Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-57012 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-14T15:34:24.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md
CVE ID: CVE-2024-57013 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-13T14:09:24.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md
CVE ID: CVE-2024-57014 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-18T14:26:15.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md
CVE ID: CVE-2024-57015 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-18T13:18:53.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md
CVE ID: CVE-2024-57016 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-24T15:51:42.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "user" parameter in setVpnAccountCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md
CVE ID: CVE-2024-57017 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-13T14:16:23.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "pass" parameter in setVpnAccountCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md
CVE ID: CVE-2024-57018 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-13T14:58:02.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md
CVE ID: CVE-2024-57019 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-18T19:10:15.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "limit" parameter in setVpnAccountCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md
CVE ID: CVE-2024-57020 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-18T18:18:18.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md
CVE ID: CVE-2024-57021 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-20T14:11:28.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md
CVE ID: CVE-2024-57022 State: PUBLISHED Published: 2025-01-15T00:00:00.000Z Last Updated: 2025-03-19T13:58:50.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md
CVE ID: CVE-2024-57023 State: PUBLISHED Published: 2025-01-15T00:00:00 Last Updated: 2025-01-21T17:14:16.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setWiFiScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md
CVE ID: CVE-2024-57024 State: PUBLISHED Published: 2025-01-15T00:00:00 Last Updated: 2025-01-21T17:08:18.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md
CVE ID: CVE-2024-57025 State: PUBLISHED Published: 2025-01-15T00:00:00 Last Updated: 2025-01-21T16:35:58.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md
CVE ID: CVE-2024-57026 State: PUBLISHED Published: 2025-02-24T00:00:00.000Z Last Updated: 2025-03-03T19:37:25.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cosmosofcyberspace.github.io/tawk_to_cve.html
CVE ID: CVE-2024-57030 State: PUBLISHED Published: 2025-01-17T00:00:00 Last Updated: 2025-01-17T20:56:33.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wegia.org/ - https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-57030
CVE ID: CVE-2024-57031 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-03-24T17:21:33.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id_funcionario parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wegia.org/ - https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-57031
CVE ID: CVE-2024-57032 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-03-19T14:25:46.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senha_antiga field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wegia.org/ - https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-57032
CVE ID: CVE-2024-57033 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-01-23T16:18:54.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of documentos_funcionario.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wegia.org/ - https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-57033
CVE ID: CVE-2024-57034 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-03-14T17:11:10.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wegia.org - https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-57034
CVE ID: CVE-2024-57035 State: PUBLISHED Published: 2025-01-17T00:00:00.000Z Last Updated: 2025-03-18T17:52:26.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nilsonLazarin/WeGIA/issues/827 - https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-57035
CVE ID: CVE-2024-57036 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-02-04T15:24:09.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/Totolink-A810R-Vulnerability-1/blob/main/3.md
CVE ID: CVE-2024-57040 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-04-01T16:02:02.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing downloaded firmware or via a brute force attack through physical access to the router. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.iiita.ac.in/iot/hashed_password.pdf
CVE ID: CVE-2024-57041 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-06T21:27:03.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://nodebb.com - https://www.tonysec.com/posts/cve-2024-57041/ - https://github.com/NodeBB/NodeBB/commit/4e69bff72fd04779064d37e46a43080e6c328adf
CVE ID: CVE-2024-57045 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T15:16:22.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Shuanunio/CVE_Requests/blob/main/D-Link/DIR-859/ACL%20bypass%20Vulnerability%20in%20D-Link%20DIR-859.md
CVE ID: CVE-2024-57046 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T21:38:37.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the the requested url, it will be recognized as passing the authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/DGN2200/ACL%20bypass%20Vulnerability%20in%20Netgear%20DGN2200.md
CVE ID: CVE-2024-57049 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T14:49:54.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory. When adding Referer: http://tplinkwifi.net to the the request, it will be recognized as passing the authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Shuanunio/CVE_Requests/blob/main/TP-Link/archer%20c20/ACL%20bypass%20Vulnerability%20in%20TP-Link%20archer%20c20.md
CVE ID: CVE-2024-57050 State: REJECTED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-06-16T22:03:36.770Z Description: No description available.
CVE ID: CVE-2024-57052 State: PUBLISHED Published: 2025-01-27T00:00:00.000Z Last Updated: 2025-01-28T19:38:17.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/yahaha9/720fb45bbebda62dc198568c8d275df8
CVE ID: CVE-2024-57055 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T20:14:19.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client (not the general-use JSON services) and requires reverse engineering of the proprietary serialization protocol, making it difficult to exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wombatdialer.com/blog/blog/2025/02/18/CVE/
CVE ID: CVE-2024-57056 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-18T21:15:16.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wombatdialer.com/blog/blog/2025/02/18/CVE/
CVE ID: CVE-2024-57061 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-25T15:24:34.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-electron-applications-injection - https://www.electron.build/tutorials/adding-electron-fuses.html - https://sha999.medium.com/cve-2024-57061-termius-insufficient-electron-fuses-configuratio
s/adding-electron-fuses.html - https://sha999.medium.com/cve-2024-57061-termius-insufficient-electron-fuses-configuration-limited-disclosure-ab00d0970159
CVE ID: CVE-2024-57062 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:44:52.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges and obtain sensitive information via the session handling component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://soundcloud.com - https://github.com/SahilDabhilkar/CVE-Reference/blob/main/CVE-2024-57062.md
CVE ID: CVE-2024-57063 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:22:26.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/dcb93b4788273c3ffb15f70dc45ca4e7
CVE ID: CVE-2024-57064 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-10T13:43:30.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/1b40dc7f3836813663c871535039760e
CVE ID: CVE-2024-57065 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:33:59.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.createPath function of utile v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/7b2c50ccdec39a030091e48a4ccde688
CVE ID: CVE-2024-57066 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:32:54.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/8ee7327cc8b78df738cd32505cbbbd44
CVE ID: CVE-2024-57067 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:20:05.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/07dca101d8fe059dd11b3b0e1b4a6d46
CVE ID: CVE-2024-57068 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:18:36.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/47fe5b1e584e9e573c0933588248d533
CVE ID: CVE-2024-57069 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T16:22:47.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/68e06b00e3258d0d427257c6906bd300
CVE ID: CVE-2024-57071 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T16:21:56.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/b56500d3a8866467ee769df7453eedaa
CVE ID: CVE-2024-57072 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:31:59.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.requireFromString function of module-from-string v3.3.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/8b1fe301dd1ea52952cef347daddee67
CVE ID: CVE-2024-57074 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-13T20:19:23.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/82e3eb472d03273a74e40242e8356297
CVE ID: CVE-2024-57075 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-13T14:31:04.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/c601f7f85146510ca899a7406a03aba5
CVE ID: CVE-2024-57076 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-18T20:21:08.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/c432b93ee7d967c2e65bc1bf39241664
CVE ID: CVE-2024-57077 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-24T15:39:33.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: The latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service (DoS) a the minimum consequence. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/64bac50f8c2706e6880e45d50a507114
CVE ID: CVE-2024-57078 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T15:31:17.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/b58d7274d67e7b9fed4bd51368388a23