Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ent input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/40a272dc-cb2a-472f-be42-733efcb2fa61?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3050556%40elementinvader-addons-for-elementor&new=3050556%40elementinvader-addons-for-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2024-2309 State: PUBLISHED Published: 2024-04-17T05:00:03.096Z Last Updated: 2024-08-01T19:11:53.339Z Vendors: Unknown Products: WP STAGING WordPress Backup Plugin , wp-staging-pro Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - h
example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/a4152818-1e07-46a7-aec4-70f1a1b579a6/
CVE ID: CVE-2024-2310 State: PUBLISHED Published: 2024-04-26T05:00:02.665Z Last Updated: 2024-08-01T19:11:52.506Z Vendors: Unknown Products: WP Google Review Slider Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/7a2c173c-19e3-4f48-b3af-14790b5b8e94/
CVE ID: CVE-2024-2311 State: PUBLISHED Published: 2024-04-09T18:59:36.184Z Last Updated: 2024-08-01T19:11:53.382Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ThemeFusion Products: Avada | Website Builder For WordPress & WooCommerce Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 7.11.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level
output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ff6ff104-44c8-49a9-bebd-abb82e8e1cd6?source=cve - https://gist.github.com/Xib3rR4dAr/8b0f2bf40092e00851fe2f57f15e947e - https://gist.github.com/Xib3rR4dAr/d3c36f7befe7d380ed240d3cb141d64c - https://gist.github.com/Xib3rR4dAr/ebb7e1dee2b073b8a478c2f663521b30 - https://gist.github.com/Xib3rR4dAr/af52a553c0293
- https://gist.github.com/Xib3rR4dAr/ebb7e1dee2b073b8a478c2f663521b30 - https://gist.github.com/Xib3rR4dAr/af52a553c02936479461189d53c1d4fe
CVE ID: CVE-2024-2312 State: PUBLISHED Published: 2024-04-05T19:40:02.848Z Last Updated: 2025-02-13T17:33:46.314Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Debian Products: Debian based GNU GRUB Description: GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024
/bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2312 - https://security.netapp.com/advisory/ntap-20240426-0003/
CVE ID: CVE-2024-2313 State: PUBLISHED Published: 2024-03-10T22:51:51.372Z Last Updated: 2025-03-13T21:15:14.295Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: bpftrace Products: bpftrace Description: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998 - https://c
ontainer: References: - https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313
CVE ID: CVE-2024-2314 State: PUBLISHED Published: 2024-03-10T22:54:31.563Z Last Updated: 2024-10-30T18:04:20.999Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: IOVisor Products: BPF Compiler Collection Description: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342 - https:
ADP Vulnrichment: References: - https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314
CVE ID: CVE-2024-2315 State: PUBLISHED Published: 2024-11-12T15:01:15.370Z Last Updated: 2024-11-21T16:20:52.843Z Vendors: AMI Products: AptioV Problem Types: CWE-284 Description: APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf
CVE ID: CVE-2024-2316 State: PUBLISHED Published: 2024-03-08T11:31:04.188Z Last Updated: 2024-08-01T19:11:53.294Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Bdtask Products: Hospital AutoManager Problem Types: CWE-352 Description: A vulnerability has been found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This vulnerability affects unknown code of the file /billing/bill/edit/ of the component Update Bill Page. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256270 is the identifier assigned to this vulnerability. NOTE: The vendor was co
osed to the public and may be used. VDB-256270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.256270 - https://vuldb.com/?ctiid.256270 - https://drive.google.com/file/d/1v_Ee2FWlbpLgHYIl88COPp05EHSxUWI0/view?usp=sharing
CVE ID: CVE-2024-2317 State: PUBLISHED Published: 2024-03-08T12:00:07.323Z Last Updated: 2024-08-12T14:56:21.392Z Severity: N/A (CVSS 4.7 AV:N/AC:L/Au:M/C:N/I:P/A:P) Vendors: Bdtask Products: Hospital AutoManager Problem Types: CWE-285 Description: A vulnerability was found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This issue affects some unknown processing of the file /prescription/prescription/delete/ of the component Prescription Page. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256271. NOTE: The
s been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256271. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.256271 - https://vuldb.com/?ctiid.256271 - https://drive.google.com/file/d/13-Fxw8fw3VP1PvL0fYvDBVlpTDQHyCkc/view?usp=sharing
CVE ID: CVE-2024-2318 State: PUBLISHED Published: 2024-03-08T13:00:07.918Z Last Updated: 2025-06-10T07:28:04.921Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: ZKTeco Products: ZKBio Media Problem Types: CWE-24, CWE-23 Description: A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbio_media.sql leads to path traversal: '../filedir'. It is possible to launch the attack remotely. The exploit has been disclosed to
l leads to path traversal: '../filedir'. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.3 Build 2025-05-26-1605 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.256272 - https://vuldb.com/?ctiid.256272 - https://vuldb.com/?submit.288530 - https://gist.github.com/whiteman007/a3b25a7ddf38774329d72930e0cd841a - https://www.zkteco.com/en/Security_Bulletinsibs/11
CVE ID: CVE-2024-2319 State: PUBLISHED Published: 2024-03-08T13:08:52.443Z Last Updated: 2024-08-01T19:11:52.461Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Django MarkdownX Products: Django MarkdownX Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-
Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx
CVE ID: CVE-2024-2321 State: PUBLISHED Published: 2025-02-27T04:08:33.552Z Last Updated: 2025-02-27T14:43:16.368Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: WSO2 Products: WSO2 API Manager, WSO2 Identity Server Problem Types: CWE-863 Description: An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed directly using a refresh token instead of the expected access token. Due to improper authorization checks and token mapping, session cookies are not required for API access, potentially enabling unauthorized operations. Exploitation requires an attacker to obtain a valid refresh token of an admin us
ially enabling unauthorized operations. Exploitation requires an attacker to obtain a valid refresh token of an admin user. Since refresh tokens generally have a longer expiration time, this could lead to prolonged unauthorized access to API resources, impacting data confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3213/
CVE ID: CVE-2024-2322 State: PUBLISHED Published: 2024-04-03T05:00:01.687Z Last Updated: 2025-03-26T17:40:05.769Z Vendors: Unknown Products: WooCommerce Cart Abandonment Recovery Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/c740ed3b-d6b8-4afc-8c6b-a1ec37597055/
CVE ID: CVE-2024-2324 State: PUBLISHED Published: 2024-05-02T16:52:55.087Z Last Updated: 2024-08-01T19:11:53.426Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: softaculous Products: FileOrganizer – Manage WordPress and Website Files Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via svg file upload in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbit
insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. For the free version, this is limited to administrators. The pro version is also vulnerable and exploitable by administrators, but also offers the functionality to lower level users (as low as subscribers) if enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ffaefd79-57a7-43b8-af1c-e108567eba67?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&
9-57a7-43b8-af1c-e108567eba67?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3069064%40fileorganizer%2Ftrunk&old=3010587%40fileorganizer%2Ftrunk
CVE ID: CVE-2024-2325 State: PUBLISHED Published: 2024-04-09T18:59:16.745Z Last Updated: 2025-02-26T18:13:24.181Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: jackdewey Products: Link Library Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchll parameter in all versions up to, and including, 7.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a u
e for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b93af9cc-cd9a-4bbb-8cb1-bf45c59e469c?source=cve - https://plugins.trac.wordpress.org/changeset/3050134/link-library
CVE ID: CVE-2024-2326 State: PUBLISHED Published: 2024-03-23T03:33:42.485Z Last Updated: 2025-04-10T20:09:20.821Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: supercleanse Products: Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to
ssing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to change the plugin's configuration including stripe integration via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/97d78b4b-568e-43e7-bebf-091179c321f6?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3049386%40pretty-link&new=3049386%40pretty-link&sfp_email=&sfph_mail=
CVE ID: CVE-2024-2327 State: PUBLISHED Published: 2024-04-09T18:59:25.329Z Last Updated: 2024-08-01T19:11:53.401Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tausworks Products: Global Elementor Buttons Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Global Elementor Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button link URL in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above perm
ng on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d84f9b06-9127-4526-8f17-21608ec2f601?source=cve - https://wordpress.org/plugins/global-elementor-buttons/
CVE ID: CVE-2024-2328 State: PUBLISHED Published: 2024-05-02T16:52:42.916Z Last Updated: 2024-08-01T19:11:53.324Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: devowl Products: Real Media Library: Media Library Folder & File Manager Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image title and alt text in all versions up to, and including, 4.22.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac
ding, 4.22.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author access and higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d359dc78-fc90-4570-a768-5f1a05f865e1?source=cve - https://plugins.trac.wordpress.org/browser/real-media-library-lite/trunk/inc/view/Gutenberg.php#L70 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3067589%40real-media-library-lite%2Ftrunk&old=3056657%40real
wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3067589%40real-media-library-lite%2Ftrunk&old=3056657%40real-media-library-lite%2Ftrunk&sfp_email=&sfph_mail=#file4
CVE ID: CVE-2024-2329 State: PUBLISHED Published: 2024-03-09T08:00:05.602Z Last Updated: 2024-08-05T19:44:38.987Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_resource_icon.php?action=delete. The manipulation of the argument IconId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256280. NO
ly. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256280. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.256280 - https://vuldb.com/?ctiid.256280 - https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-list_resource_icon.md
CVE ID: CVE-2024-2330 State: PUBLISHED Published: 2024-03-09T09:00:08.392Z Last Updated: 2024-08-12T13:50:56.279Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256281 was assigned to this vulnerability. NOTE: The vendor was
closed to the public and may be used. The identifier VDB-256281 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.256281 - https://vuldb.com/?ctiid.256281 - https://github.com/jikedaodao/cve/blob/main/NS-ASG-sql-addmacbind.md
CVE ID: CVE-2024-2331 State: PUBLISHED Published: 2024-03-09T10:00:07.753Z Last Updated: 2025-04-16T15:49:18.910Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Tourist Reservation System Problem Types: CWE-120 Description: A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function ad_writedata of the file System.cpp. The manipulation of the argument ad_code leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256282 is the identifier assigned to this vulnerability. Additional Analyst Not
losed to the public and may be used. VDB-256282 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.256282 - https://vuldb.com/?ctiid.256282 - https://github.com/wkeyi0x1/vul-report/blob/main/Tourist%20Reservation%20System%20using%20C%2B%2B%20with%20Free%20Source%20Code/buffer-overflow-1.md
CVE ID: CVE-2024-2332 State: PUBLISHED Published: 2024-03-09T14:00:09.399Z Last Updated: 2024-08-05T15:47:22.091Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Mobile Management Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/manage_category.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier