Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275739 - https://vuldb.com/?ctiid.275739 - https://vuldb.com/?submit.397570 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Interactive_Map_With_Marker_delete_mark_XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8152 State: PUBLISHED Published: 2024-08-25T22:31:04.910Z Last Updated: 2024-08-26T12:05:50.604Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: QR Code Bookmark System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/add-bookmark.php of the component Parameter Handler. The manipulation of the argument name/url leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275740 - https://vuldb.com/?ctiid.275740 - https://vuldb.com/?submit.397575 - https://github.com/jadu101/CVE/blob/main/SourceCodester_QR_Code_Bookmark_System_add_bookmark_XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8153 State: PUBLISHED Published: 2024-08-25T22:31:06.804Z Last Updated: 2024-08-26T15:36:48.057Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: QR Code Bookmark System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /endpoint/delete-bookmark.php. The manipulation of the argument bookmark leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275741 - https://vuldb.com/?ctiid.275741 - https://vuldb.com/?submit.397579 - https://github.com/jadu101/CVE/blob/main/SourceCodester_QR_Code_Bookmark_System_delete_bookmark_XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8154 State: PUBLISHED Published: 2024-08-25T23:00:07.028Z Last Updated: 2024-08-26T14:29:03.821Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: QR Code Bookmark System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester QR Code Bookmark System 1.0. Affected is an unknown function of the file /endpoint/update-bookmark.php of the component Parameter Handler. The manipulation of the argument tbl_bookmark_id/name/url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
unch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275742 - https://vuldb.com/?ctiid.275742 - https://vuldb.com/?submit.397580 - https://github.com/jadu101/CVE/blob/main/SourceCodester_QR_Code_Bookmark_System_update_bookmark_XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8155 State: PUBLISHED Published: 2024-08-25T23:00:08.640Z Last Updated: 2024-08-26T13:51:27.637Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: ContiNew Products: Admin Problem Types: CWE-89 Description: A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseController#tree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about th
ed remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275743 - https://vuldb.com/?ctiid.275743 - https://vuldb.com/?submit.391851 - https://github.com/Chiexf/cve/issues/3
CVE ID: CVE-2024-8156 State: PUBLISHED Published: 2025-03-20T10:09:12.930Z Last Updated: 2025-10-15T12:50:39.556Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: significant-gravitas Products: significant-gravitas/autogpt Problem Types: CWE-77 Description: A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. The untrusted user input `github.head.ref` is used insecurely, allowing an attacker to inject arbitrary commands. This vulnerability affects versions up to and including the latest version. An attacker can exploit this by creating a branch name with a malicious payload and opening a pull request, po
version. An attacker can exploit this by creating a branch name with a malicious payload and opening a pull request, potentially leading to reverse shell access or theft of sensitive tokens and keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/959efe87-f109-4cef-94d8-90ff2c7aef51 - https://github.com/significant-gravitas/autogpt/commit/1df7d527dd37dff8363dc162fb58d300f072e302
CVE ID: CVE-2024-8157 State: PUBLISHED Published: 2024-11-21T06:00:08.909Z Last Updated: 2024-11-21T17:52:51.006Z Vendors: Unknown Products: Alphabetical List Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Alphabetical List WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9bc18c41-fc4c-48c9-bcec-323c502ae620/
CVE ID: CVE-2024-8158 State: PUBLISHED Published: 2024-08-25T21:31:08.246Z Last Updated: 2024-08-26T15:22:18.885Z Vendors: 9front Products: 9front Problem Types: CWE-639 Description: A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user. This is due to lib9p not properly verifying that the uname given in the Tauth and Tattach 9p messages matches the client UID returned from the factotum authentication handshake. The only filesystem making use of these functions within the base 9front systems is the experimental hjfs disk filesystem, other disk filesystems (cwfs
of these functions within the base 9front systems is the experimental hjfs disk filesystem, other disk filesystems (cwfs and gefs) are not affected by this bug. This bug was inherited from Plan 9 and is present in all versions of 9front and is remedied fully in commit 9645ae07eb66a59015e3e118d0024790c37400da. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.9front.org/plan9front/plan9front/07aa9bfeef55ca987d411115adcfbbd4390ecf34/commit.html
CVE ID: CVE-2024-8159 State: PUBLISHED Published: 2024-10-03T06:10:13.190Z Last Updated: 2024-10-03T15:22:50.199Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Faronics Products: DeepFreeze Problem Types: CWE-125 Description: Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/kanka/ - https://www.faronics.com/products/deep-freeze
CVE ID: CVE-2024-8160 State: PUBLISHED Published: 2024-11-26T07:27:32.229Z Last Updated: 2025-03-28T07:18:14.700Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1286 Description: Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please ref
dministrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/permalink/231071/cve-2024-8160pdf-en-US_InternalID-231071.pdf
CVE ID: CVE-2024-8161 State: PUBLISHED Published: 2024-08-26T08:46:08.220Z Last Updated: 2024-08-26T15:07:44.572Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CIGES Products: CIGESv2 Problem Types: CWE-89 Description: SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all the information stored in the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-vulnerability-
: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-vulnerability-cigesv2-system
CVE ID: CVE-2024-8162 State: PUBLISHED Published: 2024-08-26T13:00:09.562Z Last Updated: 2024-08-27T18:42:21.578Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: TOTOLINK Products: T10 AC1200 Problem Types: CWE-798 Description: A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
o the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275760 - https://vuldb.com/?ctiid.275760 - https://vuldb.com/?submit.392015 - https://github.com/rohitburke/TOTOLINK - https://www.totolink.net/
CVE ID: CVE-2024-8163 State: PUBLISHED Published: 2024-08-26T13:00:11.158Z Last Updated: 2025-11-24T06:20:40.634Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: Chengdu Everbrite Network Technology Products: BeikeShop Problem Types: CWE-22 Description: A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade th
exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275761 - https://vuldb.com/?ctiid.275761 - https://vuldb.com/?submit.393374 - https://github.com/DeepMountains/zzz/blob/main/CVE4-1.md
CVE ID: CVE-2024-8164 State: PUBLISHED Published: 2024-08-26T13:31:04.258Z Last Updated: 2025-11-24T06:20:49.733Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: Chengdu Everbrite Network Technology Products: BeikeShop Problem Types: CWE-434, CWE-284 Description: A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.6.0 is able to mitigate
ed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.6.0 is able to mitigate this issue. The affected component should be upgraded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275762 - https://vuldb.com/?ctiid.275762 - https://vuldb.com/?submit.393375 - https://github.com/DeepMountains/zzz/blob/main/CVE4-2.md
CVE ID: CVE-2024-8165 State: PUBLISHED Published: 2024-08-26T14:00:06.012Z Last Updated: 2025-11-24T06:20:52.268Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Chengdu Everbrite Network Technology Products: BeikeShop Problem Types: CWE-22 Description: A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/file_manager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.6.0 is able to resolve this issue. It
otely. The exploit is publicly available and might be used. Upgrading to version 1.6.0 is able to resolve this issue. It is suggested to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275763 - https://vuldb.com/?ctiid.275763 - https://vuldb.com/?submit.393376 - https://github.com/DeepMountains/Mirage/blob/main/CVE18-1.md
CVE ID: CVE-2024-8166 State: PUBLISHED Published: 2024-08-26T14:31:04.519Z Last Updated: 2024-08-26T15:36:12.595Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Ruijie Products: EG2000K Problem Types: CWE-434 Description: A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275764 - https://vuldb.com/?ctiid.275764 - https://vuldb.com/?submit.393750 - https://github.com/qiuhuihk/cve/blob/main/ruijie.md
CVE ID: CVE-2024-8167 State: PUBLISHED Published: 2024-08-26T14:31:06.359Z Last Updated: 2024-08-26T14:56:38.098Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Portal Problem Types: CWE-89 Description: A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275766 - https://vuldb.com/?ctiid.2757
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275766 - https://vuldb.com/?ctiid.275766 - https://vuldb.com/?submit.397714 - https://github.com/t4rrega/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-8168 State: PUBLISHED Published: 2024-08-26T15:00:04.914Z Last Updated: 2024-08-26T17:22:45.946Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Online Bus Reservation Site Problem Types: CWE-89 Description: A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275767 - https://vuldb.com/?ctiid.275767 - https://vuldb.com/?submit.397715 - https://github.com/t4rrega/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2024-8169 State: PUBLISHED Published: 2024-08-26T15:00:06.502Z Last Updated: 2024-08-26T15:31:19.647Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Online Quiz Site Problem Types: CWE-89 Description: A vulnerability was found in code-projects Online Quiz Site 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file signupuser.php. The manipulation of the argument lid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275768 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275768 - https://vuldb.com/?ctiid.275768 - https://vuldb.com/?submit.397718 - https://github.com/t4rrega/cve/issues/5 - https://code-projects.org/
CVE ID: CVE-2024-8170 State: PUBLISHED Published: 2024-08-26T15:31:05.067Z Last Updated: 2024-08-26T17:42:52.280Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:N/A:P) Vendors: SourceCodester Products: Zipped Folder Manager App Problem Types: CWE-434 Description: A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275769 - https://vuldb.com/?ctiid.275769 - https://vuldb.com/?submit.397719 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Zipped_Folder_Manager_App_File_Upload.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8171 State: PUBLISHED Published: 2024-08-26T15:31:07.339Z Last Updated: 2024-08-26T15:39:50.636Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file staffcatedit.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275770 - https://vuld
ay be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275770 - https://vuldb.com/?ctiid.275770 - https://vuldb.com/?submit.397720 - https://github.com/t4rrega/cve/issues/6 - https://itsourcecode.com/
CVE ID: CVE-2024-8172 State: PUBLISHED Published: 2024-08-26T16:00:06.972Z Last Updated: 2024-08-28T14:31:33.583Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: QR Code Attendance System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275771 - https://vuldb.com/?ctiid.275771 - https://vuldb.com/?submit.397724 - https://github.com/jadu101/CVE/blob/main/SourceCodester_QR_Code_Attendance_System_delete_student_XSS.md - https://github.com/jadu101/CVE/blob/main/SourceCodester_QR_Code_Attendance_System_delete_attendance_XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8173 State: PUBLISHED Published: 2024-08-26T16:00:08.889Z Last Updated: 2024-08-26T17:18:22.408Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file /login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275772
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275772 - https://vuldb.com/?ctiid.275772 - https://vuldb.com/?submit.397882 - https://github.com/prankfulin/cve/blob/main/sql1.md - https://code-projects.org/
CVE ID: CVE-2024-8174 State: PUBLISHED Published: 2024-08-26T16:31:04.841Z Last Updated: 2024-08-26T16:52:23.514Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79 Description: A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login.php of the component Login Page. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275773 - https://vuldb.com/?ctiid.275773 - https://vuldb.com/?submit.397883 - https://github.com/prankfulin/cve/blob/main/xss.md - https://code-projects.org/
CVE ID: CVE-2024-8175 State: PUBLISHED Published: 2024-09-25T08:04:23.196Z Last Updated: 2024-09-25T14:02:28.368Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux ARM SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Win (SL), CODESYS Embedded Target Visu Toolkit, CODESYS HMI