Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-41550 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T04:46:51.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice_items.php?id= . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-2.md
CVE ID: CVE-2024-41551 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-08-02T04:46:51.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md
CVE ID: CVE-2024-41564 State: PUBLISHED Published: 2024-08-28T00:00:00.000Z Last Updated: 2025-03-26T14:22:35.476Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/6d691b62c37fc37b03b0784917064df6 - https://github.com/emilyploszaj/e
nt: References: - https://gist.github.com/apple502j/6d691b62c37fc37b03b0784917064df6 - https://github.com/emilyploszaj/emi/blob/1.21/xplat/src/main/java/dev/emi/emi/network/FillRecipeC2SPacket.java
CVE ID: CVE-2024-41565 State: PUBLISHED Published: 2024-08-28T00:00:00.000Z Last Updated: 2025-03-19T14:45:46.018Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/05123abb1d1c89c31afde15a9b34e2ae - https://github.com/mezz/JustEnoughItems/commit/99ff43ba1009c44c6
github.com/apple502j/05123abb1d1c89c31afde15a9b34e2ae - https://github.com/mezz/JustEnoughItems/commit/99ff43ba1009c44c6d935e2ab8a6c9292bb12873
CVE ID: CVE-2024-41570 State: PUBLISHED Published: 2024-08-09T00:00:00 Last Updated: 2024-08-09T19:16:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.chebuya.com/posts/server-side-request-forgery-on-havoc-c2/
CVE ID: CVE-2024-41572 State: PUBLISHED Published: 2024-08-21T00:00:00.000Z Last Updated: 2025-03-18T18:15:09.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Learning with Texts (LWT) 2.0.3 is vulnerable to Cross Site Scripting (XSS). The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user credentials or execute actions such as injecting malicious scripts or redirecting users to malicious sites. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/%40ChadSecurity/cve-2024-41572-6839
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/%40ChadSecurity/cve-2024-41572-68397fae354b
CVE ID: CVE-2024-41577 State: PUBLISHED Published: 2024-08-09T00:00:00 Last Updated: 2024-11-05T22:06:14.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute arbitrary code via uploading a crafted PNG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SENVIEL/learun-upload_file/issues/1
CVE ID: CVE-2024-41579 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2024-12-11T16:43:55.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DTStack/Taier/issues/1184 - https://gist.github.com/nerowander/380707503cfb078cbd6bed9fc9b12ad9
CVE ID: CVE-2024-41583 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T18:35:30.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41584 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T18:33:32.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41585 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-04T19:15:28.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject arbitrary commands into the host machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41586 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T20:29:13.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attacker to execute arbitrary code via a long query string to the cgi-bin/ipfedr.cgi component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41587 State: PUBLISHED Published: 2024-10-03T00:00:00.000Z Last Updated: 2025-03-18T15:15:51.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41588 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-04T19:09:42.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41589 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T20:31:05.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41590 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T20:38:44.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41591 State: PUBLISHED Published: 2024-10-03T00:00:00.000Z Last Updated: 2025-03-14T15:36:23.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41592 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T18:59:51.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41593 State: PUBLISHED Published: 2024-10-03T00:00:00.000Z Last Updated: 2025-03-13T18:11:33.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41594 State: PUBLISHED Published: 2024-10-03T00:00:00.000Z Last Updated: 2025-03-19T15:38:27.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41595 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T19:03:42.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41596 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-03T19:04:38.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.forescout.com/resources/draytek14-vulnerabilities - https://www.forescout.com/resources/draybreak-draytek-research/
CVE ID: CVE-2024-41597 State: PUBLISHED Published: 2024-07-19T00:00:00 Last Updated: 2024-08-02T04:46:51.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/DefensiumDevelopers/608be4d10b016dce0566925368a8b08c#file-cve-2024-41597-md
CVE ID: CVE-2024-41599 State: PUBLISHED Published: 2024-07-19T00:00:00.000Z Last Updated: 2025-03-19T17:43:50.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41599
CVE ID: CVE-2024-41600 State: PUBLISHED Published: 2024-07-19T00:00:00.000Z Last Updated: 2025-03-18T20:11:11.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41600
CVE ID: CVE-2024-41601 State: PUBLISHED Published: 2024-07-19T00:00:00.000Z Last Updated: 2025-03-13T14:27:38.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41601
CVE ID: CVE-2024-41602 State: PUBLISHED Published: 2024-07-19T00:00:00 Last Updated: 2024-08-02T04:46:52.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41602
CVE ID: CVE-2024-41603 State: PUBLISHED Published: 2024-07-19T00:00:00 Last Updated: 2024-08-02T04:46:52.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41603
CVE ID: CVE-2024-41605 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-27T12:55:43.863262 Vendors: n/a Products: n/a Problem Types: n/a Description: In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.foxit.com/support/security-bulletins.html
CVE ID: CVE-2024-41610 State: PUBLISHED Published: 2024-07-30T00:00:00 Last Updated: 2024-08-02T04:46:52.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Nop3z/CVE/blob/main/dlink/dir-820/Dlink-820LW-hardcoded-vulnerability.md
CVE ID: CVE-2024-41611 State: PUBLISHED Published: 2024-07-30T00:00:00 Last Updated: 2024-08-02T04:46:52.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Nop3z/CVE/blob/main/dlink/dir-820/Dlink-860L-hardcoded-vulnerability.md
CVE ID: CVE-2024-41613 State: PUBLISHED Published: 2024-08-13T00:00:00 Last Updated: 2024-08-14T15:58:21.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OoLs5/VulDiscovery/blob/main/symphony_xss_vul.pdf
CVE ID: CVE-2024-41614 State: PUBLISHED Published: 2024-08-13T00:00:00.000Z Last Updated: 2025-03-18T19:30:19.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OoLs5/VulDiscovery/blob/main/Symphony_CMS_XSS.pdf
CVE ID: CVE-2024-41616 State: PUBLISHED Published: 2024-08-06T00:00:00 Last Updated: 2024-08-06T15:58:09.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LYaoBoL/IOTsec/blob/main/D-Link/DIR300/D-Link300.md - https://github.com/LYaoBoL/IOTsec/blob/main/D-Link/DIR300/CVE-2024-41616
CVE ID: CVE-2024-41617 State: PUBLISHED Published: 2024-10-24T00:00:00 Last Updated: 2024-10-29T17:02:54.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control. The `redirect_if_not_loggedin` function in `functions_security.php` fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary files, potentially leading to Remote Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moneymanagerex/web-money-manager-ex/issues/51 - https://youtu.be/JaOrlT9G3yo?t=88 - http
eferences: - https://github.com/moneymanagerex/web-money-manager-ex/issues/51 - https://youtu.be/JaOrlT9G3yo?t=88 - https://github.com/moneymanagerex/web-money-manager-ex/commit/f2850b295ee21bc299799343a3bc4d004d05651d - https://github.com/moneymanagerex/web-money-manager-ex/releases/tag/v1.2.3
CVE ID: CVE-2024-41618 State: PUBLISHED Published: 2024-10-24T00:00:00 Last Updated: 2024-10-29T17:06:06.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to improper sanitization of user input in the `TrDeleteArr` parameter, which is directly incorporated into an SQL query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moneymanagerex/web-money-manager-ex/issues/51 - https://www.youtube.com/watch?v=JaOrlT9G3yo - https://github.com/moneymanagerex/web-money-manager-ex/commit/f2850b295ee21bc29
://www.youtube.com/watch?v=JaOrlT9G3yo - https://github.com/moneymanagerex/web-money-manager-ex/commit/f2850b295ee21bc299799343a3bc4d004d05651d - https://github.com/moneymanagerex/web-money-manager-ex/releases/tag/v1.2.3
CVE ID: CVE-2024-41622 State: PUBLISHED Published: 2024-08-27T00:00:00 Last Updated: 2024-08-27T17:20:29.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W - https://github.com/yali-1002/some-poc/blob/main/CVE-2024-41622
CVE ID: CVE-2024-41623 State: PUBLISHED Published: 2024-08-13T00:00:00.000Z Last Updated: 2025-03-18T20:41:27.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d3d.com - https://github.com/Anonymous120386/Anonymous
CVE ID: CVE-2024-41624 State: PUBLISHED Published: 2024-07-29T00:00:00 Last Updated: 2024-12-05T20:32:59.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an unspecified impact. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://himalaya.com - https://github.com/x1ngg3/cve/tree/main/CVE-2024-41624
CVE ID: CVE-2024-41628 State: PUBLISHED Published: 2024-07-26T00:00:00 Last Updated: 2024-08-06T20:31:53.543441 Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://clustercontrol.com - http://severalnines.com - https://docs.severalnines.com/docs/clustercontrol/changelogs/changes-in-v2-1-0/ - https://docs.severalnines.com/docs/clustercontrol/changelogs/
es.com/docs/clustercontrol/changelogs/changes-in-v2-1-0/ - https://docs.severalnines.com/docs/clustercontrol/changelogs/changes-in-v1-9-8/#maintenance-release-july-24th-2024 - https://github.com/Redshift-CyberSecurity/CVE-2024-41628
CVE ID: CVE-2024-41629 State: PUBLISHED Published: 2024-09-12T00:00:00 Last Updated: 2024-09-12T19:02:52.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Sep/1
CVE ID: CVE-2024-41630 State: PUBLISHED Published: 2024-07-31T00:00:00 Last Updated: 2024-08-21T20:36:26.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10_EN allows a remote attacker to execute arbitrary code via the ssid parameter at ip/goform/fast_setting_wifi_set. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/hk/download/detail-3863.html - https://www.tendacn.com/hk/download/detail-3852.html - https://palm-vertebra-fe9.notion.site/form_fast_setting_wifi_set-fd47294cf4bb460bb95f804d39e53f34