Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-46896 State: PUBLISHED Published: 2025-01-11T12:35:34.351Z Last Updated: 2025-11-03T20:39:29.043Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't access invalid sched Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->base.sched can produce unexpected results as the initialisation of (*job)->base.sched done in amdgpu_job_alloc is overwritten by the memset. This commit fixes an issue when a CS would fail validation and would be rejected after job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machi
r job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machine because the ring value is bogus. To fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this because the device is actually not used in this function. The next commit will remove the ring argument completely. (cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7) Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/65501a4fd84ecdc0af863dbb37759242aab9f2dd - https://git.kernel.org/stable/c/da6b2c626ae73c303378ce9eaf6e3eaf16c9925a - https://git.kernel.org/stable/c/67291d601f2b032062b1b2f60ffef1b63e10094c -
c/da6b2c626ae73c303378ce9eaf6e3eaf16c9925a - https://git.kernel.org/stable/c/67291d601f2b032062b1b2f60ffef1b63e10094c - https://git.kernel.org/stable/c/a93b1020eb9386d7da11608477121b10079c076a
CVE ID: CVE-2024-46897 State: PUBLISHED Published: 2024-10-18T06:03:40.573Z Last Updated: 2024-10-18T16:32:55.609Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Kajitori Co.,Ltd Products: Exment Problem Types: CWE-732 Description: Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and/or alter the information of the unauthorized table. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://exment.net/vulnerability-correspondence-version-6-1-5-and-5-0-12-released/ - https://exment.net/docs/#/weakness
https://exment.net/vulnerability-correspondence-version-6-1-5-and-5-0-12-released/ - https://exment.net/docs/#/weakness/20241010_2 - https://jvn.jp/en/jp/JVN74538317/
CVE ID: CVE-2024-46898 State: PUBLISHED Published: 2024-10-15T06:10:30.968Z Last Updated: 2024-10-23T04:58:28.816Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: SHIRASAGI Project Products: SHIRASAGI Problem Types: CWE-22 Description: SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shirasagi/shirasagi/commit/5ac4685d7e4330f949f13219069107fc5d768934 - https://www.ss-proj.org/ - https://jvn.j
ithub.com/shirasagi/shirasagi/commit/5ac4685d7e4330f949f13219069107fc5d768934 - https://www.ss-proj.org/ - https://jvn.jp/en/jp/JVN58721679/
CVE ID: CVE-2024-46899 State: PUBLISHED Published: 2025-04-22T04:12:56.387Z Last Updated: 2025-04-22T13:24:20.750Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Hitachi Products: Hitachi Ops Center Common Services, Hitachi Ops Center Analyzer viewpoint OVF Problem Types: CWE-1392 Description: Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-111/index.html
CVE ID: CVE-2024-46901 State: PUBLISHED Published: 2024-12-09T09:36:52.445Z Last Updated: 2025-04-13T21:02:57.347Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Apache Software Foundation Products: Apache Subversion Problem Types: CWE-20, CWE-116 Description: Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to ve
including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://subversion.apache.org/security/CVE-2024-46901-advisory.txt
CVE ID: CVE-2024-46902 State: PUBLISHED Published: 2024-10-22T18:28:18.124Z Last Updated: 2024-10-22T19:00:05.228Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Deep Discovery Inspector Description: A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code (admin user rights) on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicr
o exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0017793 - https://www.zerodayinitiative.com/advisories/ZDI-24-1227/
CVE ID: CVE-2024-46903 State: PUBLISHED Published: 2024-10-22T18:28:31.213Z Last Updated: 2024-11-01T19:11:42.862Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Trend Micro, Inc. Products: Trend Micro Deep Discovery Inspector Description: A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/
ability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0017793 - https://www.zerodayinitiative.com/advisories/ZDI-24-1228/
CVE ID: CVE-2024-46905 State: PUBLISHED Published: 2024-12-02T14:45:13.504Z Last Updated: 2024-12-02T15:30:19.092Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: WhatsUp Gold Problem Types: CWE-89 Description: In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user (at least Network Manager permissions required) to achieve privilege escalation to the admin account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-Septe
ps://www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024 - https://docs.progress.com/bundle/whatsupgold-release-notes-24-0/page/WhatsUp-Gold-2024.0-Release-Notes.html
CVE ID: CVE-2024-46906 State: PUBLISHED Published: 2024-12-02T14:44:08.220Z Last Updated: 2024-12-02T15:30:19.268Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: WhatsUp Gold Problem Types: CWE-89 Description: In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September
/www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024 - https://docs.progress.com/bundle/whatsupgold-release-notes-24-0/page/WhatsUp-Gold-2024.0-Release-Notes.html
CVE ID: CVE-2024-46907 State: PUBLISHED Published: 2024-12-02T14:42:08.418Z Last Updated: 2024-12-02T15:30:19.393Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: WhatsUp Gold Problem Types: CWE-89 Description: In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September
CVE ID: CVE-2024-46908 State: PUBLISHED Published: 2024-12-02T14:40:08.735Z Last Updated: 2024-12-02T15:30:19.516Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: WhatsUp Gold Problem Types: CWE-89 Description: In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September
CVE ID: CVE-2024-46909 State: PUBLISHED Published: 2024-12-02T14:46:49.513Z Last Updated: 2024-12-02T15:30:19.651Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: WhatsUp Gold Problem Types: CWE-22, CWE-73, CWE-16 Description: In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.progress.com/network-monitoring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024 - https://docs.progress.c
oring - https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024 - https://docs.progress.com/bundle/whatsupgold-release-notes-24-0/page/WhatsUp-Gold-2024.0-Release-Notes.html
CVE ID: CVE-2024-46910 State: PUBLISHED Published: 2025-02-13T08:52:57.498Z Last Updated: 2025-10-17T15:50:34.064Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: CWE-80 Description: An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/sqzp34l4cdk21zoq5g31qlsvr7jvb1fy
CVE ID: CVE-2024-46911 State: PUBLISHED Published: 2024-10-14T08:13:05.578Z Last Updated: 2024-11-01T17:06:11.070Z Vendors: Apache Software Foundation Products: Apache Roller Problem Types: CWE-352 Description: Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller's CSRF protections allowed an escalation of privileges attack. This issue affects Apache Roller before 6.1.4. Roller users who run multi-blog/user Roller websites are recommended to upgrade to version 6.1.4, which fixes the issue. Roller 6.1.4 r
o run multi-blog/user Roller websites are recommended to upgrade to version 6.1.4, which fixes the issue. Roller 6.1.4 release announcement: https://lists.apache.org/thread/3c3f6rwqptyw6wdc95654fq5vlosqdpw Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/6m0ghjo9j92qty00t2qb6qf2spds0p5t
CVE ID: CVE-2024-46914 State: REJECTED Published: N/A Last Updated: 2024-10-22T21:47:05.634609 Description: No description available.
CVE ID: CVE-2024-46915 State: REJECTED Published: N/A Last Updated: 2025-04-16T13:00:08.949Z Description: No description available.
CVE ID: CVE-2024-46916 State: PUBLISHED Published: 2025-08-29T00:00:00.000Z Last Updated: 2025-08-29T17:22:15.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfol
n. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://github.com/emptynebuli - https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057
CVE ID: CVE-2024-46917 State: PUBLISHED Published: 2025-08-29T00:00:00.000Z Last Updated: 2025-08-29T17:32:46.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://github.com/emptynebuli - https://www.atredis.com/bl
boldnixdorf.com/en-us/banking/portfolio/software/security/ - https://github.com/emptynebuli - https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057
CVE ID: CVE-2024-46918 State: PUBLISHED Published: 2024-09-15T00:00:00.000Z Last Updated: 2025-03-13T14:35:06.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/commit/3a5227d7b3d4518ac109af61979a00145a0de6fa - https://github.com/MISP/MISP/compare/v2.4.197...v2.4.198
CVE ID: CVE-2024-46919 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-13T19:41:00.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-46919/
CVE ID: CVE-2024-46920 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-13T19:23:11.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadInputBuffers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-46920/
CVE ID: CVE-2024-46921 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T16:19:06.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does not limit the number of attempts for the RRC Setup procedure in the 5G SA, leading to a denial of service (battery-drain attack). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality
ductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-46921/
CVE ID: CVE-2024-46922 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-20T14:07:36.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-46923 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-13T20:38:36.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-46933 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-03-13T13:14:15.543Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05.0014. Some BullSequana XH products were shipped without proper hardware programming, leading to a potential denial-of-service with privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://eviden.com - https://support.bull.com/ols/product/security/psirt/security-bulletins/ast2600-left-unconfigured-in-bullsequana-xh2140-psirt-
://support.bull.com/ols/product/security/psirt/security-bulletins/ast2600-left-unconfigured-in-bullsequana-xh2140-psirt-270-tlp-clear-version-2-7-cve-2024-46933/view
CVE ID: CVE-2024-46934 State: PUBLISHED Published: 2024-09-24T00:00:00.000Z Last Updated: 2025-03-25T16:40:47.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to DOM-based Cross-site Scripting (XSS). Attackers may be able to abuse the UpdateOTRAck method to forge a message that contains an XSS payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RocketChat/Rocket.Chat/pull/33246 - https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories
CVE ID: CVE-2024-46935 State: PUBLISHED Published: 2024-09-24T00:00:00.000Z Last Updated: 2025-03-25T16:20:43.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to denial of service (DoS). Attackers who craft messages with specific characters may crash the workspace due to an issue in the message parser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RocketChat/Rocket.Chat/pull/33227 - https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories
CVE ID: CVE-2024-46936 State: PUBLISHED Published: 2024-09-24T00:00:00.000Z Last Updated: 2025-03-25T16:38:15.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and before is vulnerable to a message forgery / impersonation issue. Attackers can abuse the UpdateOTRAck method to send ephemeral messages as if they were any other user they choose. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RocketChat/Rocket.Chat/pull/33246 - https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories
CVE ID: CVE-2024-46937 State: PUBLISHED Published: 2024-09-16T00:00:00 Last Updated: 2024-10-24T16:58:36.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the serial parameter by number identifier: GA00001, GA00002, GA00003, etc. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mfasoft.ru - https://github.com/WI1D-41/IDOR-in-MFASOFT-Secure-Authentication-Server
CVE ID: CVE-2024-46938 State: PUBLISHED Published: 2024-09-15T00:00:00 Last Updated: 2024-09-17T15:06:07.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003408
CVE ID: CVE-2024-46939 State: PUBLISHED Published: 2024-11-28T03:26:28.929Z Last Updated: 2024-12-02T11:19:36.615Z Vendors: vivo Products: Game Extension Engine Problem Types: CWE-22 Description: The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=13
CVE ID: CVE-2024-46941 State: PUBLISHED Published: 2025-06-06T03:24:32.260Z Last Updated: 2025-06-09T13:42:08.225Z Vendors: vivo Products: SystemUI Problem Types: CWE-281 Description: SystemUI has an incorrect component protection setting, which allows access to specific information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=17
CVE ID: CVE-2024-46942 State: PUBLISHED Published: 2024-09-15T00:00:00.000Z Last Updated: 2025-03-14T18:20:02.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lf-opendaylight.atlassian.net/browse/MDSAL-869 - https://doi.org/10.48550/arXiv.2408.16940 - https://docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html