Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-26304 State: PUBLISHED Published: 2024-05-01T14:43:12.761Z Last Updated: 2024-08-02T00:07:19.227Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central Description: There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability
d to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE ID: CVE-2024-26305 State: PUBLISHED Published: 2024-05-01T14:52:41.916Z Last Updated: 2024-08-02T00:07:19.370Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central Description: There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in
API (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
CVE ID: CVE-2024-26306 State: PUBLISHED Published: 2024-05-13T00:00:00.000Z Last Updated: 2025-11-03T20:36:55.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/esnet/iperf/releases/tag/3.17
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/esnet/iperf/releases/tag/3.17 - https://downloads.es.net/pub/iperf/esnet-secadv-2024-0001.txt.asc - https://www.insyde.com/security-pledge/SA-2024005
CVE ID: CVE-2024-26307 State: PUBLISHED Published: 2024-03-21T09:38:19.368Z Last Updated: 2025-02-13T17:41:13.412Z Vendors: Apache Software Foundation Products: Apache Doris Problem Types: CWE-362 Description: Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of someone renaming the file out from under user and chmodding the wrong file. This could theoretically happen, but the impact would be minimal. This issue affects Apache Doris: before 1.2.8, before 2.0.4. Users are recommended to upgrade to version 2.0.4, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
.4, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/5shhw8x8m271hd2wfwzqzwgf36pmc4pl - http://www.openwall.com/lists/oss-security/2024/03/21/2
CVE ID: CVE-2024-26308 State: PUBLISHED Published: 2024-02-19T08:31:50.192Z Last Updated: 2025-03-27T19:10:43.565Z Vendors: Apache Software Foundation Products: Apache Commons Compress Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg - http://www.openwall.com/lists/oss-security/2024/02/19/2 - https://security.netapp.com/ad
yo2d21p7vlqrhll9b17otbyq4npfg - http://www.openwall.com/lists/oss-security/2024/02/19/2 - https://security.netapp.com/advisory/ntap-20240307-0009/
CVE ID: CVE-2024-26309 State: PUBLISHED Published: 2024-03-08T00:00:00.000Z Last Updated: 2025-03-26T16:32:47.142Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/717102
CVE ID: CVE-2024-26310 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-28T14:55:21.205Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulne
es: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/716134
CVE ID: CVE-2024-26311 State: PUBLISHED Published: 2024-02-21T00:00:00.000Z Last Updated: 2025-08-27T15:43:56.152Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then reflected to the victim and gets executed by the web browser in the context of the vulnerable web application. Additional Analyst Notes: - CISA ADP Vulnr
executed by the web browser in the context of the vulnerable web application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/716134
CVE ID: CVE-2024-26312 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T00:07:19.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
CVE ID: CVE-2024-26313 State: PUBLISHED Published: 2024-03-08T00:00:00 Last Updated: 2024-11-05T17:11:55.357Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.13.P3 HF1 (6.13.0.3.1) is al
cious code gets executed by the web browser in the context of the vulnerable application. 6.13.P3 HF1 (6.13.0.3.1) is also a fixed release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/717102
CVE ID: CVE-2024-26314 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-21T20:37:15.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2024-26317 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:44:17.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT_AT_INFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1aGLAFz20-fc7ZLiWouegyK_65jCkGTDb/view?usp=sharing - https:
Vulnrichment: References: - https://drive.google.com/file/d/1aGLAFz20-fc7ZLiWouegyK_65jCkGTDb/view?usp=sharing - https://github.com/illumos/illumos-gate - https://rashidkhanpathan.github.io/posts/CVE-2024-26317-Elliptic-curve-point-addition-error/
CVE ID: CVE-2024-26318 State: PUBLISHED Published: 2024-02-19T00:00:00.000Z Last Updated: 2025-03-25T18:43:15.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://serenity.is/docs/release-notes/6.8.0
CVE ID: CVE-2024-26327 State: PUBLISHED Published: 2024-02-19T00:00:00 Last Updated: 2024-08-02T00:07:19.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lore.kernel.org/all/20240214-reuse-v4-5-89ad093a07f4%40daynix.com/ - https://security.netapp.com/advisory/ntap-20240419-0010/
CVE ID: CVE-2024-26328 State: PUBLISHED Published: 2024-02-19T00:00:00 Last Updated: 2024-11-06T14:39:09.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lore.kernel.org/all/20240213055345-mutt-send-email-mst%40kernel.org/ - https://security.netapp.com/advisory/ntap-20240419-0010/
CVE ID: CVE-2024-26329 State: PUBLISHED Published: 2024-04-05T00:00:00 Last Updated: 2024-11-14T20:04:12.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://x41-dsec.de/lab/advisories/x41-2024-001-chilkat-prng/
CVE ID: CVE-2024-26330 State: PUBLISHED Published: 2024-06-11T00:00:00 Last Updated: 2024-11-01T19:32:03.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secuvera.de/advisories/secuvera-SA-2024-04.txt - https://www.secuvera.de/advisories/secuvera-SA-2024-04.md
CVE ID: CVE-2024-26331 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-06T19:02:49.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind the cookie value to a session ID. Attackers can easily modify the cookie value, within a browser or by implementing client-side code outside of a browser. Attackers can bypass the authentication mechanism by modifying the cookie to contain an expected value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.recrystallize.com/merchant/ReCrystallize-Server-fo
Program Container: - CISA ADP Vulnrichment: References: - https://www.recrystallize.com/merchant/ReCrystallize-Server-for-Crystal-Reports.htm - https://sensepost.com/blog/2024/from-discovery-to-disclosure-recrystallize-server-vulnerabilities/
CVE ID: CVE-2024-26333 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-27T19:21:56.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/219
CVE ID: CVE-2024-26334 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-02T00:07:19.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/221
CVE ID: CVE-2024-26335 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-29T18:00:15.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/222
CVE ID: CVE-2024-26337 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-11-26T16:05:49.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swfc.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/223
CVE ID: CVE-2024-26339 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-11-07T16:05:04.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/225
CVE ID: CVE-2024-26342 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-04-22T16:00:14.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Nicholas-wei/bug-discovery/blob/main/asus/2/ASUS_ac68u.md
CVE ID: CVE-2024-26349 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-14T15:39:44.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_translation.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Icycu123/cms/blob/main/1.md
CVE ID: CVE-2024-26350 State: PUBLISHED Published: 2024-02-22T00:00:00.000Z Last Updated: 2025-03-28T18:29:40.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_contact_form_settings.php Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Icycu123/cms/blob/main/2.md
CVE ID: CVE-2024-26351 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-11-01T18:38:16.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_place.php Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Icycu123/cms/blob/main/4.md
CVE ID: CVE-2024-26352 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-14T19:19:46.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Icycu123/cms/blob/main/3.md
CVE ID: CVE-2024-26362 State: PUBLISHED Published: 2024-04-10T00:00:00 Last Updated: 2024-08-02T00:07:19.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com/files/177075/Enpass-Desktop-Application-6.9.2-HTML-Injection.html
CVE ID: CVE-2024-26367 State: PUBLISHED Published: 2024-05-14T16:06:41.521Z Last Updated: 2025-02-13T15:47:14.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Evertz microsystems MViP-II Firmware 8.6.5, XPS-EDGE-* Build 1467, evEDGE-EO-* Build 0029, MMA10G-* Build 0498, 570IPG-X19-10G Build 0691 allows a remote attacker to execute arbitrary code via a crafted payload to the login parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://cc.com - http://evertz.com - https://wiki.notveg.ninja/blog/CVE-2024-26367/
CVE ID: CVE-2024-26369 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-02T00:07:19.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving DataWriter's data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eProsima/Fast-DDS/issues/4365 - https://github.com/eProsima/Fast-DDS/pull/4375
CVE ID: CVE-2024-26445 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-28T20:25:51.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_place.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiaolanjing0/cms/blob/main/1.md
CVE ID: CVE-2024-26450 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-12-04T21:02:37.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue exists within Piwigo before v.14.2.0 allowing a malicious user to take over the application. This exploit involves chaining a Cross Site Request Forgery vulnerability to issue a Stored Cross Site Scripting payload stored within an Admin user's dashboard, executing remote JavaScript. This can be used to upload a new PHP file under an administrator and directly call that file from the victim's instance to connect back to a malicious listener. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
e to connect back to a malicious listener. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Piwigo/Piwigo/security/advisories/GHSA-p362-cfpj-q55f
CVE ID: CVE-2024-26454 State: PUBLISHED Published: 2024-03-15T00:00:00.000Z Last Updated: 2025-03-27T20:38:49.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OmRajpurkar/Healthcare-Chatbot/issues/4 - https://medium.com/%400x0d0x0a/healthcare-chatbot-xss-cve-2024-26454-acf2607bf210
CVE ID: CVE-2024-26455 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-08-28T20:19:49.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LuMingYinDetect/fluent-bit_defects/blob/main/fluent-bit_detect_1.md
CVE ID: CVE-2024-26458 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-12-06T21:01:53.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md - https://security.netapp.com/advisory/ntap-20240415-0010/
CVE ID: CVE-2024-26461 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-08-14T15:15:42.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md - https://security.netapp.com/advisory/ntap-20240415-0011/
CVE ID: CVE-2024-26462 State: PUBLISHED Published: 2024-02-26T00:00:00.000Z Last Updated: 2025-03-25T20:05:04.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md - https://security.netapp.com/advisory/ntap-20240415-0012/
CVE ID: CVE-2024-26464 State: REJECTED Published: N/A Last Updated: 2024-02-28T14:57:11.014279 Description: No description available.