Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-44807 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T20:37:57.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://basercms.com - http://burgereditor.com - https://burger.d-zero.co.jp/blogs/archives/2 - https://jvn.jp/en/jp/JVN54676967/ - https://jvn.jp/jp/JVN54676967/ - https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000109.html
CVE ID: CVE-2024-44808 State: PUBLISHED Published: 2024-09-04T00:00:00 Last Updated: 2024-09-04T18:08:27.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Vypor Attack API System v.1.0 allows a remote attacker to execute arbitrary code via the user GET parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Vypor/Vypors-Attack-API-System - https://jacobmasse.medium.com/cve-2024-44808-remote-command-execution-in-vypor-ddos-attack-api-1ed073725595
CVE ID: CVE-2024-44809 State: PUBLISHED Published: 2024-09-03T00:00:00 Last Updated: 2024-09-04T13:35:17.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that includes malicious command sequences, allowing arbitrary commands to be executed on the server with the privileges of the web server user. This vulnerability is exploitable remotely and poses significant risk if the application is e
es of the web server user. This vulnerability is exploitable remotely and poses significant risk if the application is exposed to untrusted networks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/recantha/camera-pi/blob/ef018d212288cb16404f0b050593d20f0dc0467b/www/tilt.php#L4 - https://jacobmasse.medium.com/cve-2024-44809-remote-code-execution-in-raspberry-pi-camera-project-4b8e3486a628
CVE ID: CVE-2024-44812 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-23T15:04:59.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/b1u3st0rm/CVE-2024-44812-PoC
CVE ID: CVE-2024-44815 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T21:11:56.393560 Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nitinronge91/Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
CVE ID: CVE-2024-44817 State: PUBLISHED Published: 2024-09-04T00:00:00 Last Updated: 2024-09-04T16:15:11.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44817%20ZZCMS2023SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
CVE ID: CVE-2024-44818 State: PUBLISHED Published: 2024-09-04T00:00:00 Last Updated: 2024-09-04T16:08:23.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer header of the caina.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44818%20ZZCMS2023%E5%8F%8D%E5%B0%84%E5%9E%8BXSS3.md
CVE ID: CVE-2024-44819 State: PUBLISHED Published: 2024-09-04T00:00:00.000Z Last Updated: 2025-03-13T17:44:09.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/del.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44819%20ZZCMS2023%E5%8F%8D%E5%B0%84%E5%9E%8BXSS4.md
CVE ID: CVE-2024-44820 State: PUBLISHED Published: 2024-09-04T00:00:00 Last Updated: 2024-09-04T18:20:44.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo() function, which exposes detailed information about the PHP environment, including server configuration, loaded modules, and environment variables. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44820%20ZZCMS2023%20ph
- CISA ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44820%20ZZCMS2023%20phpinfo%E6%B3%84%E9%9C%B2.md
CVE ID: CVE-2024-44821 State: PUBLISHED Published: 2024-09-04T00:00:00 Last Updated: 2024-09-04T16:25:43.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha response, allowing them to capture the correct captcha value through error messages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44821%20ZZCMS2023%20%E9%AA%8C%
ADP Vulnrichment: References: - https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44821%20ZZCMS2023%20%E9%AA%8C%E8%AF%81%E7%A0%81%E5%A4%8D%E7%94%A8%E9%80%BB%E8%BE%91%E6%BC%8F%E6%B4%9E.md
CVE ID: CVE-2024-44825 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-26T15:56:34.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attackers to write arbitrary files unto the system via a crafted .inv3 file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/invesalius/invesalius3 - https://github.com/partywavesec/invesalius3_vulnerabilities/tree/main/CVE-2024-44825
CVE ID: CVE-2024-44837 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-06T13:53:58.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kaput-raptorex-7c1.notion.site/drug-1-0-DOM-based-cross-site-scripting-fae620f769304f67a7488a961d048672
CVE ID: CVE-2024-44838 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-09T13:51:07.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenRapid/rapidcms/issues/17
CVE ID: CVE-2024-44839 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-09T14:48:33.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenRapid/rapidcms/issues/18
CVE ID: CVE-2024-44843 State: PUBLISHED Published: 2025-04-15T00:00:00.000Z Last Updated: 2025-04-16T18:33:08.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/steve-community/steve/issues/1546 - https://github.com/steve-community/steve/blob/master/src/main/java/de/rwth/idsg/steve/ocpp/ws/OcppWebSocketHandshakeHandler.java - https://gist.github.com/Badranh/94359664799db6d4709871f0c353f476
CVE ID: CVE-2024-44844 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-10T16:47:57.554584 Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/3okfc/IOT-VUL-WP/blob/main/DaryTek/vigor3900_1.md
CVE ID: CVE-2024-44845 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-10T16:50:04.104132 Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/3okfc/IOT-VUL-WP/blob/main/DaryTek/vigor3900_2.md
CVE ID: CVE-2024-44849 State: PUBLISHED Published: 2024-09-09T00:00:00.000Z Last Updated: 2025-06-12T16:31:23.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/extencil/CVE-2024-44849?tab=readme-ov-file - https://blog.extencil.me/information-security/cves/cve-2024-44849 - https://www.qualitor.com.br/official-security-advisory-cve-2024-44849
CVE ID: CVE-2024-44851 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T17:29:22.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0xashfaq/File-Sharing-module-for-Perfex-CRM-XSS/ - https://gist.github.com/0xashfaq/e44a6dece3be498241aebcfaa046e634
CVE ID: CVE-2024-44852 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T20:20:23.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/pull/4463 - https://github.com/open-navigation/navigation2/issues/4464 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-44853 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T20:22:31.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/issues/4547 - https://github.com/ros-navigation/navigation2/pull/4548 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-44854 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T20:24:29.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/issues/4538 - https://github.com/ros-navigation/navigation2/pull/4544 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-44855 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T20:29:38.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/pull/4463 - https://github.com/open-navigation/navigation2/issues/4466 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-44856 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T20:30:55.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/pull/4463 - https://github.com/ros-navigation/navigation2/issues/4468 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-44859 State: PUBLISHED Published: 2024-09-04T00:00:00 Last Updated: 2024-09-04T16:04:00.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ha0-Y/IoT/blob/main/tenda-F1201/WrlExtraGet.md
CVE ID: CVE-2024-44860 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-26T18:06:56.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solvait.com/ - https://gist.github.com/walhajri/e03974097d1fd4eb698a6a80931bdd45
CVE ID: CVE-2024-44866 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:30:27.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to to execute arbitrary code or cause a Denial of Service (DoS) via opening a crafted GuitarPro file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://musescore.org/ko/download/musescore.msi - https://github.com/moonadon9/CVE_2024
CVE ID: CVE-2024-44867 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T15:12:09.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ChengZyin/Exploit/blob/ChengZyin-patch-1/README.md - https://github.com/ChengZyin/CVE-2024-44867/blob/main/CVE-2024-44867.md
CVE ID: CVE-2024-44871 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T19:41:08.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moziloDasEinsteigerCMS/mozilo3.0 - https://github.com/sec-fortress/Exploits/tree/main/CVE-2024-44871
CVE ID: CVE-2024-44872 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T19:32:13.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moziloDasEinsteigerCMS/mozilo3.0 - https://github.com/sec-fortress/Exploits/tree/main/CVE-2024-44872
CVE ID: CVE-2024-44893 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T19:17:18.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/JimuReport/issues/2904
CVE ID: CVE-2024-44902 State: PUBLISHED Published: 2024-09-09T00:00:00 Last Updated: 2024-09-10T19:43:39.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://thinkphp.com - https://github.com/fru1ts/CVE-2024-44902
CVE ID: CVE-2024-44903 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-25T13:23:08.277Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SirsiDynix Products: IPAC20 Problem Types: CWE-89 Description: SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.artresilia.com/cve-2024-44903-sql-injection-vulnerability-in-horizon-information-portal/
CVE ID: CVE-2024-44905 State: PUBLISHED Published: 2025-06-12T00:00:00.000Z Last Updated: 2025-06-17T19:10:12.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/go-pg/pg - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Paul%20Gerste%20-%20SQL%20Injection%20Isn%27t%20Dead%20Smuggling%20Queries%20at%20the%20Protocol%20Level.pdf - https://github.com/go-pg/pg/blob/30e7053c6cacdd44d06cf2b92183b49188b7c922/types/append_value.go#L151 - https://w
l.pdf - https://github.com/go-pg/pg/blob/30e7053c6cacdd44d06cf2b92183b49188b7c922/types/append_value.go#L151 - https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/
CVE ID: CVE-2024-44906 State: PUBLISHED Published: 2025-06-12T00:00:00.000Z Last Updated: 2025-08-13T13:57:44.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Paul%20Gerste%20-%20SQL%20Injection%20Isn%27t%20Dead%20Smuggling%20Queries%20at%20the%20Protocol%20Level.pdf - https://github.com/uptrace/bun/tree/master/driver/pgdriver - http
muggling%20Queries%20at%20the%20Protocol%20Level.pdf - https://github.com/uptrace/bun/tree/master/driver/pgdriver - https://github.com/uptrace/bun/blob/1573ae7c2fffad1a7f72fd2d205e924b2fd4043b/driver/pgdriver/format.go#L62 - https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/ - https://github.com/advisories/GHSA-h4h6-vccr-44h2
CVE ID: CVE-2024-44910 State: PUBLISHED Published: 2024-09-27T00:00:00.000Z Last Updated: 2025-03-19T14:40:36.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/issues/268 - https://visionspace.com/crashing-cryptolib/
CVE ID: CVE-2024-44911 State: PUBLISHED Published: 2024-09-27T00:00:00.000Z Last Updated: 2025-03-18T20:50:31.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/issues/268 - https://visionspace.com/crashing-cryptolib/
CVE ID: CVE-2024-44912 State: PUBLISHED Published: 2024-09-27T00:00:00.000Z Last Updated: 2025-03-17T21:31:32.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/issues/268 - https://visionspace.com/crashing-cryptolib/
CVE ID: CVE-2024-44913 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-08-28T18:16:32.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yuhano/irfanview_Poc
CVE ID: CVE-2024-44914 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-08-28T18:16:45.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yuhano/irfanview_Poc
CVE ID: CVE-2024-44915 State: PUBLISHED Published: 2024-08-28T00:00:00 Last Updated: 2024-08-28T18:14:52.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yuhano/irfanview_Poc
CVE ID: CVE-2024-44916 State: PUBLISHED Published: 2024-08-30T00:00:00 Last Updated: 2024-08-30T16:42:55.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://seacms.com - https://github.com/seacms-net - https://github.com/nn0nkey/nn0nkey/blob/main/CVE-2024-44916.md
CVE ID: CVE-2024-44918 State: PUBLISHED Published: 2024-08-30T00:00:00 Last Updated: 2024-08-30T17:22:18.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nn0nkey/nn0nkey/blob/main/CVE-2024-44918.md