Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
bility exists in the `sel_mode` POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2049
CVE ID: CVE-2024-39804 State: PUBLISHED Published: 2024-12-18T22:37:20.377Z Last Updated: 2024-12-20T17:23:10.420Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Microsoft Products: PowerPoint Problem Types: CWE-347 Description: A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ble application's permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1974
CVE ID: CVE-2024-39805 State: PUBLISHED Published: 2025-02-12T21:19:51.039Z Last Updated: 2025-02-28T04:55:33.007Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DSA software Problem Types: Escalation of Privilege, CWE-345 Description: Insufficient verification of data authenticity in some Intel(R) DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01030.html
CVE ID: CVE-2024-39806 State: PUBLISHED Published: 2024-10-08T03:03:27.301Z Last Updated: 2024-10-08T14:03:07.248Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE ID: CVE-2024-39807 State: PUBLISHED Published: 2024-07-03T08:31:58.312Z Last Updated: 2024-08-02T04:26:16.012Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to properly sanitize the recipients of a webhook event which allows an attacker monitoring webhook events to retrieve the channel IDs of archived or restored channels. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39808 State: PUBLISHED Published: 2024-09-11T04:03:50.955Z Last Updated: 2024-09-11T13:36:30.656Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Gallagher Products: Controller 6000 and Controller 7000 Problem Types: CWE-131 Description: Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to Controller wiring to instigate a reboot leading to a denial of service. This issue affects: Controller 6000 and Controller 7000 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)),
ior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-39808
CVE ID: CVE-2024-39809 State: PUBLISHED Published: 2024-08-14T14:32:32.789Z Last Updated: 2024-08-22T03:55:17.142Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Next Central Manager Problem Types: CWE-613 Description: The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000140111
CVE ID: CVE-2024-39810 State: PUBLISHED Published: 2024-08-22T06:30:11.602Z Last Updated: 2024-08-22T12:58:12.173Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost versions 9.5.x <= 9.5.7 and 9.10.x <= 9.10.0 fail to time limit and size limit the CA path file in the ElasticSearch configuration which allows a System Role with access to the Elasticsearch system console to add any file as a CA path field, such as /dev/zero and, after testing the connection, cause the application to crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-
application to crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39811 State: PUBLISHED Published: 2024-11-13T21:10:50.927Z Last Updated: 2024-11-14T19:42:02.642Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server M20NTP Family UEFI Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE ID: CVE-2024-39813 State: PUBLISHED Published: 2025-02-12T21:19:02.721Z Last Updated: 2025-02-18T17:32:49.911Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: EPCT software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01227.html
CVE ID: CVE-2024-39815 State: PUBLISHED Published: 2024-08-08T19:33:35.137Z Last Updated: 2024-08-21T20:04:38.205Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Vonets Products: VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VGA-1000 Problem Types: CWE-703 Description: Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A specially-crafted HTTP request to pre-authenti
enable an unauthenticated remote attacker to cause a denial of service. A specially-crafted HTTP request to pre-authentication resources can crash the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08
CVE ID: CVE-2024-39816 State: PUBLISHED Published: 2024-09-02T03:25:12.730Z Last Updated: 2024-09-03T14:53:17.629Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-09.md
CVE ID: CVE-2024-39817 State: PUBLISHED Published: 2024-08-06T04:54:50.932Z Last Updated: 2025-03-18T20:49:27.740Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Insertion of Sensitive Information Into Sent Data Description: Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/jp/JVN29845579/ - https://kb.cybozu.support/?product=office&v=&fv=10.8.7&t=%E8%84%86%E5%BC%B1%E6%80%A7&s=
CVE ID: CVE-2024-39818 State: PUBLISHED Published: 2024-08-14T16:36:37.347Z Last Updated: 2024-08-16T13:26:38.801Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Communications Inc. Products: Zoom Workplace Apps and SDKs Problem Types: CWE-522 Description: Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24022
CVE ID: CVE-2024-39819 State: PUBLISHED Published: 2024-07-15T17:27:41.216Z Last Updated: 2025-10-02T20:47:51.225Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Zoom Communications, Inc Products: Zoom Workplace Apps and SDK for Windows Problem Types: CWE-494 Description: Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24026
CVE ID: CVE-2024-39820 State: PUBLISHED Published: 2024-07-15T17:29:09.952Z Last Updated: 2024-08-02T04:26:15.997Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: Zoom Communications, Inc Products: Zoom Workplace Desktop App for macOS Problem Types: CWE-427 Description: Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24027
CVE ID: CVE-2024-39821 State: PUBLISHED Published: 2024-07-15T17:31:02.540Z Last Updated: 2024-08-02T04:26:16.002Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: Zoom Communications, Inc Products: Zoom Workplace App for Windows and Zoom Rooms App for Windows Problem Types: CWE-367 Description: Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24028
CVE ID: CVE-2024-39822 State: PUBLISHED Published: 2024-08-14T16:38:03.416Z Last Updated: 2024-08-16T19:18:44.815Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Communications Inc. Products: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers Problem Types: CWE-200 Description: Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24029
CVE ID: CVE-2024-39823 State: PUBLISHED Published: 2024-08-14T16:39:13.132Z Last Updated: 2025-10-02T20:49:49.959Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Communications Inc. Products: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers Problem Types: CWE-862 Description: Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24030
CVE ID: CVE-2024-39824 State: PUBLISHED Published: 2024-08-14T16:39:26.880Z Last Updated: 2025-10-02T20:51:37.705Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Communications Inc. Products: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers Problem Types: CWE-862 Description: Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24030
CVE ID: CVE-2024-39825 State: PUBLISHED Published: 2024-08-14T16:34:53.595Z Last Updated: 2024-08-16T13:28:41.388Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zoom Communications Inc. Products: Zoom Workplace Apps and Rooms Clients Problem Types: CWE-122 Description: Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24022
CVE ID: CVE-2024-39826 State: PUBLISHED Published: 2024-07-15T17:24:05.124Z Last Updated: 2025-10-02T20:43:25.105Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Zoom Communications, Inc Products: Zoom Workplace Apps and SDKs Problem Types: CWE-367 Description: Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24023
CVE ID: CVE-2024-39827 State: PUBLISHED Published: 2024-07-15T17:25:49.312Z Last Updated: 2024-08-02T04:26:15.979Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Zoom Communications, Inc Products: Zoom Workplace Desktop App for Windows Problem Types: CWE-20 Description: Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24024
CVE ID: CVE-2024-39828 State: PUBLISHED Published: 2024-06-28T00:00:00 Last Updated: 2024-08-02T04:26:15.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file. This was fixed in a hotfix to 1.9.5 on 2024-06-29. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ggod2/sandboxels_xss_test - https://sandboxels.r74n.com/changelog - https://github.com/ggod2/sandboxels_xss_test/blob/main/README.md
CVE ID: CVE-2024-39830 State: PUBLISHED Published: 2024-07-03T08:32:56.113Z Last Updated: 2024-08-02T04:26:16.020Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-287 Description: Mattermost versions 9.8.x <= 9.8.0, 9.7.x <= 9.7.4, 9.6.x <= 9.6.2 and 9.5.x <= 9.5.5, when shared channels are enabled, fail to use constant time comparison for remote cluster tokens which allows an attacker to retrieve the remote cluster token via a timing attack during remote cluster token comparison. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39831 State: PUBLISHED Published: 2024-10-08T03:03:34.327Z Last Updated: 2024-10-08T14:02:58.725Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md
CVE ID: CVE-2024-39832 State: PUBLISHED Published: 2024-08-01T14:05:04.850Z Last Updated: 2024-08-07T14:09:31.969Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-754 Description: Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39833 State: PUBLISHED Published: 2025-05-13T21:03:06.096Z Last Updated: 2025-05-15T04:01:27.914Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01216.html
CVE ID: CVE-2024-39835 State: PUBLISHED Published: 2025-07-17T19:12:08.177Z Last Updated: 2025-07-18T08:04:28.875Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Open Source Robotics Foundation Products: Robot Operating System (ROS) Problem Types: CWE-95, CWE-94 Description: A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw a
parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ros.org/blog/noetic-eol/
CVE ID: CVE-2024-39836 State: PUBLISHED Published: 2024-08-22T06:27:09.829Z Last Updated: 2024-08-22T16:39:21.881Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-693 Description: Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to ensure that remote/synthetic users cannot create sessions or reset passwords, which allows the munged email addresses, created by shared channels, to be used to receive email notifications and to reset passwords, when they are valid, functional emails. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.co
hey are valid, functional emails. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39837 State: PUBLISHED Published: 2024-08-01T14:05:06.182Z Last Updated: 2024-08-01T20:47:51.530Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly restrict channel creation which allows a malicious remote to create arbitrary channels, when shared channels were enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39838 State: PUBLISHED Published: 2024-08-05T04:35:39.287Z Last Updated: 2025-03-25T16:20:44.015Z Vendors: ZEXELON CO., LTD. Products: ZWX-2000CSW2-HN Problem Types: Use of Hard-coded Credentials Description: ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zexelon.co.jp/pdf/jvn70666401.pdf - https://jvn.jp/en/jp/JVN70666401/
CVE ID: CVE-2024-39839 State: PUBLISHED Published: 2024-08-01T14:05:07.339Z Last Updated: 2024-08-01T18:04:42.351Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to disallow users to set their own remote username, when shared channels were enabled, which allows a user on a remote to set their remote username prop to an arbitrary string, which would be then synced to the local server as long as the user hadn't been synced before. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mat
long as the user hadn't been synced before. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39840 State: PUBLISHED Published: 2024-06-29T00:00:00 Last Updated: 2024-08-02T04:26:16.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://news.ycombinator.com/item?id=40830005 - https://memorycorruption.net/posts/rce-lua-factorio/
CVE ID: CVE-2024-39841 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-23T17:27:36.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3744
CVE ID: CVE-2024-39842 State: PUBLISHED Published: 2024-09-23T00:00:00 Last Updated: 2024-09-23T18:58:21.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3809
CVE ID: CVE-2024-39843 State: PUBLISHED Published: 2024-09-23T00:00:00 Last Updated: 2024-09-23T19:49:42.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3809