Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24946 State: PUBLISHED Published: 2024-05-28T15:30:18.127Z Last Updated: 2025-02-13T17:40:36.211Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb686c` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to
eap corruption that occurs at offset `0xb686c` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1937 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1937
CVE ID: CVE-2024-24947 State: PUBLISHED Published: 2024-05-28T15:30:18.231Z Last Updated: 2025-02-13T17:40:36.885Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb68c4` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to
eap corruption that occurs at offset `0xb68c4` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1937 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1937
CVE ID: CVE-2024-24954 State: PUBLISHED Published: 2024-05-28T15:30:17.113Z Last Updated: 2025-02-13T17:40:37.510Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities.This CVE tracks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb69c8`. Addit
racks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb69c8`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1938 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1938
CVE ID: CVE-2024-24955 State: PUBLISHED Published: 2024-05-28T15:30:17.194Z Last Updated: 2025-02-13T17:40:38.321Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities.This CVE tracks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb69fc`. Addit
racks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb69fc`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1938 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1938
CVE ID: CVE-2024-24956 State: PUBLISHED Published: 2024-05-28T15:30:17.280Z Last Updated: 2025-02-13T17:40:39.216Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities.This CVE tracks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6a38`. Addit
racks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6a38`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1938 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1938
CVE ID: CVE-2024-24957 State: PUBLISHED Published: 2024-05-28T15:30:17.374Z Last Updated: 2025-02-13T17:40:39.958Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities.This CVE tracks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6aa4`. Addit
racks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6aa4`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1938 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1938
CVE ID: CVE-2024-24958 State: PUBLISHED Published: 2024-05-28T15:30:17.467Z Last Updated: 2025-02-13T17:40:40.592Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities.This CVE tracks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6bdc`. Addit
racks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6bdc`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1938 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1938
CVE ID: CVE-2024-24959 State: PUBLISHED Published: 2024-05-28T15:30:17.553Z Last Updated: 2025-02-13T17:40:41.255Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-787 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities.This CVE tracks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6c18`. Addit
racks the arbitrary null-byte write vulnerability located in firmware 1.2.10.9 of the P3-550E at offset `0xb6c18`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1938 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1938
CVE ID: CVE-2024-24962 State: PUBLISHED Published: 2024-05-28T15:30:16.326Z Last Updated: 2025-02-13T17:40:41.938Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e98` of v1.2.10.9 of the P3-550E firmware. Additi
CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e98` of v1.2.10.9 of the P3-550E firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1939 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1939
CVE ID: CVE-2024-24963 State: PUBLISHED Published: 2024-05-28T15:30:16.410Z Last Updated: 2025-02-13T17:40:42.505Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e84` of v1.2.10.9 of the P3-550E firmware. Additi
CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e84` of v1.2.10.9 of the P3-550E firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1939 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1939
CVE ID: CVE-2024-24964 State: PUBLISHED Published: 2024-03-12T07:21:01.777Z Last Updated: 2024-11-07T17:02:42.979Z Vendors: Sky Co.,LTD. Products: SKYSEA Client View Problem Types: Improper access control Description: Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.skyseaclientview.net/news/240307_01/ - https://jvn.jp/en/jp/JVN544
t: - CVE Program Container: References: - https://www.skyseaclientview.net/news/240307_01/ - https://jvn.jp/en/jp/JVN54451757/
CVE ID: CVE-2024-24966 State: PUBLISHED Published: 2024-02-14T16:30:22.023Z Last Updated: 2024-08-01T23:36:21.653Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: F5OS - Appliance, F5OS - Chassis Problem Types: CWE-863 Description: When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000133111
CVE ID: CVE-2024-24968 State: PUBLISHED Published: 2024-09-16T16:38:47.528Z Last Updated: 2025-11-03T21:53:52.883Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: denial of service, CWE-1245 Description: Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html
CVE ID: CVE-2024-24970 State: PUBLISHED Published: 2024-07-19T16:50:33.028Z Last Updated: 2025-03-25T17:59:27.754Z Vendors: HP Inc. Products: HP Display Control Description: Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_10914875-10914901-16/hpsbhf03954
CVE ID: CVE-2024-24972 State: PUBLISHED Published: 2024-09-11T04:03:18.609Z Last Updated: 2024-09-11T13:37:28.096Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Gallagher Products: Controller 6000 and Controller 7000 Problem Types: CWE-120 Description: Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot the Controller, causing a Denial of Service. Gallagher recommend the diagnostic web page is not enabled (default is off) unless advised by Gallagher Technical support. This interface is intended only for diagnostic purposes. This is
is off) unless advised by Gallagher Technical support. This interface is intended only for diagnostic purposes. This issue affects: Controller 6000 and Controller 7000 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-24972
CVE ID: CVE-2024-24973 State: PUBLISHED Published: 2024-08-14T13:45:34.401Z Last Updated: 2024-08-14T15:28:40.267Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Distribution for GDB software Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE ID: CVE-2024-24974 State: PUBLISHED Published: 2024-07-08T10:20:34.520Z Last Updated: 2024-08-10T03:55:21.896Z Vendors: OpenVPN Products: OpenVPN 2 Problem Types: CWE-923 Description: The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/CVE-2024-24974 - https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/ - https://www.mail-archive.com/openvpn-users@lists.sourc
pnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/ - https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html
CVE ID: CVE-2024-24975 State: PUBLISHED Published: 2024-03-15T09:07:13.379Z Last Updated: 2024-08-01T23:36:21.260Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Mobile Problem Types: CWE-400 Description: Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-24976 State: PUBLISHED Published: 2024-04-03T13:55:03.903Z Last Updated: 2025-11-04T18:29:15.953Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-130 Description: A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can cause the running program to stop. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ta
this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1948
CVE ID: CVE-2024-24977 State: PUBLISHED Published: 2024-08-14T13:45:18.905Z Last Updated: 2024-08-14T16:14:12.833Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) License Manager for FLEXlm product software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01126.html
CVE ID: CVE-2024-24978 State: PUBLISHED Published: 2024-05-01T13:05:58.397Z Last Updated: 2024-11-01T18:46:07.546Z Vendors: TvRock Products: TvRock Problem Types: Denial-of-service (DoS) Description: Denial-of-service (DoS) vulnerability exists in TvRock 0.9t8a. Receiving a specially crafted request by a remote attacker or having a user of TvRock click a specially crafted request may lead to ABEND (abnormal end). Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40079147/
CVE ID: CVE-2024-24980 State: PUBLISHED Published: 2024-08-14T13:45:28.166Z Last Updated: 2024-08-14T13:59:14.325Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N) Vendors: n/a Products: 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors Problem Types: escalation of privilege, CWE-693 Description: Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html
CVE ID: CVE-2024-24981 State: PUBLISHED Published: 2024-05-16T20:46:59.400Z Last Updated: 2025-05-14T18:04:05.931Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: UEFI firmware for some Intel(R) Server M50FCP Family products Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some Intel(R) Server M50FCP Family products may allow a privileged user to enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.htm
CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.html
CVE ID: CVE-2024-24983 State: PUBLISHED Published: 2024-08-14T13:45:44.098Z Last Updated: 2024-08-14T15:16:38.303Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters E810 Series Problem Types: denial of service, CWE-693 Description: Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.
CVE ID: CVE-2024-24984 State: PUBLISHED Published: 2024-11-13T20:36:10.843Z Last Updated: 2024-11-13T20:54:34.369Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Wireless Bluetooth(R) products for Windows Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html
CVE ID: CVE-2024-24985 State: PUBLISHED Published: 2024-11-13T21:02:49.982Z Last Updated: 2024-11-14T19:47:24.072Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) processors with Intel(R) ACTM Problem Types: escalation of privilege, CWE-668 Description: Exposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01111.html
CVE ID: CVE-2024-24986 State: PUBLISHED Published: 2024-08-14T13:45:46.283Z Last Updated: 2024-08-16T04:01:29.421Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters Problem Types: escalation of privilege, CWE-284 Description: Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-24988 State: PUBLISHED Published: 2024-02-29T08:06:28.334Z Last Updated: 2024-08-01T23:36:21.288Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-24989 State: PUBLISHED Published: 2024-02-14T16:30:26.081Z Last Updated: 2025-05-12T15:07:40.892Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: NGINX Plus, NGINX Open Source Problem Types: CWE-476 Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html . NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additi