Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53674 State: PUBLISHED Published: 2024-11-26T21:55:26.013Z Last Updated: 2024-11-27T11:59:46.507Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Insight Remote Support Problem Types: CWE-91 Description: An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE ID: CVE-2024-53675 State: PUBLISHED Published: 2024-11-26T22:01:12.616Z Last Updated: 2024-11-27T11:58:39.036Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Insight Remote Support Problem Types: CWE-91 Description: An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE ID: CVE-2024-53676 State: PUBLISHED Published: 2024-11-27T00:18:28.527Z Last Updated: 2025-03-05T14:58:05.646Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Insight Remote Support Problem Types: CWE-552 Description: A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE ID: CVE-2024-53677 State: PUBLISHED Published: 2024-12-11T15:35:43.389Z Last Updated: 2025-01-03T12:04:30.841Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: File upload logic is flawed Description: File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. This issue affects Apache Struts: from 2.0.0 before 6.4.0. Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you
.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you are not using an old file upload logic based on FileuploadInterceptor your application is safe. You can find more details in https://cwiki.apache.org/confluence/display/WW/S2-067 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/WW/S2-067
CVE ID: CVE-2024-53678 State: PUBLISHED Published: 2025-03-25T09:33:36.385Z Last Updated: 2025-03-31T16:23:19.825Z Vendors: Apache Software Foundation Products: Apache VCL Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users can modify form data submitted when requesting a new Block Allocation such that a SELECT SQL statement is modified. The data returned by the SELECT statement is not viewable by the attacker. This issue affects all versions of Apache VCL from 2.2 through 2.5.1. Users are recommended to upgrade to version 2.5.2, which fixes the issue. Additional Analyst Notes: - CVE Progra
2.5.1. Users are recommended to upgrade to version 2.5.2, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/2bmjnzgjwwq59nv6xw44w0tnpz4k4pf4
CVE ID: CVE-2024-53679 State: PUBLISHED Published: 2025-03-25T09:33:44.443Z Last Updated: 2025-03-31T16:22:35.005Z Vendors: Apache Software Foundation Products: Apache VCL Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache VCL in the User Lookup form. A user with sufficient rights to be able to view this part of the site can craft a URL or be tricked in to clicking a URL that will give a specified user elevated rights. This issue affects all versions of Apache VCL through 2.5.1. Users are recommended to upgrade to version 2.5.2, which fixes the issue. Additional Analyst Notes: - CVE Program Container
rs are recommended to upgrade to version 2.5.2, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/bq5vs0hndt9cz9b6rpfr5on1nd4qrmyr
CVE ID: CVE-2024-53680 State: PUBLISHED Published: 2025-01-11T12:25:21.794Z Last Updated: 2025-11-03T20:48:17.936Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for ip_vs_protocol_init(), triggering the following objtool warning during build time: vmlinux.o: warning: objtool: ip_vs_protocol_init() falls through to next function __initstub__kmod_ip_vs_rr__935_123_ip_vs_rr_init6() At runtime, this either causes an o
) falls through to next function __initstub__kmod_ip_vs_rr__935_123_ip_vs_rr_init6() At runtime, this either causes an oops when trying to load the ipvs module or a boot-time panic if ipvs is built-in. This same issue has been reported by the Intel kernel test robot previously. Digging deeper into both LLVM and the kernel code reveals this to be a undefined behavior problem. ip_vs_protocol_init() uses a on-stack buffer of 64 chars to store the registered protocol names and leaves it uninitialized after definition. The function calls strnlen() when concatenating protocol names into the buffer. With CONFIG_FORTIFY_SOURCE strnlen() performs an extra step to check whether the last byte of the in
es into the buffer. With CONFIG_FORTIFY_SOURCE strnlen() performs an extra step to check whether the last byte of the input char buffer is a null character (commit 3009f891bb9f ("fortify: Allow strlen() and strnlen() to pass compile-time known lengths")). This, together with possibly other configurations, cause the following IR to be generated: define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #5 section ".init.text" align 16 !kcfi_type !29 { %1 = alloca [64 x i8], align 16 ... 14: ; preds = %11 %15 = getelementptr inbounds i8, ptr %1, i64 63 %16 = load i8, ptr %15, align 1 %17 = tail call i1 @llvm.is.constant.i8(i8 %16) %18 = icmp eq i8 %16, 0 %19 = select i1 %17, i1 %18, i1 false
5, align 1 %17 = tail call i1 @llvm.is.constant.i8(i8 %16) %18 = icmp eq i8 %16, 0 %19 = select i1 %17, i1 %18, i1 false br i1 %19, label %20, label %23 20: ; preds = %14 %21 = call i64 @strlen(ptr noundef nonnull dereferenceable(1) %1) #23 ... 23: ; preds = %14, %11, %20 %24 = call i64 @strnlen(ptr noundef nonnull dereferenceable(1) %1, i64 noundef 64) #24 ... } The above code calculates the address of the last char in the buffer (value %15) and then loads from it (value %16). Because the buffer is never initialized, the LLVM GVN pass marks value %16 as undefined: %13 = getelementptr inbounds i8, ptr %1, i64 63 br i1 undef, label %14, label %17 This gives later passes (SCCP, in particular)
telementptr inbounds i8, ptr %1, i64 63 br i1 undef, label %14, label %17 This gives later passes (SCCP, in particular) more DCE opportunities by propagating the undef value further, and eventually removes everything after the load on the uninitialized stack location: define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #0 section ".init.text" align 16 !kcfi_type !11 { %1 = alloca [64 x i8], align 16 ... 12: ; preds = %11 %13 = getelementptr inbounds i8, ptr %1, i64 63 unreachable } In this way, the generated native code will just fall through to the next function, as LLVM does not generate any code for the unreachable IR instruction and leaves the function without a terminator. Zero
s LLVM does not generate any code for the unreachable IR instruction and leaves the function without a terminator. Zero the on-stack buffer to avoid this possible UB. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/31d1ddc1ce8e8d3f101a679243abb42a313ee88a - https://git.kernel.org/stable/c/0b2cbed82b7c6504a8a0fbd181f92dd56b432c12 - https://git.kernel.org/stable/c/d6e1776f51c95827142f1d7064118e255e2deec1 - https://git.kernel.org/stable/c/664d0feab92495b6a27edc3d1119e232c0fe8b2b - https://git.kernel.org/stable/c/124834133b32f9386bb2d8581d9ab92f65e951e4 - https://git.kernel.org/stable/c/48130002e64fd191b7d18efeb4d253fcc23e4688 - https://git.kernel
6bb2d8581d9ab92f65e951e4 - https://git.kernel.org/stable/c/48130002e64fd191b7d18efeb4d253fcc23e4688 - https://git.kernel.org/stable/c/146b6f1112eb30a19776d6c323c994e9d67790db
CVE ID: CVE-2024-53681 State: PUBLISHED Published: 2025-01-15T13:10:22.141Z Last Updated: 2025-05-04T09:56:51.804Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nvmet: Don't overflow subsysnqn nvmet_root_discovery_nqn_store treats the subsysnqn string like a fixed size buffer, even though it is dynamically allocated to the size of the string. Create a new string with kstrndup instead of using the old buffer. References: - https://git.kernel.org/stable/c/86645d8d062af3fdcbdaa0a289b95de55bca827d - https://git.kernel.org/stable/c/4db3d750ac7e894278ef1cb1c53cc7d883060496
CVE ID: CVE-2024-53682 State: PUBLISHED Published: 2025-01-11T12:29:49.692Z Last Updated: 2025-05-04T09:56:53.446Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: regulator: axp20x: AXP717: set ramp_delay AXP717 datasheet says that regulator ramp delay is 15.625 us/step, which is 10mV in our case. Add a AXP_DESC_RANGES_DELAY macro and update AXP_DESC_RANGES macro to expand to AXP_DESC_RANGES_DELAY with ramp_delay = 0 For DCDC4, steps is 100mv Add a AXP_DESC_DELAY macro and update AXP_DESC macro to expand to AXP_DESC_DELAY with ramp_delay = 0 This patch fix crashes when using CPU DVFS. References: - https://git.kernel.org/stable/
_DESC_DELAY with ramp_delay = 0 This patch fix crashes when using CPU DVFS. References: - https://git.kernel.org/stable/c/10eb845a87193ef922cd002e0ff4f4759c1e918d - https://git.kernel.org/stable/c/f07ae52f5cf6a5584fdf7c8c652f027d90bc8b74
CVE ID: CVE-2024-53683 State: PUBLISHED Published: 2025-01-17T16:44:17.245Z Last Updated: 2025-01-21T16:40:39.805Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Ossur Products: Mobile Logic Application Problem Types: CWE-497 Description: A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-354-01
CVE ID: CVE-2024-53685 State: PUBLISHED Published: 2025-01-11T12:35:40.252Z Last Updated: 2025-11-03T20:48:20.745Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATH_MAX If the full path to be built by ceph_mdsc_build_path() happens to be longer than PATH_MAX, then this function will enter an endless (retry) loop, effectively blocking the whole task. Most of the machine becomes unusable, making this a very simple and effective DoS vulnerability. I cannot imagine why this retry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG inste
ry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG instead. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/0f2b2d9e881c90402dbe28f9ba831775b7992e1f - https://git.kernel.org/stable/c/d42ad3f161a5a487f81915c406f46943c7187a0a - https://git.kernel.org/stable/c/e4b168c64da06954be5d520f6c16469b1cadc069 - https://git.kernel.org/stable/c/c47ed91156daf328601d02b58d52d9804da54108 - https://git.kernel.org/stable/c/99a37ab76a315c8307eb5b0dc095d8ad9d8efeaa - https://git.kernel.org/stable/c/550f7ca98ee028a606aa75705a7e77b1bd11720f
CVE ID: CVE-2024-53687 State: PUBLISHED Published: 2025-01-11T12:29:50.589Z Last Updated: 2025-05-04T09:56:56.259Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfence_protect_page() flush_tlb_kernel_range() may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: [ 3.455330] WARNING: CPU: 1 PID: 0 at kernel/smp.c:815 smp_call_function_many_cond+0x452/0x520 [ 3.456647] Modules linked in: [ 3.457218] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc7-00010-g91d3de7240b8 #1 [ 3.457416] Hardware name: QEMU QEMU Virtual Machine, BIOS [ 3.457
apper/1 Not tainted 6.12.0-rc7-00010-g91d3de7240b8 #1 [ 3.457416] Hardware name: QEMU QEMU Virtual Machine, BIOS [ 3.457633] epc : smp_call_function_many_cond+0x452/0x520 [ 3.457736] ra : on_each_cpu_cond_mask+0x1e/0x30 [ 3.457786] epc : ffffffff800b669a ra : ffffffff800b67c2 sp : ff2000000000bb50 [ 3.457824] gp : ffffffff815212b8 tp : ff6000008014f080 t0 : 000000000000003f [ 3.457859] t1 : ffffffff815221e0 t2 : 000000000000000f s0 : ff2000000000bc10 [ 3.457920] s1 : 0000000000000040 a0 : ffffffff815221e0 a1 : 0000000000000001 [ 3.457953] a2 : 0000000000010000 a3 : 0000000000000003 a4 : 0000000000000000 [ 3.458006] a5 : 0000000000000000 a6 : ffffffffffffffff a7 : 0000000000000000 [ 3.458042]
00000003 a4 : 0000000000000000 [ 3.458006] a5 : 0000000000000000 a6 : ffffffffffffffff a7 : 0000000000000000 [ 3.458042] s2 : ffffffff815223be s3 : 00fffffffffff000 s4 : ff600001ffe38fc0 [ 3.458076] s5 : ff600001ff950d00 s6 : 0000000200000120 s7 : 0000000000000001 [ 3.458109] s8 : 0000000000000001 s9 : ff60000080841ef0 s10: 0000000000000001 [ 3.458141] s11: ffffffff81524812 t3 : 0000000000000001 t4 : ff60000080092bc0 [ 3.458172] t5 : 0000000000000000 t6 : ff200000000236d0 [ 3.458203] status: 0000000200000100 badaddr: ffffffff800b669a cause: 0000000000000003 [ 3.458373] [<ffffffff800b669a>] smp_call_function_many_cond+0x452/0x520 [ 3.458593] [<ffffffff800b67c2>] on_each_cpu_cond_mask+0x1e/0x3
ffffff800b669a>] smp_call_function_many_cond+0x452/0x520 [ 3.458593] [<ffffffff800b67c2>] on_each_cpu_cond_mask+0x1e/0x30 [ 3.458625] [<ffffffff8000e4ca>] __flush_tlb_range+0x118/0x1ca [ 3.458656] [<ffffffff8000e6b2>] flush_tlb_kernel_range+0x1e/0x26 [ 3.458683] [<ffffffff801ea56a>] kfence_protect+0xc0/0xce [ 3.458717] [<ffffffff801e9456>] kfence_guarded_free+0xc6/0x1c0 [ 3.458742] [<ffffffff801e9d6c>] __kfence_free+0x62/0xc6 [ 3.458764] [<ffffffff801c57d8>] kfree+0x106/0x32c [ 3.458786] [<ffffffff80588cf2>] detach_buf_split+0x188/0x1a8 [ 3.458816] [<ffffffff8058708c>] virtqueue_get_buf_ctx+0xb6/0x1f6 [ 3.458839] [<ffffffff805871da>] virtqueue_get_buf+0xe/0x16 [ 3.458880] [<ffffffff80613d6a>
queue_get_buf_ctx+0xb6/0x1f6 [ 3.458839] [<ffffffff805871da>] virtqueue_get_buf+0xe/0x16 [ 3.458880] [<ffffffff80613d6a>] virtblk_done+0x5c/0xe2 [ 3.458908] [<ffffffff8058766e>] vring_interrupt+0x6a/0x74 [ 3.458930] [<ffffffff800747d8>] __handle_irq_event_percpu+0x7c/0xe2 [ 3.458956] [<ffffffff800748f0>] handle_irq_event+0x3c/0x86 [ 3.458978] [<ffffffff800786cc>] handle_simple_irq+0x9e/0xbe [ 3.459004] [<ffffffff80073934>] generic_handle_domain_irq+0x1c/0x2a [ 3.459027] [<ffffffff804bf87c>] imsic_handle_irq+0xba/0x120 [ 3.459056] [<ffffffff80073934>] generic_handle_domain_irq+0x1c/0x2a [ 3.459080] [<ffffffff804bdb76>] riscv_intc_aia_irq+0x24/0x34 [ 3.459103] [<ffffffff809d0452>] handle_riscv
rq+0x1c/0x2a [ 3.459080] [<ffffffff804bdb76>] riscv_intc_aia_irq+0x24/0x34 [ 3.459103] [<ffffffff809d0452>] handle_riscv_irq+0x2e/0x4c [ 3.459133] [<ffffffff809d923e>] call_on_irq_stack+0x32/0x40 So only flush the local TLB and let the lazy kfence page fault handling deal with the faults which could happen when a core has an old protected pte version cached in its TLB. That leads to potential inaccuracies which can be tolerated when using kfence. References: - https://git.kernel.org/stable/c/6f796a6a396d6f963f2cc8f5edd7dfba2cca097f - https://git.kernel.org/stable/c/3abfc4130c4222099c69d023fed97f1180a8ad7b - https://git.kernel.org/stable/c/b3431a8bb336cece8adc452437befa7d4534b2fd
CVE ID: CVE-2024-53688 State: PUBLISHED Published: 2024-12-18T06:36:30.180Z Last Updated: 2024-12-18T14:50:36.146Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: FXC Inc. Products: AE1021, AE1021PE Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to execute an arbitrary OS command using a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fxc.jp/news/20241213 - https://jvn.jp/en/vu/JVNVU91084137
lyst Notes: - CISA ADP Vulnrichment: References: - https://www.fxc.jp/news/20241213 - https://jvn.jp/en/vu/JVNVU91084137/
CVE ID: CVE-2024-53689 State: REJECTED Published: 2025-01-11T12:29:51.716Z Last Updated: 2025-02-13T15:26:42.688Z Description: No description available.
CVE ID: CVE-2024-53690 State: PUBLISHED Published: 2025-01-11T12:35:40.934Z Last Updated: 2025-11-03T20:48:23.672Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfs_rmdir. [1] Because the inode bitmap is corrupted, an inode with an inode number that should exist as a ".nilfs" file was reassigned by nilfs_mkdir for "file0", causing an inode duplication during execution. And this causes an underflow of i_nlink in rmdir operations. The inode is used twice by the same task to unmount and remove directories ".nilfs" and "file0", it trigger warning in nilfs_rmdir. A
used twice by the same task to unmount and remove directories ".nilfs" and "file0", it trigger warning in nilfs_rmdir. Avoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means that this inode has been deleted, and iput is executed to reclaim it. [1] WARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407 ... Call Trace: <TASK> nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342 vfs_rmdir+0x3a3/0x510 fs/namei.c:4394 do_rmdir+0x3b5/0x580 fs/namei.c:4453 __do_sys_rmdir fs/namei.c:4472 [inline] __se_sys_rmdir fs/namei.c:4470 [inline] __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/en
_rmdir+0x47/0x50 fs/namei.c:4470 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/55e4baa0d32f0530ddc64c26620e1f2f8fa2724c - https://git.kernel.org/stable/c/5d4ed71327b0b5f3b179a19dc3c06be9509ab3db - https://git.kernel.org/stable/c/912188316a8c9e41b8c1603c2276a05043b14f96 - https://git.kernel.org/stable/c/ef942d233643777f7b2a5deef620e82942983143 - https://git.kernel.org/stable/c/284760b320a0bac411b18108316939707dccb12b - https://git.kernel.org/stable/c/ff561987ff12b6a3233431ff659b5d332e22f153 - https://
b320a0bac411b18108316939707dccb12b - https://git.kernel.org/stable/c/ff561987ff12b6a3233431ff659b5d332e22f153 - https://git.kernel.org/stable/c/901ce9705fbb9f330ff1f19600e5daf9770b0175
CVE ID: CVE-2024-53691 State: PUBLISHED Published: 2024-12-06T16:34:54.018Z Last Updated: 2025-01-24T04:55:42.067Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-59 Description: A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QTS 5.2.0.2802 build 20240620 and later QuTS hero h5.1.8.2823 build 20240712 and later QuTS hero h5.2.0.2802 build 20240620 and later Additional Analy
and later QuTS hero h5.1.8.2823 build 20240712 and later QuTS hero h5.2.0.2802 build 20240620 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-28
CVE ID: CVE-2024-53692 State: PUBLISHED Published: 2025-03-07T16:13:23.099Z Last Updated: 2025-03-07T17:11:12.796Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-77, CWE-78 Description: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisor
0108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-54
CVE ID: CVE-2024-53693 State: PUBLISHED Published: 2025-03-07T16:13:29.581Z Last Updated: 2025-03-07T17:08:09.353Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-93, CWE-94, CWE-400 Description: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
CVE ID: CVE-2024-53694 State: PUBLISHED Published: 2025-03-07T16:13:36.014Z Last Updated: 2025-03-07T17:55:30.126Z Vendors: QNAP Systems Inc. Products: QVPN Device Client for Mac, Qsync for Mac, Qfinder Pro Mac Problem Types: CWE-367 Description: A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local attackers who have gained user access to gain access to otherwise unauthorized resources. We have already fixed the vulnerability in the following versions: QVPN Device Client for Mac 2.2.5 and later Qsync for Mac 5.1.3 and later Qfinder Pro Mac 7.11.1 and later Additional Analyst N
evice Client for Mac 2.2.5 and later Qsync for Mac 5.1.3 and later Qfinder Pro Mac 7.11.1 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-51
CVE ID: CVE-2024-53695 State: PUBLISHED Published: 2025-03-07T16:13:42.883Z Last Updated: 2025-03-07T17:54:53.580Z Vendors: QNAP Systems Inc. Products: HBS 3 Hybrid Backup Sync Problem Types: CWE-120, CWE-121 Description: A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-06