Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-42496 State: PUBLISHED Published: 2024-09-30T07:51:05.883Z Last Updated: 2024-09-30T15:46:18.017Z Severity: LOW (CVSS 2.4 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: TECHNO SUPPORT COMPANY Products: Smart-tab Android app Problem Types: CWE-256 Description: Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://tsc-soft.co.jp/smart-tab/ - https://jvn.jp/en/jp
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://tsc-soft.co.jp/smart-tab/ - https://jvn.jp/en/jp/JVN42445661/
CVE ID: CVE-2024-42497 State: PUBLISHED Published: 2024-08-22T15:17:11.468Z Last Updated: 2024-08-22T15:31:45.824Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-42499 State: PUBLISHED Published: 2024-11-15T05:26:23.645Z Last Updated: 2024-11-18T15:17:46.230Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: unclebob Products: FitNesse Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/unclebob/fitnesse/releases/tag/20241026 -
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/unclebob/fitnesse/releases/tag/20241026 - https://fitnesse.org/FitNesseDownload - https://jvn.jp/en/jp/JVN36791327/
CVE ID: CVE-2024-42500 State: PUBLISHED Published: 2024-09-09T19:22:37.545Z Last Updated: 2025-03-25T16:51:41.075Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE HP-UX ONCplus Description: HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04697en_us&docLocale=en_US
CVE ID: CVE-2024-42501 State: PUBLISHED Published: 2024-09-17T17:13:34.722Z Last Updated: 2024-09-18T14:58:56.294Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba OS Description: An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US
CVE ID: CVE-2024-42502 State: PUBLISHED Published: 2024-09-17T17:14:54.458Z Last Updated: 2024-09-18T14:38:16.739Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba OS Description: Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US
CVE ID: CVE-2024-42503 State: PUBLISHED Published: 2024-09-17T17:16:10.361Z Last Updated: 2024-09-18T14:35:00.233Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba OS Description: Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US
CVE ID: CVE-2024-42504 State: PUBLISHED Published: 2024-10-03T06:38:19.154Z Last Updated: 2024-10-03T15:21:24.112Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Hewlett Packard Enterprise Products: HPE IceWall Agent products Problem Types: CWE-352 Description: A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04711en_us&docLocale=en_US
CVE ID: CVE-2024-42505 State: PUBLISHED Published: 2024-09-24T18:09:27.417Z Last Updated: 2024-09-26T03:55:49.884Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba OS Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichme
arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04712en_us&docLocale=en_US
CVE ID: CVE-2024-42506 State: PUBLISHED Published: 2024-09-24T18:10:30.812Z Last Updated: 2024-09-26T03:55:50.783Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba OS Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichme
CVE ID: CVE-2024-42507 State: PUBLISHED Published: 2024-09-24T18:11:37.946Z Last Updated: 2024-09-26T03:55:51.695Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba OS Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichme
CVE ID: CVE-2024-42508 State: PUBLISHED Published: 2024-10-18T15:10:26.609Z Last Updated: 2025-03-17T21:29:01.123Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE OneView Problem Types: CWE-200 Description: This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04721en_us&docLocale=en_US
CVE ID: CVE-2024-42509 State: PUBLISHED Published: 2024-11-05T22:34:31.648Z Last Updated: 2024-11-09T04:55:46.815Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 Description: Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04722en_us&docLocale=en_US
CVE ID: CVE-2024-42512 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-11T15:11:37.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf
CVE ID: CVE-2024-42513 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-10T21:50:30.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42513.pdf
CVE ID: CVE-2024-42514 State: PUBLISHED Published: 2024-10-01T00:00:00 Last Updated: 2024-10-07T14:19:56.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/supp
s: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0024 - https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0024-001-v2.pdf
CVE ID: CVE-2024-42515 State: PUBLISHED Published: 2024-10-31T00:00:00 Last Updated: 2024-11-01T15:26:55.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Glossarizer through 1.5.2 improperly tries to convert text into HTML. Even though the application itself escapes special characters (e.g., <>), the underlying library converts these encoded characters into legitimate HTML, thereby possibly causing stored XSS. Attackers can append a XSS payload to a word that has a corresponding glossary entry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PebbleRoad/glossarizer - https://www.npmjs.com/package/glossarizer - https://herolab.usd.de/security-
https://github.com/PebbleRoad/glossarizer - https://www.npmjs.com/package/glossarizer - https://herolab.usd.de/security-advisories/usd-2024-0011/
CVE ID: CVE-2024-42516 State: PUBLISHED Published: 2025-07-10T16:53:13.201Z Last Updated: 2025-11-04T21:08:46.021Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-20 Description: HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue. Users are recommended to upgrade to version 2.4.64, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
rade to version 2.4.64, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html
CVE ID: CVE-2024-42520 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:54:08.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/c10uds/totolink_A3002R_stackoverflow
CVE ID: CVE-2024-42523 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-23T17:37:56.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/sanluan/PublicCMS/issues/IADVDM - https://gist.github.com/ilikeoyt/3dbbca2679c2551eaaeaea9c83acf1a1
CVE ID: CVE-2024-42531 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-29T13:02:08.313280 Vendors: n/a Products: n/a Problem Types: n/a Description: Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets with a specific set of URLs that can be used to redirect the camera feed. NOTE: the vendor's perspective is that the Anonymous120386 sample code can establish RTSP protocol communictaion, but cannot obtain video or audio data; thus, there is no risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://ezviz.com - https://github.com/Anonymous120386/Anonymous
CVE ID: CVE-2024-42533 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-25T14:39:36.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attackers to execute arbitrary code via the GEST_LOGIN parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/7h30th3r0n3/eae27e0eed39741365c55dfd46b57dc8
CVE ID: CVE-2024-42543 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T18:31:49.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3700R/loginauth.md
CVE ID: CVE-2024-42545 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:30:56.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3700R/setWizardCfg.md
CVE ID: CVE-2024-42546 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-15T15:22:09.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3100R/loginauth_password.md
CVE ID: CVE-2024-42547 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:25:39.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3100R/loginauth.md
CVE ID: CVE-2024-42550 State: PUBLISHED Published: 2024-08-21T00:00:00 Last Updated: 2024-10-30T19:39:09.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management System commit 18aa3d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/3332b6ba95f5a95aec4f635d8bb20f7c
CVE ID: CVE-2024-42552 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-22T14:20:51.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/2386856df3f3ffa7bdc4738e24da4af3
CVE ID: CVE-2024-42553 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T15:55:58.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/4b22a22c73b16c7c22c06d4b3f033fdc
CVE ID: CVE-2024-42554 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T14:39:31.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_added.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/7d2ebfe6dfa87eecf8f3e6d4eefc48ba
CVE ID: CVE-2024-42555 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T15:57:56.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/afd445b90e13a27a6422cea2f5ff0f64
CVE ID: CVE-2024-42556 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T15:57:50.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/9688bcdd3e05ba79ebf4ff1042609b20
CVE ID: CVE-2024-42557 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-09-13T13:21:17.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/0785597ae7abc8f10cd5c5537f5467b5
CVE ID: CVE-2024-42558 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T20:29:45.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_room.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/9651b4977e86f5b1bcae7a8959ff3342
CVE ID: CVE-2024-42559 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:13:07.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/99d2ebf7b5598ef227262ba1b2bb392f/edit
CVE ID: CVE-2024-42560 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:02:02.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/4c05ee72ab4b365ef81c199aaa0558d0
CVE ID: CVE-2024-42561 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T14:34:09.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/5d2d9104dc4dd7f5dda99cbbd615a0b8
CVE ID: CVE-2024-42562 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T16:01:21.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/2dcca275bcc18e8058cefef714a2f61b
CVE ID: CVE-2024-42563 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-21T16:05:26.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/f645f99661ff33aed44d65dfa49e36fe
CVE ID: CVE-2024-42564 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-23T14:19:48.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/8ccda41cac32fe781b89c6c0db245ab7
CVE ID: CVE-2024-42565 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T20:25:37.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/648f2cd4f5e58560cbc9308d06e2f876
CVE ID: CVE-2024-42566 State: PUBLISHED Published: 2024-08-20T00:00:00 Last Updated: 2024-08-20T18:04:08.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/topsky979/95a8f0d24f1d409a14df4c04e0a8c547