Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-25431 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-13T14:53:26.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bytecodealliance/wasm-micro-runtime/issues/3122 - https://github.com/bytecodealliance/wasm-micro-runtime/pull/3126 - https://gist.github.com/haruki3hhh/bd228e6dcaf8c18140e1074964912b39
CVE ID: CVE-2024-25434 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-11-14T19:52:12.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://drive.google.com/file/d/1MFuAyZukdJeA7HKz8o8pOKLJMjURTZCt/view?usp=sharing - https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25434%20-%3E%20Stored%20XSS%20in%20input%20public%20name%20of%20the%20Component
CVE ID: CVE-2024-25435 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-03-28T23:44:58.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25435%20-%3E%20Reflected%20XSS%20on%20md1patient%20login%20page
CVE ID: CVE-2024-25436 State: PUBLISHED Published: 2024-03-01T00:00:00.000Z Last Updated: 2025-03-28T18:51:31.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1nSC8OlxsEnOajZ2JYuwoKFZqyB764WkL/view?usp=drivesdk - https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25438%20-%3E%20Stored%20XSS%20in%20input%
esdk - https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25438%20-%3E%20Stored%20XSS%20in%20input%20Subject%20of%20the%20Add%20Discussion%20Component%20under%20Submissions
CVE ID: CVE-2024-25438 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-15T20:45:32.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1-9yUkbsQ-blYpTsdZoXfu3ALBA5wQCbG/view?usp=sharing - https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25438%20-%3E%20Stored%20XSS%20in%20input%20Subj
https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25438%20-%3E%20Stored%20XSS%20in%20input%20Subject%20of%20the%20Add%20Discussion%20Component%20under%20Submissions
CVE ID: CVE-2024-25442 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-11-04T18:29:30.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.launchpad.net/hugin/+bug/2025032 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAV7IMHCOIMBEIW42KM2QUJ4MDQLNW3Z/
CVE ID: CVE-2024-25443 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-11-04T18:29:31.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the HuginBase::ImageVariable<double>::linkWith function of Hugin v2022.0.0 allows attackers to cause a heap-use-after-free via parsing a crafted image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/hugin/+bug/2025035 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAV7IMHCOIMBEIW42KM2QUJ4MDQLNW3Z/
CVE ID: CVE-2024-25445 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-11-04T18:29:33.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/hugin/+bug/2025038 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAV7IMHCOIMBEIW42KM2QUJ4MDQLNW3Z/
CVE ID: CVE-2024-25446 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-11-04T18:29:34.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.launchpad.net/hugin/+bug/2025037 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAV7IMHCOIMBEIW42KM2QUJ4MDQLNW3Z/
CVE ID: CVE-2024-25447 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:39:34.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/derf/feh/issues/709 - https://git.enlightenment.org/old/legacy-imlib2/issues/20
CVE ID: CVE-2024-25448 State: PUBLISHED Published: 2024-02-09T00:00:00 Last Updated: 2024-08-19T16:21:50.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/derf/feh/issues/711 - https://git.enlightenment.org/old/legacy-imlib2/issues/20
CVE ID: CVE-2024-25450 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-16T18:13:44.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/derf/feh/issues/712 - https://git.enlightenment.org/old/legacy-imlib2/issues/20
CVE ID: CVE-2024-25451 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-12T15:06:07.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_DataBuffer::ReallocateBuffer() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/872
CVE ID: CVE-2024-25452 State: PUBLISHED Published: 2024-02-09T00:00:00 Last Updated: 2024-08-26T19:02:28.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_UrlAtom::AP4_UrlAtom() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/873
CVE ID: CVE-2024-25453 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-16T18:14:41.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_StszAtom::GetSampleSize() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/874 - https://github.com/axiomatic-systems/Bento4/issues/204
CVE ID: CVE-2024-25454 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-08T18:32:47.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_DescriptorFinder::Test() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/875
CVE ID: CVE-2024-25458 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-15T15:36:15.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera (circuit board identifier A9-48B-V1.0) firmware v.CYCAM_48B_BC01_v87_0903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tanzhuyin.com/posts/cve-2024-25458/
CVE ID: CVE-2024-25461 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-15T19:17:09.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://safe-surf.ru/upload/ALRT/ALRT-20230808.1.pdf - https://safe-surf.ru/specialists/news/697426/
CVE ID: CVE-2024-25466 State: PUBLISHED Published: 2024-02-16T00:00:00 Last Updated: 2024-08-19T19:13:32.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rnmods/react-native-document-picker/blob/0be5a70c3b456e35c2454aaf4dc8c2d40eb2ab47/android/src/main/java/com/reactnativedocumentpicker/RNDocumentPickerModule.java - https://github.com/FixedOctocat/CVE-2024-25466/tree
ain/java/com/reactnativedocumentpicker/RNDocumentPickerModule.java - https://github.com/FixedOctocat/CVE-2024-25466/tree/main
CVE ID: CVE-2024-25468 State: PUBLISHED Published: 2024-02-17T00:00:00.000Z Last Updated: 2025-03-28T20:42:11.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_time parameter of the NTPSyncWithHost component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thKim0/totolink
CVE ID: CVE-2024-25469 State: PUBLISHED Published: 2024-02-23T00:00:00 Last Updated: 2024-08-27T18:57:56.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/crmeb/crmeb_java/ - https://github.com/crmeb/crmeb_java/issues/20
CVE ID: CVE-2024-25501 State: PUBLISHED Published: 2024-03-09T00:00:00.000Z Last Updated: 2025-03-13T20:00:37.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Drun1baby/8270239bed2952dbd99cc8d4262728e8
CVE ID: CVE-2024-25502 State: PUBLISHED Published: 2024-02-15T00:00:00 Last Updated: 2024-08-28T19:14:58.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flusity/flusity-CMS/issues/10
CVE ID: CVE-2024-25503 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-19T19:18:29.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/EQSTLab/PoC/tree/main/2024/XSS/CVE-2024-25503
CVE ID: CVE-2024-25506 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-01T23:44:09.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pm_sys_sys cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40proflamyt/cve-2024-25506-425ba3212fb6
CVE ID: CVE-2024-25507 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#plan_template_previewaspx
CVE ID: CVE-2024-25508 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#bulletin_template_showaspx
CVE ID: CVE-2024-25509 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file_download.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#wf_file_downloadaspx
CVE ID: CVE-2024-25510 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#address_public_showaspx
CVE ID: CVE-2024-25511 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#address_public_newaspx
CVE ID: CVE-2024-25512 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#attachdownloadaspx
CVE ID: CVE-2024-25513 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#kaizen_downloadaspx
CVE ID: CVE-2024-25514 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-01T23:44:09.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#wf_template_child_field_listaspx
CVE ID: CVE-2024-25515 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work_finish_file_down.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#wf_work_finish_file_downaspx
CVE ID: CVE-2024-25517 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#mfaspx
CVE ID: CVE-2024-25518 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /WorkFlow/wf_get_fields_approve.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#wf_get_fields_approveaspx
CVE ID: CVE-2024-25519 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#wf_work_printaspx
CVE ID: CVE-2024-25520 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#sys_blogtemplate_newaspx
CVE ID: CVE-2024-25521 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#get_companyaspx
CVE ID: CVE-2024-25522 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_form_save.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#wf_work_form_saveaspx
CVE ID: CVE-2024-25523 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#file_memoaspx
CVE ID: CVE-2024-25524 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#workplanattachdownloadaspx
CVE ID: CVE-2024-25525 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#officefiledownloadaspx
CVE ID: CVE-2024-25526 State: PUBLISHED Published: 2024-05-08T00:00:00 Last Updated: 2024-08-01T23:44:09.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#pm_gatt_incaspx
CVE ID: CVE-2024-25527 State: PUBLISHED Published: 2024-05-08T00:00:00.000Z Last Updated: 2025-03-13T18:35:14.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d#worklog_template_showaspx