Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ipt code in the browser of a user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-1010 - https://research.splunk.com/application/d4f55f7c-6518-4122-a197-951fe0f21b25/
CVE ID: CVE-2024-45741 State: PUBLISHED Published: 2024-10-14T17:03:33.986Z Last Updated: 2025-02-28T11:04:00.392Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Splunk Products: Splunk Enterprise, Splunk Cloud Platform Problem Types: CWE-79 Description: In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create a malicious payload through a custom configuration file that the "api.uri" parameter from the "/manager/search/apps/local" endpoint in Splunk Web calls. This could result in execution of unauthori
arameter from the "/manager/search/apps/local" endpoint in Splunk Web calls. This could result in execution of unauthorized JavaScript code in the browser of a user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-1011 - https://research.splunk.com/application/d7b5aa71-157f-4359-9c34-e35752b1d0a2/
CVE ID: CVE-2024-45744 State: PUBLISHED Published: 2024-09-27T15:56:11.980Z Last Updated: 2025-10-02T14:09:27.993Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: TopQuadrant Products: TopBraid EDG Problem Types: CWE-257, CWE-312 Description: TopQuadrant TopBraid EDG stores external credentials insecurely. An authenticated attacker with file system access can read edg-setup.properites and obtain the secret to decrypt external passwords stored in edg-vault.properties. An authenticated attacker could gain file system access using a separate vulnerability such as CVE-2024-45745. At least version 7.1.3 is affected. Version 7.3 adds HashiCorp Vault integration that do
ability such as CVE-2024-45745. At least version 7.1.3 is affected. Version 7.3 adds HashiCorp Vault integration that does not store external passwords locally. Version 8.3.0 warns when using plain text secrets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2024/va-24-254-02.json - https://www.topquadrant.com/doc/latest/reference/PasswordManagementAdminPage.html - https://www.topquadrant.com/doc/latest/administrator_guide/edg_installation_and_authentication/hashicorp_integration.html - https://www.topquadrant.com/release-note/7-3/ - https://www.topquadrant.com/wp-content/uploads/2025/02/changes-8.3.
ml - https://www.topquadrant.com/release-note/7-3/ - https://www.topquadrant.com/wp-content/uploads/2025/02/changes-8.3.0.txt
CVE ID: CVE-2024-45745 State: PUBLISHED Published: 2024-09-27T15:57:59.876Z Last Updated: 2024-09-27T17:43:27.032Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: TopQuadrant Products: TopBraid EDG Problem Types: CWE-611 Description: TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2024/va-24-254-02.json - https://www.topquadrant.com/wp-content/uploads/2024/06/changelo
SAF/develop/csaf_files/IT/white/2024/va-24-254-02.json - https://www.topquadrant.com/wp-content/uploads/2024/06/changelog-8.0.1.txt
CVE ID: CVE-2024-45746 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-10T17:13:21.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Trusted Firmware-M through 2.1.0. User provided (and controlled) mailbox messages contain a pointer to a list of input arguments (in_vec) and output arguments (out_vec). These list pointers are never validated. Each argument list contains a buffer pointer and a buffer length field. After a PSA call, the length of the output arguments behind the unchecked pointer is updated in mailbox_direct_reply, regardless of the call result. This allows an attacker to write anywhere in the secure firmware, which
ox_direct_reply, regardless of the call result. This allows an attacker to write anywhere in the secure firmware, which can be used to take over the control flow, leading to remote code execution (RCE). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.trustedfirmware.org/projects/tf-m/ - https://trustedfirmware-m.readthedocs.io/en/latest/security/security_advisories/user_pointers_mailbox_vectors_vulnerability.html
CVE ID: CVE-2024-45750 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-26T19:02:46.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thegreenbow.com - htt
d establishes the tunnel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thegreenbow.com - https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024
CVE ID: CVE-2024-45751 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-11-30T12:04:02.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fujita/tgt/pull/67 - https://github.com/fujita/tgt/compare/v1.0.92...v1.0.93 - https://www.openwall.com/lists/oss-security/2024/09/07/2
CVE ID: CVE-2024-45752 State: PUBLISHED Published: 2024-09-19T00:00:00 Last Updated: 2024-09-20T13:14:08.991Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AC:L/AV:L/A:L/C:H/I:H/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1226598 - https://github.com/PixlOne/logiops/releases
CVE ID: CVE-2024-45753 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-08-26T15:28:07.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mahara.org - https://mahara.org/interaction/forum/topic.php?id=9594
CVE ID: CVE-2024-45754 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T15:59:32.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to authenticated users with high-privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://www.algosecure.fr/actualites/blog - https://thewatch.centreon.com/latest-
ithub.com/centreon/centreon/releases - https://www.algosecure.fr/actualites/blog - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45754-centreon-mbi-high-severity-3888
CVE ID: CVE-2024-45755 State: PUBLISHED Published: 2024-11-25T00:00:00 Last Updated: 2024-11-26T15:15:00.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated users with high-privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45755-centreon-ds
b.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45755-centreon-dsm-high-severity-4066
CVE ID: CVE-2024-45756 State: PUBLISHED Published: 2024-11-25T00:00:00 Last Updated: 2024-11-25T18:26:43.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to create a ticket. Exploitation is only accessible to authenticated users with high-privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/release - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45756-centreon-open-tickets-h
eon/centreon/release - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45756-centreon-open-tickets-high-severity-4064
CVE ID: CVE-2024-45757 State: PUBLISHED Published: 2024-12-03T00:00:00.000Z Last Updated: 2025-05-02T16:23:16.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. SQL injection can occur in the user-settings form. Exploitation is only accessible to authenticated users with high-privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45757-centreon-bam-high-severity-4123?tid=4123
CVE ID: CVE-2024-45758 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-06T17:59:17.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access to post to the ImportSQLTable URI with a JSON document containing a connection_url property with any typical JDBC Connection URL attack payload such as one that uses queryInterceptors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://spear-shield.notion.site/Unauthenticated-Remote-Code-Execution-via-Unrest
- CISA ADP Vulnrichment: References: - https://spear-shield.notion.site/Unauthenticated-Remote-Code-Execution-via-Unrestricted-JDBC-Connection-87a958a4874044199cbb86422d1f6068 - https://gist.github.com/AfterSnows/c24ca3c26dc89ab797e610e92a6a9acb
CVE ID: CVE-2024-45759 State: PUBLISHED Published: 2024-11-08T02:48:42.259Z Last Updated: 2024-11-08T15:56:51.934Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-266 Description: Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of privilege vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to unauthorized execution of certain commands to overwrite system config of the application. Exploitation may lead to denial of service of system. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
cation. Exploitation may lead to denial of service of system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-for-dell-powerprotect-dd-vulnerabilityowerprotect-dd-vulnerability
CVE ID: CVE-2024-45760 State: PUBLISHED Published: 2024-12-09T16:17:41.785Z Last Updated: 2024-12-09T17:55:44.493Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: Dell OpenManage Server Administrator Problem Types: CWE-862 Description: Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper access control vulnerability. A remote low privileged user could potentially exploit this vulnerability via the HTTP GET method leading to unauthorized action with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258320/dsa-2024-481-security-upda
es: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258320/dsa-2024-481-security-update-for-dell-openmanage-server-administrator-omsa-vulnerability
CVE ID: CVE-2024-45761 State: PUBLISHED Published: 2024-12-09T16:12:46.569Z Last Updated: 2024-12-09T17:56:08.151Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dell Products: Dell OpenManage Server Administrator Problem Types: CWE-20 Description: Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input validation vulnerability. A remote low-privileged malicious user could potentially exploit this vulnerability to load any web plugins or Java class leading to the possibility of altering the behavior of certain apps/OS or Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell
certain apps/OS or Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258320/dsa-2024-481-security-update-for-dell-openmanage-server-administrator-omsa-vulnerability
CVE ID: CVE-2024-45763 State: PUBLISHED Published: 2024-11-08T16:15:34.861Z Last Updated: 2024-11-13T18:39:26.443Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Enterprise SONiC OS Problem Types: CWE-78 Description: Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: -
severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000245655/dsa-2024-449-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities
CVE ID: CVE-2024-45764 State: PUBLISHED Published: 2024-11-08T16:08:01.769Z Last Updated: 2024-11-08T17:03:26.047Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Enterprise SONiC OS Problem Types: CWE-304 Description: Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000245655/dsa-2024-449-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities
CVE ID: CVE-2024-45765 State: PUBLISHED Published: 2024-11-08T15:59:33.760Z Last Updated: 2024-11-08T17:03:50.218Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Enterprise SONiC OS Problem Types: CWE-78 Description: Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell reco
severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000245655/dsa-2024-449-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities
CVE ID: CVE-2024-45766 State: PUBLISHED Published: 2024-10-17T01:59:55.255Z Last Updated: 2024-10-17T20:35:55.207Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell OpenManage Enterprise Problem Types: CWE-94 Description: Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237300/dsa-2024-426-security-update-for-dell-openmanage-en
nt: References: - https://www.dell.com/support/kbdoc/en-us/000237300/dsa-2024-426-security-update-for-dell-openmanage-enterprise-vulnerabilities
CVE ID: CVE-2024-45767 State: PUBLISHED Published: 2024-10-17T02:05:22.223Z Last Updated: 2024-10-17T20:30:26.595Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Dell OpenManage Enterprise Problem Types: CWE-89 Description: Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237300/dsa-2024-426
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237300/dsa-2024-426-security-update-for-dell-openmanage-enterprise-vulnerabilities
CVE ID: CVE-2024-45769 State: PUBLISHED Published: 2024-09-19T08:45:06.247Z Last Updated: 2025-11-20T19:06:14.387Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red H
prise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-787 Description: A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.
ause the program to misbehave or crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6837 - https://access.redhat.com/errata/RHSA-2024:6840 - https://access.redhat.com/errata/RHSA-2024:6842 - https://access.redhat.com/errata/RHSA-2024:6843 - https://access.redhat.com/errata/RHSA-2024:6844 - https://access.redhat.com/errata/RHSA-2024:6846 - https://access.redhat.com/errata/RHSA-2024:6847 - https://access.redhat.com/errata/RHSA-2024:6848 - https://access.redhat.com/errata/RHSA-2024:9452 - https://access.redhat.com/security/cve/CVE-2024-45769 - https://bugzilla.redhat.com/show_bug.cgi?id=2310452
CVE ID: CVE-2024-45770 State: PUBLISHED Published: 2024-09-19T08:45:37.303Z Last Updated: 2025-11-20T19:06:09.494Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red H
prise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-59 Description: A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it
ount. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6837 - https://access.redhat.com/errata/RHSA-2024:6840 - https://access.redhat.com/errata/RHSA-2024:6842 - https://access.redhat.com/errata/RHSA-2024:6843 - https://access.redhat.com/errata/RHSA-2024:6844 - https://access.redhat.com/errata/RHSA-2024:6846 - https://access.redhat.com/errata/RHSA-2024:6847 - https://access.redhat.com/errata/RHSA-2024:6848 - https://access.redhat.com/errata/RHSA-2024:9452 - https://access.redhat.com/secur
ess.redhat.com/errata/RHSA-2024:6848 - https://access.redhat.com/errata/RHSA-2024:9452 - https://access.redhat.com/security/cve/CVE-2024-45770 - https://bugzilla.redhat.com/show_bug.cgi?id=2310451
CVE ID: CVE-2024-45771 State: PUBLISHED Published: 2024-09-06T00:00:00 Last Updated: 2024-09-09T14:47:15.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenRapid/rapidcms/issues/17