Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-39741 State: PUBLISHED Published: 2024-07-15T02:09:40.787Z Last Updated: 2024-08-02T04:26:16.016Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Datacap Navigator Problem Types: CWE-22 Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 296010. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7160185 - https://exch
A ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7160185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/296010
CVE ID: CVE-2024-39742 State: PUBLISHED Published: 2024-07-08T13:16:10.090Z Last Updated: 2024-08-02T04:26:15.955Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: MQ Operator Problem Types: CWE-187 Description: IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/297169
CVE ID: CVE-2024-39743 State: PUBLISHED Published: 2024-07-08T13:14:43.915Z Last Updated: 2024-08-02T04:26:16.002Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Operator Problem Types: CWE-405 Description: IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159714 - https://exchange.
Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/297172
CVE ID: CVE-2024-39744 State: PUBLISHED Published: 2024-08-22T10:56:39.894Z Last Updated: 2024-08-22T19:54:57.599Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: IBM Products: Sterling Connect:Direct Web Services Problem Types: CWE-352 Description: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/297236
CVE ID: CVE-2024-39745 State: PUBLISHED Published: 2024-08-22T11:06:49.088Z Last Updated: 2024-08-22T13:33:31.352Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Connect:Direct Web Services Problem Types: CWE-327 Description: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/297312
CVE ID: CVE-2024-39746 State: PUBLISHED Published: 2024-08-22T10:29:54.169Z Last Updated: 2025-10-31T15:01:03.666Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Connect:Direct Web Services Problem Types: CWE-319 Description: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
ddle techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166018
CVE ID: CVE-2024-39747 State: PUBLISHED Published: 2024-08-31T01:01:03.974Z Last Updated: 2024-09-01T21:30:21.072Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Sterling Connect:Direct Web Services Problem Types: CWE-1392 Description: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/297314
CVE ID: CVE-2024-39750 State: PUBLISHED Published: 2025-01-25T14:04:41.115Z Last Updated: 2025-09-29T15:18:14.241Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Analytics Content Hub Problem Types: CWE-120 Description: IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7172787
CVE ID: CVE-2024-39751 State: PUBLISHED Published: 2024-08-06T15:17:37.892Z Last Updated: 2024-08-06T15:37:42.531Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-209 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7160580 - https://exchange.xforce.ibmcloud.com/vulnerabil
richment: References: - https://www.ibm.com/support/pages/node/7160580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/297429
CVE ID: CVE-2024-39752 State: PUBLISHED Published: 2025-07-10T14:15:19.208Z Last Updated: 2025-08-18T01:35:39.017Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: Analytics Content Hub Problem Types: CWE-434 Description: IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7234122
CVE ID: CVE-2024-39753 State: PUBLISHED Published: 2024-10-22T18:26:22.507Z Last Updated: 2024-10-22T19:32:17.476Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/ka-0
ity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/ka-0016669 - https://www.zerodayinitiative.com/advisories/ZDI-24-897/
CVE ID: CVE-2024-39754 State: PUBLISHED Published: 2025-01-14T14:21:25.044Z Last Updated: 2025-01-14T16:04:13.111Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-912 Description: A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2034
CVE ID: CVE-2024-39755 State: PUBLISHED Published: 2024-10-03T15:16:10.308Z Last Updated: 2024-12-18T14:31:20.169Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Veertu Products: Anka Build Problem Types: CWE-282 Description: A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2060
CVE ID: CVE-2024-39756 State: PUBLISHED Published: 2025-01-14T14:21:31.147Z Last Updated: 2025-01-15T21:07:11.215Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2
ogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2024
CVE ID: CVE-2024-39757 State: PUBLISHED Published: 2025-01-14T14:21:18.345Z Last Updated: 2025-01-14T16:04:15.221Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TA
: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2043
CVE ID: CVE-2024-39758 State: PUBLISHED Published: 2025-05-13T21:03:04.505Z Last Updated: 2025-05-14T14:08:15.346Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Arc™ &amp; Iris(R) Xe graphics software Problem Types: Denial of Service, CWE-284 Description: Improper access control for some Intel(R) Arc™ &amp; Iris(R) Xe graphics software before version 31.0.101.4032 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE ID: CVE-2024-39759 State: PUBLISHED Published: 2025-01-14T14:21:35.431Z Last Updated: 2025-11-03T21:56:33.812Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_hour_value` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: -
ulnerability exists within the `restart_hour_value` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2018
CVE ID: CVE-2024-39760 State: PUBLISHED Published: 2025-01-14T14:21:35.515Z Last Updated: 2025-11-03T21:56:35.267Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_min_value` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: -
ulnerability exists within the `restart_min_value` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2018
CVE ID: CVE-2024-39761 State: PUBLISHED Published: 2025-01-14T14:21:35.624Z Last Updated: 2025-11-03T21:56:36.722Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_week_value` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: -
ulnerability exists within the `restart_week_value` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2018
CVE ID: CVE-2024-39762 State: PUBLISHED Published: 2025-01-14T14:21:33.911Z Last Updated: 2025-11-03T21:56:38.261Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `netmask` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
ection vulnerability exists in the `netmask` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE ID: CVE-2024-39763 State: PUBLISHED Published: 2025-01-14T14:21:34.018Z Last Updated: 2025-11-03T21:56:39.776Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `gateway` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
ection vulnerability exists in the `gateway` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE ID: CVE-2024-39764 State: PUBLISHED Published: 2025-01-14T14:21:34.112Z Last Updated: 2025-11-03T21:56:41.244Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `dest` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
ection vulnerability exists in the `dest` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE ID: CVE-2024-39765 State: PUBLISHED Published: 2025-01-14T14:21:34.206Z Last Updated: 2025-11-03T21:56:42.683Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-77 Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `custom_interface` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment:
ection vulnerability exists in the `custom_interface` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE ID: CVE-2024-39766 State: PUBLISHED Published: 2024-11-13T21:12:08.831Z Last Updated: 2024-11-14T19:36:18.202Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Neural Compressor software Problem Types: escalation of privilege, CWE-1336 Description: Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01219.html
CVE ID: CVE-2024-39767 State: PUBLISHED Published: 2024-07-15T08:43:10.236Z Last Updated: 2024-08-02T04:26:15.989Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-287 Description: Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID or server URL and have them show up in mobile apps as that server’s push notifications. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.
fications. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39768 State: PUBLISHED Published: 2025-01-14T14:21:32.447Z Last Updated: 2025-11-03T21:56:44.134Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `cli_name` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Reference
in the `cli_name` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022
CVE ID: CVE-2024-39769 State: PUBLISHED Published: 2025-01-14T14:21:32.572Z Last Updated: 2025-11-03T21:56:45.571Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `cli_mac` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References
in the `cli_mac` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022
CVE ID: CVE-2024-39770 State: PUBLISHED Published: 2025-01-14T14:21:32.803Z Last Updated: 2025-11-03T21:56:47.034Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `en_enable` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
in the `en_enable` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022
CVE ID: CVE-2024-39771 State: PUBLISHED Published: 2024-08-28T05:54:05.967Z Last Updated: 2024-10-28T20:38:01.709Z Vendors: Safie Inc. Products: QBiC CLOUD CC-2L, Safie One Problem Types: Improper certificate validation Description: QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://safie.jp/information/post_6933/ - https://jvn.jp/en/jp/JVN83440451/
CVE ID: CVE-2024-39772 State: PUBLISHED Published: 2024-09-16T14:27:47.103Z Last Updated: 2024-09-16T14:42:19.953Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39773 State: PUBLISHED Published: 2025-01-14T14:21:24.500Z Last Updated: 2025-01-14T16:04:16.268Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-306 Description: An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2035