Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24908 State: PUBLISHED Published: 2024-05-08T15:48:07.079Z Last Updated: 2024-08-01T23:36:20.220Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: Data Manager Appliance Software (DMAS) Problem Types: CWE-22 Description: Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000224843/dsa-20
CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000224843/dsa-2024-083-security-update-for-dell-powerprotect-data-manager-appliance-for-multiple-vulnerabilities
CVE ID: CVE-2024-24910 State: PUBLISHED Published: 2024-04-18T17:35:42.688Z Last Updated: 2025-09-29T12:30:45.141Z Vendors: checkpoint Products: ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer Problem Types: CWE-732 Description: A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.checkpoint.com
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.checkpoint.com/results/sk/sk182219
CVE ID: CVE-2024-24911 State: PUBLISHED Published: 2025-02-06T13:46:11.824Z Last Updated: 2025-02-06T14:11:48.901Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: checkpoint Products: Multi-Domain Security Management, Quantum Security Management Problem Types: CWE-125 Description: In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.checkpoint.com/resul
teway's CRL cache. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.checkpoint.com/results/sk/sk183101
CVE ID: CVE-2024-24912 State: PUBLISHED Published: 2024-05-01T13:22:48.486Z Last Updated: 2024-08-01T23:36:20.217Z Vendors: checkpoint Products: Harmony Endpoint Security Client for Windows Problem Types: CWE-732 Description: A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.checkpoint.com/results/sk/sk182244
CVE ID: CVE-2024-24914 State: PUBLISHED Published: 2024-11-07T11:25:53.238Z Last Updated: 2024-11-07T17:33:31.286Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: checkpoint Products: ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management Problem Types: CWE-914 Description: Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.checkpoint.com/results/sk/sk182743
CVE ID: CVE-2024-24915 State: PUBLISHED Published: 2025-06-29T12:02:41.126Z Last Updated: 2025-06-30T13:32:15.417Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: checkpoint Products: Check Point SmartConsole Problem Types: CWE-316 Description: Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.checkpoint.com/results/sk/sk183545
CVE ID: CVE-2024-24916 State: PUBLISHED Published: 2025-06-19T13:17:39.651Z Last Updated: 2025-06-20T13:11:11.641Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: checkpoint Products: Check Point SmartConsole Problem Types: CWE-427 Description: Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.checkpoint.com/results/sk/sk183342
CVE ID: CVE-2024-24919 State: PUBLISHED Published: 2024-05-28T18:22:19.401Z Last Updated: 2025-10-21T23:05:17.408Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: checkpoint Products: Check Point Quantum Gateway, Spark Gateway and CloudGuard Network Problem Types: CWE-200 Description: Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.checkpoint.com/resu
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.checkpoint.com/results/sk/sk182336
CVE ID: CVE-2024-24920 State: PUBLISHED Published: 2024-02-13T09:00:28.317Z Last Updated: 2024-11-07T19:08:38.838Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21710) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
nt process. (ZDI-CAN-21710) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE ID: CVE-2024-24921 State: PUBLISHED Published: 2024-02-13T09:00:29.522Z Last Updated: 2025-05-08T18:26:02.154Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-119 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Catia MODEL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21712) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/prod
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE ID: CVE-2024-24922 State: PUBLISHED Published: 2024-02-13T09:00:30.688Z Last Updated: 2025-03-24T20:15:16.179Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21715) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
nt process. (ZDI-CAN-21715) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE ID: CVE-2024-24923 State: PUBLISHED Published: 2024-02-13T09:00:31.872Z Last Updated: 2025-05-09T18:29:47.332Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted Catia MODEL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22055) Additional Analyst Notes: - CVE Program Contai
er to execute code in the context of the current process. (ZDI-CAN-22055) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE ID: CVE-2024-24924 State: PUBLISHED Published: 2024-02-13T09:00:33.230Z Last Updated: 2025-05-09T18:30:07.278Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22059) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
nt process. (ZDI-CAN-22059) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE ID: CVE-2024-24925 State: PUBLISHED Published: 2024-02-13T09:00:34.363Z Last Updated: 2024-08-01T23:36:20.217Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-824 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
cess. (ZDI-CAN-22060) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE ID: CVE-2024-24926 State: PUBLISHED Published: 2024-02-12T07:09:01.476Z Last Updated: 2025-04-24T15:44:16.766Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: UnitedThemes Products: Brooklyn | Creative Multi-Purpose Responsive WordPress Theme Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/brooklyn/wordpres
ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/brooklyn/wordpress-brooklyn-theme-4-9-7-6-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-24927 State: PUBLISHED Published: 2024-02-12T06:07:09.243Z Last Updated: 2024-08-01T23:36:21.640Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: UnitedThemes Products: Brooklyn | Creative Multi-Purpose Responsive WordPress Theme Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme allows Reflected XSS.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
ress Theme: from n/a through 4.9.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/brooklyn/wordpress-brooklyn-theme-4-9-7-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24928 State: PUBLISHED Published: 2024-02-12T06:00:43.270Z Last Updated: 2024-08-01T23:36:20.578Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Arunas Liuiza Products: Content Cards Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arunas Liuiza Content Cards allows Stored XSS.This issue affects Content Cards: from n/a through 0.9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/content-cards/wordpress-content-cards-plugin-0-9-7-cross-site-scripting-xss-vulnerabilit
tack.com/database/vulnerability/content-cards/wordpress-content-cards-plugin-0-9-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24929 State: PUBLISHED Published: 2024-02-12T08:39:26.798Z Last Updated: 2024-08-21T17:34:14.972Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ryan Duff, Peter Westwood Products: WP Contact Form Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ryan Duff, Peter Westwood WP Contact Form.This issue affects WP Contact Form: from n/a through 1.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-contact-form/wordpress-wp-contact-form-plugin-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24930 State: PUBLISHED Published: 2024-02-12T05:56:45.293Z Last Updated: 2024-08-01T23:36:20.479Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: OTWthemes.com Products: Buttons Shortcode and Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes.Com Buttons Shortcode and Widget allows Stored XSS.This issue affects Buttons Shortcode and Widget: from n/a through 1.16. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/buttons-shortcode-and-widget/wordpress-butto
gram Container: References: - https://patchstack.com/database/vulnerability/buttons-shortcode-and-widget/wordpress-buttons-shortcode-and-widget-plugin-1-16-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24931 State: PUBLISHED Published: 2024-02-12T05:52:26.158Z Last Updated: 2024-08-01T23:36:21.251Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: swadeshswain Products: Before After Image Slider WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in swadeshswain Before After Image Slider WP allows Stored XSS.This issue affects Before After Image Slider WP: from n/a through 2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/before-after-image-slider/wordpress-before-afte
m Container: References: - https://patchstack.com/database/vulnerability/before-after-image-slider/wordpress-before-after-image-slider-wp-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24932 State: PUBLISHED Published: 2024-02-12T05:44:34.932Z Last Updated: 2025-04-24T15:44:37.568Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Djo Products: VK Poster Group Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Djo VK Poster Group allows Reflected XSS.This issue affects VK Poster Group: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/vk-poster-group/wordpress-vk-poster-group-plugin-2-0-3-reflected-cross-site-scripting-xss-vulnerabili
base/vulnerability/vk-poster-group/wordpress-vk-poster-group-plugin-2-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24933 State: PUBLISHED Published: 2024-02-12T05:41:22.413Z Last Updated: 2024-08-01T23:36:20.547Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Prasidhda Malla Products: Honeypot for WP Comment Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prasidhda Malla Honeypot for WP Comment allows Reflected XSS.This issue affects Honeypot for WP Comment: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/honeypot-for-wp-comment/wordpress-honeypot-for-wp-com
ainer: References: - https://patchstack.com/database/vulnerability/honeypot-for-wp-comment/wordpress-honeypot-for-wp-comment-plugin-2-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24934 State: PUBLISHED Published: 2024-05-17T08:50:02.499Z Last Updated: 2024-08-01T23:36:20.548Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Elementor Products: Elementor Website Builder Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Website Builder allows Manipulating Web Input to File System Calls.This issue affects Elementor Website Builder: from n/a through 3.19.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plug
- CVE Program Container: References: - https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-19-0-arbitrary-file-deletion-and-phar-deserialization-vulnerability?_s_id=cve
CVE ID: CVE-2024-24935 State: PUBLISHED Published: 2024-02-12T08:34:13.670Z Last Updated: 2024-11-07T19:19:33.145Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WpSimpleTools Products: Basic Log Viewer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpsimpletools-log-viewer/wordpress-basic-log-viewer-plugin-1-0-4-cross-site-request-forgery-vulnerability?_s_id=cve
CVE ID: CVE-2024-24936 State: PUBLISHED Published: 2024-02-06T09:21:27.544Z Last Updated: 2024-08-01T23:36:21.214Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-285 Description: In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24937 State: PUBLISHED Published: 2024-02-06T09:21:28.375Z Last Updated: 2024-08-01T23:36:21.127Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24938 State: PUBLISHED Published: 2024-02-06T09:21:29.110Z Last Updated: 2025-08-27T15:39:55.233Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24939 State: PUBLISHED Published: 2024-02-06T09:21:29.788Z Last Updated: 2024-08-01T23:36:20.565Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: Rider Problem Types: CWE-532 Description: In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24940 State: PUBLISHED Published: 2024-02-06T09:21:30.488Z Last Updated: 2025-05-15T19:44:43.563Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-23 Description: In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24941 State: PUBLISHED Published: 2024-02-06T09:21:30.981Z Last Updated: 2024-08-01T23:36:20.613Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-20 Description: In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24942 State: PUBLISHED Published: 2024-02-06T09:21:31.426Z Last Updated: 2024-08-01T23:36:21.219Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24943 State: PUBLISHED Published: 2024-02-06T09:21:32.556Z Last Updated: 2024-08-01T23:36:20.594Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: JetBrains Products: Toolbox App Problem Types: CWE-400 Description: In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-24945 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-29T15:02:35.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Share Your Moments parameter at /travel-journal/write-journal.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/cross-site-scripting - https://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.md