Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-29977 State: PUBLISHED Published: 2024-08-01T14:05:00.340Z Last Updated: 2024-08-01T14:35:07.529Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly validate synced reactions, when shared channels are enabled, which allows a malicious remote to create arbitrary reactions on arbitrary posts Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-29978 State: PUBLISHED Published: 2024-11-26T07:37:27.029Z Last Updated: 2025-11-04T17:19:54.483Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Multiple MFPs (multifunction printers) Problem Types: CWE-256 Description: User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Cont
CVE ID: CVE-2024-29979 State: PUBLISHED Published: 2025-01-14T16:00:15.221Z Last Updated: 2025-07-28T20:55:13.618Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Phoenix Products: SecureCore™ for Intel Kaby Lake, SecureCore™ for Intel Coffee Lake, SecureCore™ for Intel Comet Lake, SecureCore™ for Intel Ice Lake Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: b
enix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phoenixtech.com/phoenix-security-notifications/cve-2024-29979/
CVE ID: CVE-2024-29980 State: PUBLISHED Published: 2025-01-14T16:00:15.300Z Last Updated: 2025-07-28T20:54:33.057Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Phoenix Products: SecureCore™ for Intel Kaby Lake, SecureCore™ for Intel Coffee Lake, SecureCore™ for Intel Comet Lake, SecureCore™ for Intel Ice Lake Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: b
enix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phoenixtech.com/phoenix-security-notifications/cve-2024-29980/
CVE ID: CVE-2024-29981 State: PUBLISHED Published: 2024-04-04T21:47:07.386Z Last Updated: 2025-05-03T00:39:36.072Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based), Microsoft Edge (Chromium-based) Extended Stable Problem Types: CWE-1021 Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981
CVE ID: CVE-2024-29982 State: PUBLISHED Published: 2024-04-09T17:01:25.387Z Last Updated: 2025-05-03T00:40:27.097Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2019 (CU 25), Microsoft SQL Server 2022 for (CU 12), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft OLE DB Driver 19 for SQL Server, Microsoft OLE DB Driver 18 for SQL Server Problem Types: CWE-122 Description: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulne
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29982
CVE ID: CVE-2024-29983 State: PUBLISHED Published: 2024-04-09T17:01:25.929Z Last Updated: 2025-05-03T00:40:27.838Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2019 (CU 25), Microsoft SQL Server 2022 for (CU 12), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft OLE DB Driver 19 for SQL Server, Microsoft OLE DB Driver 18 for SQL Server Problem Types: CWE-122 Description: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulne
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29983
CVE ID: CVE-2024-29984 State: PUBLISHED Published: 2024-04-09T17:01:26.492Z Last Updated: 2025-05-03T00:40:28.313Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft OLE DB Driver 19 for SQL Server, Microsoft OLE DB Driver 18 for SQL Server, Microsoft SQL Server 2019 (CU 25), Microsoft SQL Server 2022 for (CU 12) Problem Types: CWE-122 Description: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulne
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29984
CVE ID: CVE-2024-29985 State: PUBLISHED Published: 2024-04-09T17:01:27.068Z Last Updated: 2025-05-03T00:40:28.864Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft OLE DB Driver 19 for SQL Server, Microsoft OLE DB Driver 18 for SQL Server, Microsoft SQL Server 2019 (CU 25), Microsoft SQL Server 2022 for (CU 12) Problem Types: CWE-122 Description: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulne
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29985
CVE ID: CVE-2024-29986 State: PUBLISHED Published: 2024-04-18T18:59:26.836Z Last Updated: 2025-05-03T00:40:31.579Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-359 Description: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29986
CVE ID: CVE-2024-29987 State: PUBLISHED Published: 2024-04-18T18:59:27.406Z Last Updated: 2025-05-03T00:40:30.968Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-359 Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29987
CVE ID: CVE-2024-29988 State: PUBLISHED Published: 2024-04-09T17:00:35.822Z Last Updated: 2025-10-21T23:05:21.502Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-693 Description: SmartScreen Prompt Security Feature Bypass Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: -
scription: SmartScreen Prompt Security Feature Bypass Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988
CVE ID: CVE-2024-29989 State: PUBLISHED Published: 2024-04-09T17:01:27.624Z Last Updated: 2025-05-03T00:40:29.349Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Monitor Problem Types: CWE-59 Description: Azure Monitor Agent Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29989
CVE ID: CVE-2024-29990 State: PUBLISHED Published: 2024-04-09T17:00:36.373Z Last Updated: 2025-05-03T00:39:37.061Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Kubernetes Service Problem Types: CWE-284 Description: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29990
CVE ID: CVE-2024-29991 State: PUBLISHED Published: 2024-04-19T16:46:25.879Z Last Updated: 2025-05-03T00:40:32.123Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-94 Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29991
CVE ID: CVE-2024-29992 State: PUBLISHED Published: 2024-04-09T17:01:28.168Z Last Updated: 2025-05-03T00:40:29.946Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/RL:O/RC:C) Vendors: Microsoft Products: Azure Identity Library for .NET Problem Types: CWE-522 Description: Azure Identity Library for .NET Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992
CVE ID: CVE-2024-29993 State: PUBLISHED Published: 2024-04-09T17:01:28.700Z Last Updated: 2025-05-03T00:40:30.506Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure CycleCloud 8.6.0 Problem Types: CWE-284 Description: Azure CycleCloud Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29993
CVE ID: CVE-2024-29994 State: PUBLISHED Published: 2024-05-14T16:57:18.703Z Last Updated: 2025-05-03T00:06:37.744Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-125 Description: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Additional Analyst Notes: - CIS
scription: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29994
CVE ID: CVE-2024-29995 State: PUBLISHED Published: 2024-08-13T17:30:00.979Z Last Updated: 2025-07-10T16:33:13.178Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Serve
k 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-208 Description: Windows Kerberos Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29995
CVE ID: CVE-2024-29996 State: PUBLISHED Published: 2024-05-14T16:56:59.604Z Last Updated: 2025-05-03T00:06:17.269Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Servi
rability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29996
CVE ID: CVE-2024-29997 State: PUBLISHED Published: 2024-05-14T16:57:00.228Z Last Updated: 2025-05-03T00:06:17.872Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-190 Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vu
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29997
CVE ID: CVE-2024-29998 State: PUBLISHED Published: 2024-05-14T16:57:01.411Z Last Updated: 2025-05-03T00:06:18.394Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-20 Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vul
escription: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29998
CVE ID: CVE-2024-29999 State: PUBLISHED Published: 2024-05-14T16:57:02.142Z Last Updated: 2025-05-03T00:06:18.991Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-190 Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vu
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29999
CVE ID: CVE-2024-2000 State: PUBLISHED Published: 2024-03-13T15:32:40.870Z Last Updated: 2025-04-15T15:19:23.307Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Premium Addons for Elementor Products: Premium Addons Pro for Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'navigation_dots' parameter of the Multi Scroll Widget in all versions up to, and including, 2.9.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit
9.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eee517de-a47e-47c9-8322-92ce772191b0?source=cve - https://premiumaddons.com/change-log/
CVE ID: CVE-2024-2001 State: PUBLISHED Published: 2024-02-29T13:30:54.169Z Last Updated: 2024-08-01T18:56:22.551Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Cockpit CMS Products: Cockpit CMS Problem Types: CWE-79 Description: A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cockpit-cms
CVE ID: CVE-2024-2002 State: PUBLISHED Published: 2024-03-18T12:26:31.386Z Last Updated: 2025-11-20T18:21:28.745Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-415 Description: A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-2002 - https://bugzilla.redhat.com/show_bug.cgi?id=2267700 -
ferences: - https://access.redhat.com/security/cve/CVE-2024-2002 - https://bugzilla.redhat.com/show_bug.cgi?id=2267700 - https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt
CVE ID: CVE-2024-2003 State: PUBLISHED Published: 2024-06-21T07:20:03.749Z Last Updated: 2024-08-01T18:56:22.634Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: ESET, spol. s r.o. Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Small Business Security, ESET Safe Server, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure Problem Types: CWE-269 Description: Local pri
ty for Microsoft SharePoint Server, ESET File Security for Microsoft Azure Problem Types: CWE-269 Description: Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.eset.com/ca8674
CVE ID: CVE-2024-2004 State: PUBLISHED Published: 2024-03-27T07:54:27.157Z Last Updated: 2025-02-13T17:32:29.487Z Vendors: curl Products: curl Problem Types: CWE-115 Misinterpretation of Input Description: When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been explicitly disabled. curl --proto -all,-http http://curl.se The flaw is only present if the set of selected protocols disables the entire set of available protocols, in itself a command with no pr
present if the set of selected protocols disables the entire set of available protocols, in itself a command with no practical use and therefore unlikely to be encountered in real situations. The curl security team has thus assessed this to be low severity bug. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://curl.se/docs/CVE-2024-2004.json - https://curl.se/docs/CVE-2024-2004.html - https://hackerone.com/reports/2384833 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/messa
CRCYETWQZUJ65ZRFULT6SHLI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/ - http://www.openwall.com/lists/oss-security/2024/03/27/1 - https://security.netapp.com/advisory/ntap-20240524-0006/ - https://support.apple.com/kb/HT214119 - https://support.apple.com/kb/HT214118 - https://support.apple.com/kb/HT214120 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-2005 State: PUBLISHED Published: 2024-03-05T18:54:00.839Z Last Updated: 2024-08-29T17:10:16.253Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Blue Planet Products: Inventory (BPI), Orchestration (BPO), Route Optimization and Analysis (ROA), Unified Assurance and Analytics (UAA) Problem Types: CWE-269 Description: In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation. Only products using SAML authentication are affected. Blue Planet® has released software updates that address this vulnerability for the affected products. Customers are advised to upgrade their Blue Planet produ