Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-57509 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-01-31T20:31:10.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File::ParseStream and related functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/989 - https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24
CVE ID: CVE-2024-57510 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-02-03T18:20:40.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/989 - https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24
CVE ID: CVE-2024-57513 State: PUBLISHED Published: 2025-01-29T00:00:00.000Z Last Updated: 2025-01-31T20:07:34.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/990 - https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24
CVE ID: CVE-2024-57514 State: PUBLISHED Published: 2025-01-28T00:00:00.000Z Last Updated: 2025-01-29T15:29:40.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011
er, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html
CVE ID: CVE-2024-57519 State: PUBLISHED Published: 2025-01-28T00:00:00.000Z Last Updated: 2025-03-25T13:22:29.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in lib/dbi/subscription.c file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open5gs/open5gs/issues/3635 - https://github.com/open5gs/open5gs/commit/08b9e7c55f72649ef25b5407e7e4d938f0f16531 - https://github.com/f4rs1ght/vuln-research/tree/main/CVE-2024-57519
CVE ID: CVE-2024-57520 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-11-06T13:01:45.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory (aka directory traversal) and the attack can only be performed by a privileged user who has the ability to manage the configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/hyp164D1/ae76ab25acfbe263b2ed
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/hyp164D1/ae76ab25acfbe263b2ed7b24b6e5c621 - https://github.com/asterisk/asterisk/issues/1122
CVE ID: CVE-2024-57522 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-03T18:21:42.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/HackWidMaddy/CVE-2024-57522
CVE ID: CVE-2024-57523 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-06T20:07:02.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sourcecodester.com - https://github.com/HackWidMaddy/CVE-2024-57523.
CVE ID: CVE-2024-57529 State: PUBLISHED Published: 2025-05-21T00:00:00.000Z Last Updated: 2025-05-22T18:10:26.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://jeppesen.com - https://medium.com/@a77777mad/xss-vulnerability-discovered-in-jetplanner-pro-a-popular-flight-planning-solution-2dd48a7f6e72
CVE ID: CVE-2024-57536 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T20:28:37.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/8/8.md
CVE ID: CVE-2024-57537 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T20:32:10.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/1/1.md
CVE ID: CVE-2024-57538 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-02-04T15:37:27.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/10/10.md
CVE ID: CVE-2024-57539 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-02-04T15:41:58.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/3/3.md
CVE ID: CVE-2024-57540 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-02-04T15:44:25.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/2/2.md
CVE ID: CVE-2024-57541 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T20:51:41.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/9/9.md
CVE ID: CVE-2024-57542 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T20:54:45.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/4/4.md
CVE ID: CVE-2024-57543 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T20:55:47.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/7/7.md
CVE ID: CVE-2024-57544 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T21:51:06.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/6/6.md
CVE ID: CVE-2024-57545 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T21:52:08.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wood1314/Linksys_E8450_vul/blob/main/5/5.md
CVE ID: CVE-2024-57546 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:39:27.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Validate%20links%20SSRF.md - https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb
CVE ID: CVE-2024-57547 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:39:13.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Remote%20Code%20Execution%20via%20backup%20file%20editing.md - https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb
CVE ID: CVE-2024-57548 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:38:58.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMSimple 5.16 allows the user to edit log.php file via print page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Broken%20Access%20Control%20to%20log.php.md - https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb
CVE ID: CVE-2024-57549 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:38:47.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Sensitive%20information%20disclosure.md - https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb
CVE ID: CVE-2024-57556 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T21:07:45.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nbubna/store/issues/127
CVE ID: CVE-2024-57575 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-03T19:55:36.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/blob/main/1/Readme.md
CVE ID: CVE-2024-57577 State: PUBLISHED Published: 2025-01-16T00:00:00 Last Updated: 2025-01-17T17:19:03.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/blob/main/4/Readme.md
CVE ID: CVE-2024-57578 State: PUBLISHED Published: 2025-01-16T00:00:00 Last Updated: 2025-01-17T17:20:49.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/blob/main/5/Readme.md
CVE ID: CVE-2024-57579 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-19T20:45:11.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/tree/main/6
CVE ID: CVE-2024-57580 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-18T18:25:41.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/tree/main/7
CVE ID: CVE-2024-57581 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-18T18:49:36.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/tree/main/8
CVE ID: CVE-2024-57582 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-22T13:57:35.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/tree/main/9
CVE ID: CVE-2024-57583 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-04T14:35:10.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qijiale/Tenda/tree/main/10
CVE ID: CVE-2024-57587 State: PUBLISHED Published: 2025-01-31T00:00:00.000Z Last Updated: 2025-04-03T14:09:42.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to /api/auth/login. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-57587.md
CVE ID: CVE-2024-57590 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:46:47.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntp_server" passed to the "ntp_sync.cgi" binary through a POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IdaJea/IOT_vuln_1/blob/master/tew632/ntp_sync.md
CVE ID: CVE-2024-57595 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-27T15:32:01.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wps_pin" passed to the apc_client_pin.cgi binary through a POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/IdaJea/IOT_vuln_1/blob/master/DIR825/wps_pin.md
CVE ID: CVE-2024-57598 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T16:09:04.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bento4.com - https://github.com/JWH-96/Bugs-disclosure/blob/main/Bento4_FPE.md
CVE ID: CVE-2024-57599 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-06T21:01:02.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.douphp.com/ - https://github.com/Arykon/cve/blob/main/douphp.pdf
CVE ID: CVE-2024-57601 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-22T14:09:13.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hkohi.ca/vulnerability/13
CVE ID: CVE-2024-57602 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-18T16:03:25.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hkohi.ca/vulnerability/12
CVE ID: CVE-2024-57603 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-02-13T19:03:25.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mayswind/ezbookkeeping/issues/33 - https://hkohi.ca/vulnerability/1
CVE ID: CVE-2024-57604 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-20T14:17:53.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mayswind/ezbookkeeping/issues/33 - https://hkohi.ca/vulnerability/2
CVE ID: CVE-2024-57605 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-19T14:10:42.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hkohi.ca/vulnerability/3
CVE ID: CVE-2024-57606 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-03-22T13:56:28.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/JeecgBoot/issues/7665
CVE ID: CVE-2024-57608 State: PUBLISHED Published: 2025-02-24T00:00:00.000Z Last Updated: 2025-02-25T20:37:52.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Zkplo/AppVulHub/blob/main/mark.via.Shell/CWE-94.md
CVE ID: CVE-2024-57609 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-10T21:34:02.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nca785/CVE-2024-57609/
CVE ID: CVE-2024-57610 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-07T15:59:30.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly increasing the risk of account compromise and denial of service for legitimate users. The Supplier's position is that the Sylius core software is not intended to address brute-force attacks; instead, customers deploying a Sylius-based system are supposed to use "firewalls, rate-limiting middleware, or authentication providers" for that functionality. Additional Analyst Notes: - CISA
ewalls, rate-limiting middleware, or authentication providers" for that functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Sylius/Sylius - https://sylius.com/ - https://github.com/nca785/CVE-2024-57610
CVE ID: CVE-2024-57611 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-03T18:51:11.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/daodaoshao/Yunpeng-Yin/tree/main/7/readme.md
CVE ID: CVE-2024-57615 State: PUBLISHED Published: 2025-01-14T00:00:00 Last Updated: 2025-01-17T17:48:35.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the BATcalcbetween_intern component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7413