Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34953 State: PUBLISHED Published: 2024-05-20T13:09:51.951Z Last Updated: 2025-02-13T15:53:46.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm file Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_mmExhausted - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_mmExhausted/dos_mmExhausted.md - https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_mmExhausted/poc - https://github.com/Helson-S/Fuzz
md - https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_mmExhausted/poc - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_mmExhausted/poc/I7K9QM~F - https://github.com/taurusxin/ncmdump/issues/19 - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_mmExhausted/dos_mmExhausted.assets/image-20240505161831080.png
CVE ID: CVE-2024-34954 State: PUBLISHED Published: 2024-05-15T14:11:55.201Z Last Updated: 2025-02-13T15:53:46.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ethicalhackerNL/CVEs/blob/main/Budget%20Management/XSS/XSS.md
CVE ID: CVE-2024-34955 State: PUBLISHED Published: 2024-05-15T14:13:28.781Z Last Updated: 2025-02-13T15:53:47.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ethicalhackerNL/CVEs/blob/main/Budget%20Management/SQLi.md
CVE ID: CVE-2024-34957 State: PUBLISHED Published: 2024-05-16T14:34:21.007Z Last Updated: 2025-02-13T15:53:47.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Gr-1m/cms/blob/main/1.md
CVE ID: CVE-2024-34958 State: PUBLISHED Published: 2024-05-16T14:32:49.596Z Last Updated: 2025-02-13T15:53:48.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Gr-1m/cms/blob/main/2.md
CVE ID: CVE-2024-34959 State: PUBLISHED Published: 2024-05-17T19:44:16.166Z Last Updated: 2025-02-13T15:53:48.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/upgogo/s123/issues/I9MARO
CVE ID: CVE-2024-34974 State: PUBLISHED Published: 2024-05-10T12:29:34.817Z Last Updated: 2025-02-13T15:53:49.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hunzi0/Vullnfo/tree/main/Tenda/AC18/formSetPPTPServer
CVE ID: CVE-2024-34982 State: PUBLISHED Published: 2024-05-17T13:41:37.200Z Last Updated: 2025-02-13T15:53:49.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n2ryx/CVE/blob/main/Lylme_pagev1.9.5.md
CVE ID: CVE-2024-34987 State: PUBLISHED Published: 2024-06-03T00:00:00 Last Updated: 2024-08-14T19:38:14.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md - https://www.exploit-db.com/exploits/51989
CVE ID: CVE-2024-34988 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-02T03:07:45.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFr
ntController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFrontController::run().` Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/06/20/askforaquotemodul.html
CVE ID: CVE-2024-34989 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-08-02T03:07:46.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().' Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/06/20/prestapdf.html
CVE ID: CVE-2024-34990 State: PUBLISHED Published: 2024-06-19T00:00:00 Last Updated: 2024-08-02T03:07:46.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files. Methods `HelpdeskHelpdeskModuleFrontController::submitTicket()` and `HelpdeskHelpdeskModuleFrontController::replyTicket()` allow upload of .php files on a predictable path for connected customers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-1
CVE Program Container: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-helpdesk.md
CVE ID: CVE-2024-34991 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-02T03:07:45.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / postal address / email / etc. without restriction due to a lack of permissions control. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/06/20/axepta.html
CVE ID: CVE-2024-34992 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-02T03:07:45.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets()' Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/06/20/helpdesk.html
CVE ID: CVE-2024-34993 State: PUBLISHED Published: 2024-06-19T00:00:00 Last Updated: 2024-08-02T03:07:46.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Bulk Export products to Google Merchant-Google Shopping" (bagoogleshopping) up to version 1.0.26 from Buy Addons for PrestaShop, a guest can perform SQL injection via`GenerateCategories::renderCategories(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-bagoogleshopping.md
CVE ID: CVE-2024-34994 State: PUBLISHED Published: 2024-06-19T00:00:00 Last Updated: 2024-08-02T03:07:45.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via `ChannableFeedModuleFrontController::postProcess()`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md
CVE ID: CVE-2024-34995 State: PUBLISHED Published: 2024-05-24T16:11:15.387Z Last Updated: 2025-02-13T15:53:50.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cym1102/svnWebUI/issues/8
CVE ID: CVE-2024-34997 State: PUBLISHED Published: 2024-05-17T00:00:00 Last Updated: 2024-08-27T14:40:01.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joblib/joblib/issues/977 - https://github.com/joblib/joblib/issues/1582
CVE ID: CVE-2024-35009 State: PUBLISHED Published: 2024-05-14T13:58:28.753Z Last Updated: 2025-02-13T15:53:51.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Thirtypenny77/cms/blob/main/5.md
CVE ID: CVE-2024-35010 State: PUBLISHED Published: 2024-05-14T13:58:30.067Z Last Updated: 2025-02-13T15:53:51.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Thirtypenny77/cms/blob/main/6.md
CVE ID: CVE-2024-35011 State: PUBLISHED Published: 2024-05-14T13:58:31.002Z Last Updated: 2025-02-13T15:53:52.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Thirtypenny77/cms/blob/main/8.md
CVE ID: CVE-2024-35012 State: PUBLISHED Published: 2024-05-14T13:58:31.739Z Last Updated: 2025-02-13T15:53:52.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Thirtypenny77/cms/blob/main/7.md
CVE ID: CVE-2024-35039 State: PUBLISHED Published: 2024-05-16T14:29:42.759Z Last Updated: 2025-03-13T15:18:13.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ywf7678/cms/blob/main/1.md
CVE ID: CVE-2024-35048 State: PUBLISHED Published: 2024-05-13T13:20:25.536Z Last Updated: 2025-02-13T15:53:53.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/javahuang/SurveyKing/issues/56
CVE ID: CVE-2024-35049 State: PUBLISHED Published: 2024-05-13T13:20:26.015Z Last Updated: 2025-02-13T15:53:54.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/javahuang/SurveyKing/issues/55
CVE ID: CVE-2024-35050 State: PUBLISHED Published: 2024-05-13T13:20:26.038Z Last Updated: 2025-02-13T15:53:55.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/javahuang/SurveyKing/issues/57
CVE ID: CVE-2024-35056 State: PUBLISHED Published: 2024-05-21T00:00:00 Last Updated: 2024-08-02T03:07:46.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-gpgj-xrgw-8mx2
CVE ID: CVE-2024-35057 State: PUBLISHED Published: 2024-05-21T00:00:00 Last Updated: 2024-08-02T03:07:46.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-jf28-v5f6-cvpr
CVE ID: CVE-2024-35058 State: PUBLISHED Published: 2024-05-21T00:00:00 Last Updated: 2024-08-02T03:07:46.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-4gxj-5mmr-7pxq
CVE ID: CVE-2024-35059 State: PUBLISHED Published: 2024-05-21T00:00:00 Last Updated: 2024-08-02T03:07:46.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-jqff-8g2v-642h
CVE ID: CVE-2024-35060 State: PUBLISHED Published: 2024-05-21T00:00:00 Last Updated: 2024-08-02T03:07:46.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-45q4-h8rr-hgx2
CVE ID: CVE-2024-35061 State: PUBLISHED Published: 2024-05-21T00:00:00 Last Updated: 2024-08-02T03:07:46.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-qv6x-53jj-vw59 - https://github.com/advisories/GHS
via-man-in-the-middle-more-ujkze - https://github.com/advisories/GHSA-qv6x-53jj-vw59 - https://github.com/advisories/GHSA-jqff-8g2v-642h
CVE ID: CVE-2024-35079 State: PUBLISHED Published: 2024-05-23T18:51:25.543Z Last Updated: 2025-02-13T15:53:55.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inxedu.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35079.txt
CVE ID: CVE-2024-35080 State: PUBLISHED Published: 2024-05-23T18:50:01.968Z Last Updated: 2025-02-13T15:53:56.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.inxedu.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35080.txt
CVE ID: CVE-2024-35081 State: PUBLISHED Published: 2024-05-23T17:02:08.098Z Last Updated: 2025-02-13T15:53:56.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.luckyframe.cn/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35081.txt
CVE ID: CVE-2024-35082 State: PUBLISHED Published: 2024-05-23T16:58:35.540Z Last Updated: 2025-02-13T15:53:57.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35082.txt
CVE ID: CVE-2024-35083 State: PUBLISHED Published: 2024-05-23T16:46:29.921Z Last Updated: 2025-02-13T15:53:57.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35083.txt
CVE ID: CVE-2024-35084 State: PUBLISHED Published: 2024-05-23T16:57:22.359Z Last Updated: 2025-02-13T15:53:58.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35084.txt
CVE ID: CVE-2024-35085 State: PUBLISHED Published: 2024-05-23T16:53:52.301Z Last Updated: 2025-02-13T15:53:59.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35085.txt
CVE ID: CVE-2024-35086 State: PUBLISHED Published: 2024-05-23T17:00:14.564Z Last Updated: 2025-02-13T15:53:59.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35086.txt
CVE ID: CVE-2024-35090 State: PUBLISHED Published: 2024-05-23T16:52:15.057Z Last Updated: 2025-02-13T15:54:00.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35090.txt
CVE ID: CVE-2024-35091 State: PUBLISHED Published: 2024-05-23T17:04:00.012Z Last Updated: 2025-02-13T15:54:00.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.j2eefast.com/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35091.txt
CVE ID: CVE-2024-35099 State: PUBLISHED Published: 2024-05-13T19:25:41.081Z Last Updated: 2025-02-13T15:54:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/V9.3.5u.6698_B20230810/README.md
CVE ID: CVE-2024-35102 State: PUBLISHED Published: 2024-05-15T18:25:34.067Z Last Updated: 2025-03-13T18:00:24.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln2you.blogspot.com/2024/05/avediaserver-unauthorised-api-access.html