Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-46210 State: PUBLISHED Published: 2025-01-10T00:00:00.000Z Last Updated: 2025-01-31T16:11:18.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git - https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df
CVE ID: CVE-2024-46212 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-17T17:02:19.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Purposex7/Vulns4Study/blob/main/REDAXO%20File%20Download%20Exploit.md
CVE ID: CVE-2024-46213 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-17T16:58:48.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Purposex7/Vulns4Study/blob/main/REDAXO%20Cronjobs%20%20AddOns%20RCE.md
CVE ID: CVE-2024-46215 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-15T20:59:52.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IotChan/cve/blob/main/KT/KT%20KM08-708H.md - https://github.com/IotChan/cve/blob/main/KT/CVE-2024-46215
CVE ID: CVE-2024-46226 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-02-26T15:49:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/52068
CVE ID: CVE-2024-46236 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-21T18:51:53.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/PHP_CodeAstro_Stored_XSS/blob/master/vulnerabilities/XSS_1.md
CVE ID: CVE-2024-46237 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-22T17:21:49.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/npemma2/PHP_Gurukul_Hospital_Management_System_XSS - https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS1.md
CVE ID: CVE-2024-46238 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-21T20:24:29.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS2.md
CVE ID: CVE-2024-46239 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-21T20:23:17.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS3.md
CVE ID: CVE-2024-46240 State: PUBLISHED Published: 2024-10-22T00:00:00 Last Updated: 2024-10-22T17:14:20.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anoncoder01/Collabtive_StoredXSS/blob/master/vulnerabilities/XSS1.md
CVE ID: CVE-2024-46241 State: PUBLISHED Published: 2024-09-23T00:00:00 Last Updated: 2024-09-23T16:51:30.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and edit_product.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/npemma2/PHP_DairyFarm_XSS
CVE ID: CVE-2024-46242 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-07T20:21:09.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service (ReDoS) via supplying a crafted string as e-mail address during registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://ctfd.com - https://gist.github.com/salvatore-abello/4f01f3fa54672febc0a492a11a26592c
CVE ID: CVE-2024-46256 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-10-24T17:12:15.730807 Vendors: n/a Products: n/a Problem Types: n/a Description: A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NginxProxyManager/nginx-proxy-manager/blob/v2.11.3/backend/internal/certificate.js#L830 - https://github.com/NginxProxyManager/nginx-proxy-manager/commit/99cce7e2b0da2978411cedd7cac5fffbe15bc466 - https://github.com/barttran2k/POC_CVE-2024-46256 - https://github.com/NginxProxyManager/nginx-proxy-
7cac5fffbe15bc466 - https://github.com/barttran2k/POC_CVE-2024-46256 - https://github.com/NginxProxyManager/nginx-proxy-manager/pull/4073/commits/c39d5433bcd13993def222bbb2b6988bbb810a05
CVE ID: CVE-2024-46257 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-10-24T17:13:28.700519 Vendors: n/a Products: n/a Problem Types: n/a Description: A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NginxProxyManager/nginx-proxy-manager/blob/v2.11.3/backend/internal/certificate.js#L870 - https://github.com/NginxProxyManager/nginx-proxy-manager/commit/99cce7e2b0da2978411cedd7cac5fffbe15bc466
cate.js#L870 - https://github.com/NginxProxyManager/nginx-proxy-manager/commit/99cce7e2b0da2978411cedd7cac5fffbe15bc466 - https://github.com/barttran2k/POC_CVE-2024-46256 - https://github.com/NginxProxyManager/nginx-proxy-manager/pull/4073/commits/c39d5433bcd13993def222bbb2b6988bbb810a05
CVE ID: CVE-2024-46258 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-14T15:30:41.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_l
ng-1105c15/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/poc/sample2.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/vulDescription.assets/image-20240527231514578.png
CVE ID: CVE-2024-46259 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-18T16:21:27.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute
ulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/poc/sample6.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/vulDescription.assets/image-20240527232602298.png
CVE ID: CVE-2024-46261 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-17T14:13:02.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_make32-cute_png-948c10 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_make32-cute_png-948c10/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_make32-cute_png-948c1
ption.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_make32-cute_png-948c10/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_make32-cute_png-948c10/poc/sample4.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_make32-cute_png-948c10/vulDescription.assets/image-20240527232015967.png
CVE ID: CVE-2024-46263 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-18T15:40:43.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc
.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc/sample15.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/vulDescription.assets/image-20240527235936692.png
CVE ID: CVE-2024-46264 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-13T15:45:09.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_find-cute_png-979c8 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_find-cute_png-979c8/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_find-cute_png-979c8/poc - htt
- https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_find-cute_png-979c8/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_find-cute_png-979c8/poc/sample8.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_find-cute_png-979c8/vulDescription.assets/image-20240527233234147.png
CVE ID: CVE-2024-46267 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-18T15:09:35.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-w98-cp_block-5c0-cute_png-642c5 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-w98-cp_block-5c0-cute_png-642c5/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-w98-cp_block-5c0-cute_
escription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-w98-cp_block-5c0-cute_png-642c5/vulDescription.assets/image-20240527234842953.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-w98-cp_block-5c0-cute_png-642c5/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-w98-cp_block-5c0-cute_png-642c5/poc/sample13.png
CVE ID: CVE-2024-46274 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-18T14:14:33.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r65280-cp_stored-cute_png-543c2 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r65280-cp_stored-cute_png-543c2/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r65280-cp_stored-cute
Description.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r65280-cp_stored-cute_png-543c2/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r65280-cp_stored-cute_png-543c2/poc/sample10.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r65280-cp_stored-cute_png-543c2/vulDescription.assets/image-20240527233813133.png
CVE ID: CVE-2024-46276 State: PUBLISHED Published: 2024-10-01T00:00:00.000Z Last Updated: 2025-03-14T13:37:31.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7 - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/vulDescription.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/poc -
.md - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/poc/sample7.png - https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/vulDescription.assets/image-20240527232923330.png
CVE ID: CVE-2024-46278 State: PUBLISHED Published: 2024-10-07T00:00:00 Last Updated: 2024-10-07T19:26:36.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ayato-shitomi/teedy_1.11_account-takeover - https://github.com/ayato-shitomi/CVE-2024-46278-teedy_1.11_account-takeover
CVE ID: CVE-2024-46280 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T17:30:49.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://0xmupa.github.io/pixlink-weak-telnet
CVE ID: CVE-2024-46292 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-20T23:47:38.210427 Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it cannot be reproduced. Also, the product's documentation indicates that it is not guaranteed to be usable with very large values of SecRequestBodyNoFilesLimit (which are required by the claimed issue). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/owasp-modsecurity/ModSecurity/blob/v3/master/RE
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/owasp-modsecurity/ModSecurity/blob/v3/master/README.md - https://github.com/yoloflz101/yoloflz/blob/main/README.md - https://modsecurity.org/20241011/about-cve-2024-46292-2024-october/
CVE ID: CVE-2024-46293 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T18:51:51.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether the user is logged in as an admin or even check for a session token at all. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bunyamindemir/vulnerability-disclosures/blob/main/omos-authorization-bypass
lnrichment: References: - https://github.com/bunyamindemir/vulnerability-disclosures/blob/main/omos-authorization-bypass.md
CVE ID: CVE-2024-46300 State: PUBLISHED Published: 2024-10-07T00:00:00 Last Updated: 2024-10-07T19:12:31.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://github.com/riya98241/CVE/blob/main/CVE-2024-46300
CVE ID: CVE-2024-46304 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-10T13:03:25.204364 Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/obgm/libcoap/issues/1509
CVE ID: CVE-2024-46307 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-10T17:06:08.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://sparkshop.com - https://gitee.com/sparkshop/sparkshop - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-46307
CVE ID: CVE-2024-46310 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-16T17:32:54.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://cfxre.com - https://github.com/PRX5Y/CVE-2024-46310
CVE ID: CVE-2024-46313 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T18:59:01.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TP-LINK/WR-941ND/popupSiteSurveyRpm.md
CVE ID: CVE-2024-46316 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-09T18:18:14.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glkfc/IoT-Vulnerability/blob/main/DaryTek/vigor3900_4.md
CVE ID: CVE-2024-46325 State: PUBLISHED Published: 2024-10-07T00:00:00 Last Updated: 2024-10-08T18:51:57.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TP-LINK/WR740N/popupSiteSurveyRpm.md
CVE ID: CVE-2024-46326 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-22T17:16:12.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1AVVw1aibDPBHakU8eTpCA6hna5Ecg2UJ/view - https://github.com/beraoudabdelkhalek/research/blob/main/CVEs/CVE-2024-46326/README.md - https://github.com/pkp/pkp-lib/issues/10478
CVE ID: CVE-2024-46327 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-26T14:31:46.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hawktesters.com/5519644d-246e-4924-b7c8-8fdf742117be/ab3b22c9-1fbf-4dbb-a1cd-8c69f6723a4a.pdf