release%20Notes%205.67.0.html - https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.18.0.html
CVE ID: CVE-2024-7313 State: PUBLISHED Published: 2024-08-26T06:00:03.119Z Last Updated: 2024-08-26T17:49:48.236Z Vendors: Unknown Products: Shield Security Problem Types: CWE-352 Cross-Site Request Forgery (CSRF), CWE-79 Cross-Site Scripting (XSS) Description: The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/83a1bdc6-098e-43d5-89e5-f4202ecd78a1/
CVE ID: CVE-2024-7314 State: PUBLISHED Published: 2024-08-02T16:33:54.191Z Last Updated: 2025-11-22T12:13:00.900Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-288 Description: anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/aj-report-swagger - http
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/aj-report-swagger - https://xz.aliyun.com/t/14460 - https://github.com/yuebusao/AJ-REPORT-EXPLOIT - https://github.com/vulhub/vulhub/tree/master/aj-report/CNVD-2024-15077
CVE ID: CVE-2024-7315 State: PUBLISHED Published: 2024-10-02T06:00:02.453Z Last Updated: 2025-08-27T12:00:47.136Z Vendors: Unknown Products: Migration, Backup, Staging Problem Types: CWE-530 Exposure of Backup File to an Unauthorized Control Sphere Description: The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/456b728b-a451-4afb-895f-850ddc4fb589/
CVE ID: CVE-2024-7316 State: PUBLISHED Published: 2024-10-17T21:52:22.864Z Last Updated: 2025-03-25T22:18:09.695Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric CNC M800V Series M800VW, Mitsubishi Electric CNC M800V Series M800VS, Mitsubishi Electric CNC M80V Series M80V, Mitsubishi Electric CNC M80V Series M80VW, Mitsubishi Electric CNC M800 Series M800W, Mitsubishi Electric CNC M800 Series M800S, Mitsubishi Electric CNC M80 Series M80, Mitsubishi Electric CNC M80 Series M80W, Mitsubishi Electric CNC E80 Series E80, Mitsubishi Electric CNC C80 Series C80, Mitsubishi Electric CNC M700V Series M72
Mitsubishi Electric CNC E80 Series E80, Mitsubishi Electric CNC C80 Series C80, Mitsubishi Electric CNC M700V Series M720VW, Mitsubishi Electric CNC M700V Series M730VW, Mitsubishi Electric CNC M700V Series M750VW, Mitsubishi Electric CNC M700V Series M720VS, Mitsubishi Electric CNC M700V Series M730VS, Mitsubishi Electric CNC M700V Series M750VS, Mitsubishi Electric CNC M70V Series M70V, Mitsubishi Electric CNC E70 Series E70, Mitsubishi Electric CNC Software Tools NC Trainer2, Mitsubishi Electric CNC Software Tools NC Trainer2 plus Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthen
roper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-007_en.pdf - https://jvn.jp/vu/JVNVU92054409/index.html
CVE ID: CVE-2024-7317 State: PUBLISHED Published: 2024-08-06T10:59:36.262Z Last Updated: 2024-08-06T14:38:04.192Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: galdub Products: Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager Problem Types: CWE-79 Description: The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce
input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2a2c069-5dc6-45e2-8ca1-842759d541c4?source=cve - https://plugins.trac.wordpress.org/browser/folders/tags/3.0.3/includes/media.replace.php#L1296 - https://wordpress.org/plugins/folders/#developers - https://plugins.trac.wordpress.org/changeset/3130880/#file25 - https://plugins.trac.wordpress.org/changeset/3130880/
CVE ID: CVE-2024-7318 State: PUBLISHED Published: 2024-09-09T18:50:36.583Z Last Updated: 2025-11-21T07:27:47.614Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat build of Keycloak 24 Problem Types: CWE-324 Description: A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period is set to 30 seconds (default). Instead of expiring and deemed unusable around 30 seconds in, the tokens are valid for an additional 30 seconds totaling 1 minute. A one time passcode that is valid longer than its expiration time increases the attack window for malicious acto
minute. A one time passcode that is valid longer than its expiration time increases the attack window for malicious actors to abuse the system and compromise accounts. Additionally, it increases the attack surface because at any given time, two OTPs are valid. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6502 - https://access.redhat.com/errata/RHSA-2024:6503 - https://access.redhat.com/security/cve/CVE-2024-7318 - https://bugzilla.redhat.com/show_bug.cgi?id=2301876
CVE ID: CVE-2024-7319 State: PUBLISHED Published: 2024-08-02T20:36:24.314Z Last Updated: 2025-11-20T20:56:47.430Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0 Problem Types: CWE-200 Description: An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat
nd the CVE-2023-1625 fix applied. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-7319 - https://bugzilla.redhat.com/show_bug.cgi?id=2258810
CVE ID: CVE-2024-7320 State: PUBLISHED Published: 2024-07-31T11:00:08.915Z Last Updated: 2024-07-31T13:05:37.090Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Online Blood Bank Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-27323
e exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273231. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273231 - https://vuldb.com/?ctiid.273231 - https://vuldb.com/?submit.383397 - https://github.com/cl4irv0yance/CVEs/issues/3
CVE ID: CVE-2024-7321 State: PUBLISHED Published: 2024-07-31T11:31:04.313Z Last Updated: 2024-08-01T20:02:24.330Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: itsourcecode Products: Online Blood Bank Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-2732
remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273232 - https://vuldb.com/?ctiid.273232 - https://vuldb.com/?submit.383437 - https://github.com/cl4irv0yance/CVEs/issues/4
CVE ID: CVE-2024-7322 State: PUBLISHED Published: 2025-01-15T07:59:55.430Z Last Updated: 2025-09-16T16:06:38.502Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: silabs.com Products: EmberZNet Problem Types: CWE- Improper Verification of Source of a Communication Channel Description: A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.silabs.com/068Vm00000I7ri2
CVE ID: CVE-2024-7323 State: PUBLISHED Published: 2024-08-02T10:36:51.855Z Last Updated: 2024-08-02T14:02:20.958Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Digiwin Products: EasyFlow .NET Problem Types: CWE-36 Description: Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server . Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7989-9c4ea-1.html - https://www.twcert.org.tw/en/cp-139-7990-87183-2.html
CVE ID: CVE-2024-7324 State: PUBLISHED Published: 2024-07-31T17:31:03.563Z Last Updated: 2024-08-01T13:44:54.887Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IObit Products: iTop Data Recovery Pro Problem Types: CWE-427 Description: A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic_.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The associated identifier of this vulnerability is VDB-273247. NOTE: The vendor was contacted early about th
his attack. The associated identifier of this vulnerability is VDB-273247. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273247 - https://vuldb.com/?ctiid.273247 - https://vuldb.com/?submit.378138
CVE ID: CVE-2024-7325 State: PUBLISHED Published: 2024-07-31T19:31:03.993Z Last Updated: 2024-08-02T19:32:06.378Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IObit Products: Driver Booster Problem Types: CWE-427 Description: A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The identifier of this vulnerability is VDB-273248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addition
ility is VDB-273248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273248 - https://vuldb.com/?ctiid.273248 - https://vuldb.com/?submit.378139