Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24350 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-08T18:45:38.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40viniciuspinheiros/e-sic-livre-2-0-authenticated-file-upload-leads-to-remote-code-execution-rce-5937c9537258 - https://gist.github.com/viniciuspinheiros/4e53b297fd6466cf12d01867ee1c9c33
CVE ID: CVE-2024-24375 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-29T16:53:35.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RiverGone/records/blob/main/JFinalcms-admin-admin-name.md
CVE ID: CVE-2024-24377 State: PUBLISHED Published: 2024-02-16T00:00:00 Last Updated: 2024-08-29T18:25:36.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zhuabapa.top/2024/01/18/idocv_20231228_rce/#more
CVE ID: CVE-2024-24386 State: PUBLISHED Published: 2024-02-15T00:00:00 Last Updated: 2024-08-19T20:41:45.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://erickduarte.notion.site/VitalPBX-3-2-4-5-ee402173241c493687aa22ec60160c67?pvs=4 - https://github.com/erick-duarte/CVE-2024-24386
CVE ID: CVE-2024-24388 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-05T18:30:26.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cnblogs.com/rxtycc/p/17948379
CVE ID: CVE-2024-24389 State: PUBLISHED Published: 2024-03-07T00:00:00.000Z Last Updated: 2025-03-27T21:02:47.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://j11zuc9f0h2.feishu.cn/docx/TXRmdIcH3ocn1WxuEQBcNPpjnLe
CVE ID: CVE-2024-24393 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:41:14.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute arbitrary code via crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zyx0814/Pichome/issues/24
CVE ID: CVE-2024-24396 State: PUBLISHED Published: 2024-02-05T00:00:00 Last Updated: 2024-08-26T18:19:41.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R - https://cves.at/posts/cve-2024-24396/writeup/
CVE ID: CVE-2024-24397 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-05-15T19:48:16.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R - https://cves.at/posts/cve-2024-24397/writeup/
CVE ID: CVE-2024-24398 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-15T19:46:01.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R - https://cves.at/posts/cve-2024-24398/writeup/
CVE ID: CVE-2024-24399 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-06-05T18:25:26.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/capture0x/leptoncms/blob/main/README.md - https://packetstormsecurity.com/files/176647/Lepton-CMS-7.0.0-Remote-Code-Execution.html - https://github.com/capture0x/leptoncms - https://www.exploit-db.com/exploits/51949
CVE ID: CVE-2024-24401 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-08-29T15:04:28.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/
CVE ID: CVE-2024-24402 State: PUBLISHED Published: 2024-02-26T00:00:00.000Z Last Updated: 2025-03-24T19:56:51.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/
CVE ID: CVE-2024-24403 State: REJECTED Published: N/A Last Updated: 2024-05-01T19:35:20.913572 Description: No description available.
CVE ID: CVE-2024-24407 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-08-23T18:18:50.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Best Courier management system v.1.0 allows a remote attacker to obtain sensitive information via print_pdets.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/modian-un/CVE/blob/main/Barangay%20Population%20Monitoring%20System.md - https://github.com/modian-un/CVE/blob/main/Best%20courier%20management%20system.md
CVE ID: CVE-2024-24409 State: PUBLISHED Published: 2024-11-08T08:01:12.844Z Last Updated: 2024-11-08T14:20:25.641Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ManageEngine Products: ADManager Plus Problem Types: CWE-269 Description: Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-24409.html
CVE ID: CVE-2024-24416 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-15T15:03:57.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24417 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-14T16:07:23.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24418 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-24T17:35:11.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24419 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T20:11:54.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_traffic_flow_template_packet_filter function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24420 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-20T20:30:06.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24421 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-20T13:25:41.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24422 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-19T13:57:09.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24423 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T18:13:47.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container function at /nas/ies/EsmMessageContainer.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24424 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-14T15:48:44.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24425 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-19T16:34:30.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked - https://github.com/magma/magma - https://github.com/OPENAIRINTERFACE/openair-epc-fed
CVE ID: CVE-2024-24426 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T16:11:22.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked - https://github.com/magma/magma - https://github.com/OPENAIRINTERFACE/openair-epc-fed
CVE ID: CVE-2024-24427 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T18:55:21.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24428 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T18:56:12.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24429 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-03T14:39:17.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the nas_eps_send_emm_to_esm function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24430 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-23T17:29:17.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the mme_ue_find_by_imsi function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24431 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T16:04:26.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet with a zero-length EMM message length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked - https://open5gs.org/
CVE ID: CVE-2024-24432 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:15:53.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the ogs_kdf_hash_mme function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24442 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-24T18:25:18.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://openairinterface.com - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24443 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T19:05:55.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://openairinterface.com - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24444 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-02-10T22:12:16.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://openairinterface.com - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24445 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T20:19:58.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is unsupported, OAI indexes into a null function pointer and subsequently dereferences it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://openairinterface.com - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24446 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-19T16:38:13.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContextSetupResponse message sent to the AMF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openairinterface.org/ - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24447 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-15T21:08:56.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the ngap_amf_handle_pdu_session_resource_setup_response function of oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a PDU Session Resource Setup Response with an empty Response Item list. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openairinterface.org/ - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24449 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-26T19:01:19.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialUEMessage message sent to the AMF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openairinterface.org/ - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24450 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-15T21:08:56.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource Setup Response with a suffciently large FailedToSetupList IE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openairinterface.org/ - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24451 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-24T19:12:55.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://openairinterface.com - https://cellularsecurity.org/ransacked
CVE ID: CVE-2024-24452 State: PUBLISHED Published: 2024-11-15T00:00:00.000Z Last Updated: 2025-03-31T20:27:14.430Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Athonet Core Description: An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04780en_us&docLocale=en_US
CVE ID: CVE-2024-24453 State: PUBLISHED Published: 2024-11-15T00:00:00.000Z Last Updated: 2025-08-26T21:07:00.137Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Athonet Core Description: An invalid memory access when handling the ProtocolIE_ID field of E-RAB NotToBeModifiedBearerModInd information element in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04780en_us&d
Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04780en_us&docLocale=en_US
CVE ID: CVE-2024-24454 State: PUBLISHED Published: 2024-11-15T00:00:00.000Z Last Updated: 2025-08-26T21:08:36.197Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Athonet Core Description: An invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04780en_us&docLocale=en_US