Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ess is vulnerable to Stored Cross-Site Scripting via the slitems parameter in the WL Special Day Offer Widget in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/27b8e0c0-fb0b-4d36-abc4-3e66ec7b5195?source=cve - https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/2.8.2/includes/addons/universal_pro
7b5195?source=cve - https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/2.8.2/includes/addons/universal_product.php#L2548 - https://plugins.trac.wordpress.org/changeset/3061864/woolentor-addons/tags/2.8.4/includes/addons/universal_product.php
CVE ID: CVE-2024-2869 State: PUBLISHED Published: 2025-05-15T20:09:44.326Z Last Updated: 2025-05-19T14:50:25.018Z Vendors: Unknown Products: Easy Property Listings Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Property Listings WordPress plugin before 3.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4093c12e-f62b-4357-8893-649cd2aaeace/
CVE ID: CVE-2024-2870 State: PUBLISHED Published: 2024-07-13T06:00:02.984Z Last Updated: 2024-08-01T19:25:42.186Z Vendors: Unknown Products: socialdriver-framework Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/688522d2-ee28-44f8-828d-352f06e43885/
CVE ID: CVE-2024-2871 State: PUBLISHED Published: 2024-04-09T18:59:08.927Z Last Updated: 2025-02-26T18:22:08.190Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dglingren Products: Media Library Assistant Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contribu
k of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9e63fb84-a16b-447f-be73-e01f30881445?source=cve - https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-custom-list.php#L151 - https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-c
-list.php#L151 - https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-custom-list.php#L1798 - https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-custom-list.php#L1949
CVE ID: CVE-2024-2872 State: PUBLISHED Published: 2024-08-01T06:00:04.565Z Last Updated: 2024-08-02T18:50:24.448Z Vendors: Unknown Products: socialdriver-framework Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/15d3150c-673c-4c36-ac5e-85767d78b9eb/
CVE ID: CVE-2024-2873 State: PUBLISHED Published: 2024-03-25T21:58:52.325Z Last Updated: 2024-08-01T19:50:46.158Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: wolfSSL Inc. Products: wolfSSH Problem Types: CWE-287 Description: A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssh/pull/670 - https://github.com/wolfSSL/wolfssh/pull/671 - https://www.wolfssl.com/docs/security-vulne
com/wolfSSL/wolfssh/pull/670 - https://github.com/wolfSSL/wolfssh/pull/671 - https://www.wolfssl.com/docs/security-vulnerabilities/
CVE ID: CVE-2024-2874 State: PUBLISHED Published: 2024-05-23T07:02:35.610Z Last Updated: 2024-10-03T06:23:19.176Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/451911 - https://hackerone.com/reports/2426166
CVE ID: CVE-2024-2875 State: REJECTED Published: N/A Last Updated: 2024-06-14T20:15:41.194Z Description: No description available.
CVE ID: CVE-2024-2876 State: PUBLISHED Published: 2024-05-02T16:52:46.382Z Last Updated: 2024-08-01T19:25:42.164Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: icegram Products: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and inc
vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e0ca6ac4-0d89-4601-94fc-cce5a0af9c56?source=cve - https://github.com/WordpressPluginDirectory/email-subscriber
lities/id/e0ca6ac4-0d89-4601-94fc-cce5a0af9c56?source=cve - https://github.com/WordpressPluginDirectory/email-subscribers/blob/main/email-subscribers/lite/includes/classes/class-ig-es-subscriber-query.php#L304 - https://github.com/WordpressPluginDirectory/email-subscribers/blob/main/email-subscribers/lite/admin/class-email-subscribers-admin.php#L1433 - https://plugins.trac.wordpress.org/changeset/3060251/email-subscribers/trunk/lite/includes/classes/class-ig-es-subscriber-query.php
CVE ID: CVE-2024-2877 State: PUBLISHED Published: 2024-04-30T14:58:09.735Z Last Updated: 2025-02-13T17:47:31.156Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: HashiCorp Products: Vault Enterprise Problem Types: CWE-532 Description: Vault Enterprise, when configured with performance standby nodes and a configured audit device, will inadvertently log request headers on the standby node. These logs may have included sensitive HTTP request information in cleartext. This vulnerability, CVE-2024-2877, was fixed in Vault Enterprise 1.15.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hs
tional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hsec-2024-10-vault-enterprise-leaks-sensitive-http-request-headers-in-audit-log-when-deployed-with-a-performance-standby-node - https://security.netapp.com/advisory/ntap-20240614-0002/
CVE ID: CVE-2024-2878 State: PUBLISHED Published: 2025-02-05T12:21:10.806Z Last Updated: 2025-02-05T20:11:02.837Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/451918 - https://hackerone.com/reports/
SA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/451918 - https://hackerone.com/reports/2416356
CVE ID: CVE-2024-2879 State: PUBLISHED Published: 2024-04-03T03:24:41.863Z Last Updated: 2024-08-01T19:25:42.147Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: LayerSlider Products: LayerSlider Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into al
on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3fddf96e-029c-4753-ba82-043ca64b78d3?source=cve - https://layerslider.com/release-log/
CVE ID: CVE-2024-2880 State: PUBLISHED Published: 2024-07-11T06:57:24.360Z Last Updated: 2024-09-17T17:00:19.878Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-284 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 in which a user with `admin_group_member` custom role permission could ban group members. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/451921 - https://hackerone.com/reports/2431597
CVE ID: CVE-2024-2881 State: PUBLISHED Published: 2024-08-29T23:10:59.179Z Last Updated: 2024-08-30T14:18:36.327Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: WolfSSL Products: wolfCrypt Problem Types: CWE-1256, CWE-252 Description: Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl/releases/
structure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable
CVE ID: CVE-2024-2882 State: PUBLISHED Published: 2024-06-27T18:55:42.276Z Last Updated: 2024-08-01T19:25:42.123Z Vendors: SDG Technologies Products: PnPSCADA Problem Types: CWE-862 Description: SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within the SCADA system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-02
CVE ID: CVE-2024-2883 State: PUBLISHED Published: 2024-03-26T20:09:33.556Z Last Updated: 2025-03-14T00:51:48.375Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html - https://issues.chromium.org/issues/327807820 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes
romium.org/issues/327807820 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT/
CVE ID: CVE-2024-2884 State: PUBLISHED Published: 2024-07-16T22:14:01.489Z Last Updated: 2025-03-19T16:04:27.346Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/41491373
CVE ID: CVE-2024-2885 State: PUBLISHED Published: 2024-03-26T20:09:33.968Z Last Updated: 2025-03-18T15:25:32.912Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html - https://issues.chromium.org/issues/328958020 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
m.org/issues/328958020 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT/
CVE ID: CVE-2024-2886 State: PUBLISHED Published: 2024-03-26T20:09:34.236Z Last Updated: 2025-03-22T13:41:07.606Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html - https://issues.chromium.org/issues/330575496 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3
org/issues/330575496 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT/
CVE ID: CVE-2024-2887 State: PUBLISHED Published: 2024-03-26T20:09:34.488Z Last Updated: 2025-03-28T19:24:50.628Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html - https://issues.chromium.org/issues/330588502 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3RKI7
issues/330588502 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT/
CVE ID: CVE-2024-2888 State: PUBLISHED Published: 2024-03-26T05:41:02.491Z Last Updated: 2024-08-05T16:30:13.822Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BoldGrid Products: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Stored XSS.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.26.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
op Editor: from n/a through 1.26.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/post-and-page-builder/wordpress-post-and-page-builder-by-boldgrid-plugin-1-26-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-2889 State: PUBLISHED Published: 2024-03-26T06:33:29.638Z Last Updated: 2024-08-05T18:34:46.199Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Lab Products: WP-Lister Lite for Amazon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon allows Stored XSS.This issue affects WP-Lister Lite for Amazon: from n/a through 2.6.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-lister-for-amazon/wordpress-wp-lister-lite-for-amazon-plugin-2-
nces: - https://patchstack.com/database/vulnerability/wp-lister-for-amazon/wordpress-wp-lister-lite-for-amazon-plugin-2-6-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-2890 State: PUBLISHED Published: 2024-03-28T06:13:53.929Z Last Updated: 2025-04-08T20:44:32.052Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Tumult Inc. Products: Tumult Hype Animations Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/tumult-hype-animations/wordpress-tumult-hype-animations-plugin-1-9-12-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-2891 State: PUBLISHED Published: 2024-03-26T14:00:07.492Z Last Updated: 2024-08-01T19:25:42.202Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC7 Problem Types: CWE-121 Description: A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257934 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure
VDB-257934 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257934 - https://vuldb.com/?ctiid.257934 - https://vuldb.com/?submit.300354 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formQuickIndex.md
CVE ID: CVE-2024-2892 State: PUBLISHED Published: 2024-03-26T16:00:05.583Z Last Updated: 2024-08-29T19:09:59.106Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC7 Problem Types: CWE-121 Description: A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257935. NOTE: The vendor was contacted early about this disclosure
he associated identifier of this vulnerability is VDB-257935. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257935 - https://vuldb.com/?ctiid.257935 - https://vuldb.com/?submit.300355 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formSetCfm.md
CVE ID: CVE-2024-2893 State: PUBLISHED Published: 2024-03-26T16:31:04.545Z Last Updated: 2024-08-12T13:37:09.831Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC7 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257936. NOTE: The vendor was contacted early about this disclosure but did
The identifier of this vulnerability is VDB-257936. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257936 - https://vuldb.com/?ctiid.257936 - https://vuldb.com/?submit.300356 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formSetDeviceName_devName.md