Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-30802 State: PUBLISHED Published: 2024-05-10T00:00:00 Last Updated: 2024-11-18T18:23:17.704592 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WarmBrew/web_vul/blob/main/TTX.md - https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-30802.md
CVE ID: CVE-2024-30804 State: PUBLISHED Published: 2024-04-26T00:00:00.000Z Last Updated: 2025-03-14T15:55:13.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-30804
CVE ID: CVE-2024-30806 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-09-04T15:46:27.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42aac. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/914 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-30806
CVE ID: CVE-2024-30807 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-10-30T17:57:35.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/937 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-30807
CVE ID: CVE-2024-30808 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-10-31T15:35:14.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_SubStream::~AP4_SubStream at Ap4ByteStream.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/937 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-30808
CVE ID: CVE-2024-30809 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-08-02T01:39:00.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of Service (DoS), as demonstrated by mp42ts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/937 - https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-30809
CVE ID: CVE-2024-30840 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-15T18:34:15.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V15.03.05.18/fromDhcpListClient_list1.md
CVE ID: CVE-2024-30845 State: PUBLISHED Published: 2024-04-12T00:00:00 Last Updated: 2024-08-21T13:35:20.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/netcccyun/pan/issues/6 - https://gist.github.com/Zshan7que/c813f2b52daab08c9fb4f6c6b8178b66
CVE ID: CVE-2024-30848 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T01:39:00.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Excis3/CVE-Disclosure/blob/main/CVE-2024-30848.md
CVE ID: CVE-2024-30849 State: PUBLISHED Published: 2024-04-05T00:00:00 Last Updated: 2024-08-02T01:39:00.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wkeyi0x1/vul-report/issues/3
CVE ID: CVE-2024-30850 State: PUBLISHED Published: 2024-04-12T00:00:00 Last Updated: 2024-08-21T19:54:25.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in tiagorlampert CHAOS v5.0.1 allows a remote attacker to execute arbitrary code via the BuildClient function within client_service.go Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents/
CVE ID: CVE-2024-30851 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-11-25T15:11:00.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/codesiddhant/Jasmin-Ransomware - https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc
CVE ID: CVE-2024-30858 State: PUBLISHED Published: 2024-04-01T00:00:00.000Z Last Updated: 2025-03-25T14:33:43.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-edit_fire_wall.md
CVE ID: CVE-2024-30859 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-16T18:21:48.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-config_ISCGroupSSLCert.md
CVE ID: CVE-2024-30860 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-19T16:26:40.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-export_excel_user.md
CVE ID: CVE-2024-30861 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-11-22T19:14:24.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-ipsec_guide_1.md
CVE ID: CVE-2024-30862 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-02T01:39:00.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md
CVE ID: CVE-2024-30863 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-11-06T20:16:52.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-history.md
CVE ID: CVE-2024-30864 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-12-04T21:04:23.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-config_ISCGroupTimePolicy.md
CVE ID: CVE-2024-30865 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-27T16:21:38.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-edit_user_login.md
CVE ID: CVE-2024-30866 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-02T01:39:00.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-menu.md
CVE ID: CVE-2024-30867 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-27T16:11:56.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-edit_virtual_site_info.md
CVE ID: CVE-2024-30868 State: PUBLISHED Published: 2024-04-01T00:00:00.000Z Last Updated: 2025-03-25T14:34:13.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-add_getlogin.md
CVE ID: CVE-2024-30870 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-16T18:22:59.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-address_interpret.md
CVE ID: CVE-2024-30871 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-08-19T16:27:02.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-applyhardware.md
CVE ID: CVE-2024-30872 State: PUBLISHED Published: 2024-04-01T00:00:00 Last Updated: 2024-11-15T20:01:51.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-authrp.md
CVE ID: CVE-2024-30875 State: PUBLISHED Published: 2024-10-17T00:00:00 Last Updated: 2024-10-25T15:44:23.992390 Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, and because the exploitation example does not indicate whether, or how, the example website is using jQuery UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ant1sec-ops/CVE-2024-30875
CVE ID: CVE-2024-30878 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-08-02T01:39:00.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the upload_drive parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jianyan74/rageframe2/issues/111
CVE ID: CVE-2024-30879 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-10-27T02:18:15.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the boxId parameter in the image cropping function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jianyan74/rageframe2/issues/114
CVE ID: CVE-2024-30880 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-08-02T01:39:00.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jianyan74/rageframe2/issues/114
CVE ID: CVE-2024-30883 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-11-04T14:50:36.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the aspectRatio parameter in the image cropping function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jianyan74/rageframe2/issues/114
CVE ID: CVE-2024-30884 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-08-02T01:39:00.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/28
CVE ID: CVE-2024-30885 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-10-30T17:58:41.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/29
CVE ID: CVE-2024-30886 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-07T14:39:07.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hebing123/cve/issues/30
CVE ID: CVE-2024-30889 State: PUBLISHED Published: 2024-06-04T21:39:47.159Z Last Updated: 2025-02-13T15:47:50.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widget_type, request_id, payload parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/robymontyz/pocs/blob/main/AudimexEE/ReflectedXSS.md
CVE ID: CVE-2024-30890 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-11-04T14:47:50.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/rootlili/198922ef72c9bef973e04eb6b36a8aad
CVE ID: CVE-2024-30891 State: PUBLISHED Published: 2024-04-05T00:00:00 Last Updated: 2024-08-19T19:16:28.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Lantern-r/IoT-vuln/blob/main/Tenda/AC18/formexeCommand.md
CVE ID: CVE-2024-30896 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-12-03T21:03:13.616920 Vendors: n/a Products: n/a Problem Types: n/a Description: InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and Clustered are not affected. NOTE: The researcher states that InfluxDB allows allAccess administrators to retrieve all raw tokens via an "influx auth ls" command. The supplier indicates that the organizations feature is operating as
ve all raw tokens via an "influx auth ls" command. The supplier indicates that the organizations feature is operating as intended and that users may choose to add users to non-default organizations. A future release of InfluxDB 2.x will remove the ability to retrieve tokens from the API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/influxdata/influxdb/issues/24797 - https://github.com/XenoM0rph97/CVE-2024-30896
CVE ID: CVE-2024-30915 State: PUBLISHED Published: 2024-04-11T00:00:00.000Z Last Updated: 2025-03-25T15:33:20.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service and obtain sensitive information via the max_samples parameter within the DataReaderQoS component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenDDS/OpenDDS/issues/4527
CVE ID: CVE-2024-30916 State: PUBLISHED Published: 2024-04-11T00:00:00.000Z Last Updated: 2025-02-10T22:45:11.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted max_samples parameter in DurabilityService QoS component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/issues/4609
CVE ID: CVE-2024-30917 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-08-02T01:39:00.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted history_depth parameter in DurabilityService QoS component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eProsima/Fast-DDS/issues/4609
CVE ID: CVE-2024-30920 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:35.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30921 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:36.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30922 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:37.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30923 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:38.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30924 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:39.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30925 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:41.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE ID: CVE-2024-30926 State: PUBLISHED Published: 2024-04-18T00:00:00.000Z Last Updated: 2025-11-04T18:30:42.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chocapikk.com/posts/2024/derbynet-vulnerabilities/