Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27567 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-02T00:34:52.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pptp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/config_vpn_pptp.md
CVE ID: CVE-2024-27568 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-28T19:06:59.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/setupEC20Apn.md
CVE ID: CVE-2024-27569 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-19T20:10:37.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/init_nvram.md
CVE ID: CVE-2024-27570 State: PUBLISHED Published: 2024-03-01T00:00:00.000Z Last Updated: 2025-03-14T00:33:36.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/generate_conf_router.md
CVE ID: CVE-2024-27571 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-22T18:33:19.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/makeCurRemoteApList.md
CVE ID: CVE-2024-27572 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-02T00:34:52.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/updateCurAPlist.md
CVE ID: CVE-2024-27574 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-02T00:34:52.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/7WaySecurity/vulnerabilities/tree/main
CVE ID: CVE-2024-27575 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-02T00:34:52.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.inotec-licht.de/ - https://gist.github.com/s4fv4n/098bd368bf054d008078e369108c2ebd
CVE ID: CVE-2024-27592 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-11-14T19:29:51.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted link to /login/ in the login page URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40nicatabbasov00002/open-redirect-vulnerability-62986ccaf0f7 - https://github.com/corezoid/helm/issues/110
CVE ID: CVE-2024-27593 State: PUBLISHED Published: 2024-05-15T16:31:21.034Z Last Updated: 2025-02-13T15:47:31.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blog.smarttecs.com/posts/2024-002-cve-2024-27593/
CVE ID: CVE-2024-27602 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-09-04T16:03:38.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Raybye/fee21f1a5b3a9ab54359818281478034
CVE ID: CVE-2024-27604 State: PUBLISHED Published: 2024-04-02T00:00:00.000Z Last Updated: 2025-03-27T21:18:06.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Raybye/b88847e9e9a94a1b1028dbdb7e38c12b
CVE ID: CVE-2024-27605 State: PUBLISHED Published: 2024-04-02T00:00:00.000Z Last Updated: 2025-03-28T18:25:43.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Raybye/f365c89115f80e81d209f2fca9490339
CVE ID: CVE-2024-27609 State: PUBLISHED Published: 2024-03-31T00:00:00 Last Updated: 2024-11-08T18:37:19.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.bonitasoft.com/bonita/latest/release-notes#_fixes_in_bonita_runtime_including_bonita_applications_2
CVE ID: CVE-2024-27612 State: PUBLISHED Published: 2024-03-08T00:00:00.000Z Last Updated: 2025-03-24T21:07:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Numbas editor before 7.3 mishandles editing of themes and extensions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/numbas/Numbas - https://www.numbas.org.uk/blog/2024/03/development-update-march-2024/
CVE ID: CVE-2024-27613 State: PUBLISHED Published: 2024-03-08T00:00:00.000Z Last Updated: 2025-03-28T23:43:35.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Numbas editor before 7.3 mishandles reading of themes and extensions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/numbas/Numbas - https://www.numbas.org.uk/blog/2024/03/development-update-march-2024/
CVE ID: CVE-2024-27619 State: PUBLISHED Published: 2024-03-29T00:00:00 Last Updated: 2024-09-04T16:12:50.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up than root of usb flash directory. During upload ram is getting filled and causing system resource exhaustion (no free memory) which causes system to crash and reboot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
memory) which causes system to crash and reboot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - http://dir-3040us.com - https://github.com/ioprojecton/dir-3040_dos
CVE ID: CVE-2024-27620 State: PUBLISHED Published: 2024-04-06T00:00:00 Last Updated: 2024-08-02T00:34:52.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://ladder.com - https://everywall.github.io/ - https://packetstormsecurity.com/files/177506/Ladder-0.0.21-Server-Side-Request-Forgery.html
CVE ID: CVE-2024-27622 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-19T07:48:15.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/capture0x/CMSMadeSimple/ - https://packetstormsecurity.com/files/1
SA ADP Vulnrichment: References: - https://github.com/capture0x/CMSMadeSimple/ - https://packetstormsecurity.com/files/177241/CMS-Made-Simple-2.2.19-Remote-Code-Execution.html
CVE ID: CVE-2024-27623 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-19T07:48:15.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, particularly when editing the Breadcrumbs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/capture0x/CMSMadeSimple2
CVE ID: CVE-2024-27625 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-11-12T17:16:30.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html
CVE ID: CVE-2024-27626 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-05T15:05:58.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/177239/Dotclear-2.29-Cross-Site-Scripting.html
CVE ID: CVE-2024-27627 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-05T17:11:20.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the bad_password.php page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/177254/SuperCali-1.1.0-Cross-Site-Scripting.html
CVE ID: CVE-2024-27628 State: PUBLISHED Published: 2024-06-28T00:00:00 Last Updated: 2024-08-02T00:34:52.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.dcmtk.org/redmine/issues/1108 - https://github.com/DCMTK/dcmtk/commit/ec52e99e1e33fc39810560421c0833b02da567b3
CVE ID: CVE-2024-27629 State: PUBLISHED Published: 2024-06-28T00:00:00 Last Updated: 2024-08-02T00:34:52.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rordenlab/dcm2niix/pull/789
CVE ID: CVE-2024-27630 State: PUBLISHED Published: 2024-04-08T00:00:00.000Z Last Updated: 2025-03-13T16:17:03.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40allypetitt/how-i-found-3-cves-in-2-days-8a135eb924d3 - https://github.com/ally-petitt/CVE-2024-27630
CVE ID: CVE-2024-27631 State: PUBLISHED Published: 2024-04-08T00:00:00 Last Updated: 2024-08-28T18:12:43.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.nongnu.org/cgit/administration/savane.git/commit/?h=i18n&id=d3962d3feb75467489b869204db98e2dffaaaf09 - https://medium.com/%40allypetitt/how-i-found-3-cves-in-2-days-8a135eb924d3 - https://github.com/ally-petitt/CVE-2024-27631
CVE ID: CVE-2024-27632 State: PUBLISHED Published: 2024-04-08T00:00:00.000Z Last Updated: 2025-03-26T16:10:50.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40allypetitt/how-i-found-3-cves-in-2-days-8a135eb924d3 - https://github.com/ally-petitt/CVE-2024-27632
CVE ID: CVE-2024-27655 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E094-f1bd478368644136ad2e3a33e59041b2?pvs=4
CVE ID: CVE-2024-27656 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E2A0-8ea57277c7cd4ea18dbc40bcb41a98f2?pvs=4
CVE ID: CVE-2024-27657 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41D5B0-462500887ea3464692e3e697cc43838c?pvs=4
CVE ID: CVE-2024-27658 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x44900C-8f23082721854117bdea70b6113433fd?pvs=4
CVE ID: CVE-2024-27659 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42B4C4-dfeae31d711f414796e1d9eb9cea7d31?pvs=4
CVE ID: CVE-2024-27660 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-11-19T21:33:27.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x41C708-e46f864c48114f45894f4563588d7968?pvs=4
CVE ID: CVE-2024-27661 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42444C-34458f12482346b291f334eea12e6fd0?pvs=4
CVE ID: CVE-2024-27662 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T00:34:52.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820?pvs=4
CVE ID: CVE-2024-27665 State: PUBLISHED Published: 2024-04-09T00:00:00 Last Updated: 2024-11-21T16:07:45.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature in Syllabus module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Thirukrishnan/CVE-2024-27665/
CVE ID: CVE-2024-27668 State: PUBLISHED Published: 2024-03-04T00:00:00.000Z Last Updated: 2025-03-28T19:03:38.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.' Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LY102483/cms/blob/main/1.md
CVE ID: CVE-2024-27673 State: REJECTED Published: N/A Last Updated: 2024-04-03T16:08:06.760083 Description: No description available.
CVE ID: CVE-2024-27674 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-10-28T13:57:54.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.macro-expert.com/ - https://github.com/Alaatk/CVE-2024-27674/tree/main
CVE ID: CVE-2024-27680 State: PUBLISHED Published: 2024-03-04T00:00:00 Last Updated: 2024-08-28T19:14:43.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiaolanjing0/cms/blob/main/4.md
CVE ID: CVE-2024-27683 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-14T19:07:30.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://drive.google.com/file/d/18RhbBnaD_kH16Y6C-7TpSSPUmYKKyU_k/view - https://gist.github.com/sunwithmoon/428c3871482a600382fec0a1994a518b
CVE ID: CVE-2024-27684 State: PUBLISHED Published: 2024-03-04T00:00:00 Last Updated: 2024-08-16T15:53:22.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://drive.google.com/file/d/1qu4iBQGeAwolTXjVOTXsAAusSHo2ie-Y/view
CVE ID: CVE-2024-27685 State: PUBLISHED Published: 2025-06-25T00:00:00.000Z Last Updated: 2025-06-25T15:09:13.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php/ - https://medium.com/@cnetsec/a-sql-injection-vulnerability-exists-in-the-student-record-system-using-php-and-mysql-v3-20-df2c6fe7dc15
CVE ID: CVE-2024-27689 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-08T20:46:04.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Xin246/cms/blob/main/2.md