Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-25227 State: PUBLISHED Published: 2024-03-15T00:00:00.000Z Last Updated: 2025-03-26T20:05:02.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in admin login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://thetrueartist.wixsite.com/cveblog/post/understanding-the-potential-impact-of-cve-2024-25227-what-you-need-to-know-and-how-it-was-discovered
CVE ID: CVE-2024-25228 State: PUBLISHED Published: 2024-03-14T00:00:00.000Z Last Updated: 2025-11-04T18:29:19.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/ - https://seclists.org/fulldisclosure/2024/Mar/15
CVE ID: CVE-2024-25239 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-02T19:08:00.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyee_akpoly/Account/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blu3ming.github.io/sourcecodester-employee-management-system-sql-injection/
CVE ID: CVE-2024-25247 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-08-29T14:58:16.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong
CVE ID: CVE-2024-25248 State: PUBLISHED Published: 2024-02-26T00:00:00.000Z Last Updated: 2025-03-27T20:26:52.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong
CVE ID: CVE-2024-25249 State: PUBLISHED Published: 2024-02-21T00:00:00.000Z Last Updated: 2025-03-27T20:02:38.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/intbjw - https://www.electronjs.org/blog/statement-run-as-node-cves - https://github.com/intbjw/CVE-2024-25249
CVE ID: CVE-2024-25250 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-27T19:34:57.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2024-25250./blob/main/CVE-38
CVE ID: CVE-2024-25251 State: PUBLISHED Published: 2024-02-22T00:00:00 Last Updated: 2024-08-16T17:38:45.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-projects.org/agro-school-management-system-in-php-with-source-code/ - https://github.com/ASR511-OO7/CVE-2024-25251/blob/main/CVE-17
CVE ID: CVE-2024-25253 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-19T16:57:37.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://exploitart.ist/exploit/2023/09/10/driver-booster-buffer-overflow.html
CVE ID: CVE-2024-25254 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-19T19:13:04.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://exploitart.ist/exploit/2023/09/18/superscan-os-command-injection.html
CVE ID: CVE-2024-25255 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-12-24T06:04:42.820220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://exploitart.ist/exploit/2023/09/17/sublime-text-os-command-injection.html - https://forum.sublimetext.com/t/cve-2024-25255-critical/74906/3 - https://www.sublimetext.com/docs/build_systems.html#exec-target-options - https://www.sublimetext.com/docs/build_systems.html#shell_cmd.
CVE ID: CVE-2024-25260 State: PUBLISHED Published: 2024-02-20T00:00:00.000Z Last Updated: 2025-04-24T15:07:14.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=31058 - https://github.com/schsiung/fuzzer_issues/issues/1 - https://sourceware.org/elfutils/
CVE ID: CVE-2024-25262 State: PUBLISHED Published: 2024-02-20T00:00:00.000Z Last Updated: 2025-11-03T21:54:04.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tug.org/svn/texlive/trunk/Build/source/texk/ttfdump/ChangeLog?revision=69605&view=co - https://bugs.launchpad.net/ubuntu/+source/texlive-bin/+bug/2047912
CVE ID: CVE-2024-25269 State: PUBLISHED Published: 2024-03-05T00:00:00.000Z Last Updated: 2025-04-16T16:01:40.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/1073
CVE ID: CVE-2024-25270 State: PUBLISHED Published: 2024-09-12T00:00:00.000Z Last Updated: 2025-03-25T16:10:42.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulnerability by manipulating the ID parameter and increment STEP parameter, leading to the exposure of sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fbkcs/CVE-2024-25270
CVE ID: CVE-2024-25274 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-08-29T15:34:16.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://reference1.example.com/login - https://gist.github.com/capable-Hub/725c294f1aeac729fa314a32fef55d5a
CVE ID: CVE-2024-25282 State: REJECTED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-22T20:54:43.062377 Description: No description available.
CVE ID: CVE-2024-25283 State: REJECTED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-22T20:55:28.909646 Description: No description available.
CVE ID: CVE-2024-25284 State: REJECTED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-22T20:56:09.374855 Description: No description available.
CVE ID: CVE-2024-25285 State: REJECTED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-22T20:56:47.653211 Description: No description available.
CVE ID: CVE-2024-25286 State: REJECTED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-22T20:57:39.132801 Description: No description available.
CVE ID: CVE-2024-25288 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-16T16:36:21.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-pop_scope_vocabolary.md - https://github.com/slims/slims9_bulian/issues/229
CVE ID: CVE-2024-25290 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-01T23:44:08.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cybercx.com.au/blog/zero-day-remote-code-execution-in-netcomm-nl1901acv-vdsl-modem/
CVE ID: CVE-2024-25291 State: PUBLISHED Published: 2024-02-29T00:00:00.000Z Last Updated: 2025-04-22T15:54:13.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ji-zzang/EQST-PoC/tree/main/2024/RCE/CVE-2024-25291
CVE ID: CVE-2024-25292 State: PUBLISHED Published: 2024-02-29T00:00:00.000Z Last Updated: 2025-03-27T14:36:54.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ji-zzang/EQST-PoC/tree/main/2024/RCE/CVE-2024-25292
CVE ID: CVE-2024-25293 State: PUBLISHED Published: 2024-03-01T00:00:00 Last Updated: 2024-08-06T15:28:19.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-25293
CVE ID: CVE-2024-25294 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T19:40:57.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rebuild.com - https://github.com/getrebuild/rebuild/ - https://deeply-capri-1c8.notion.site/REBUILD-V3-5-2023-12-11-SSRF-30324be04e00477eae472bf75f4f5e0d
CVE ID: CVE-2024-25297 State: PUBLISHED Published: 2024-02-17T00:00:00 Last Updated: 2024-08-01T23:44:08.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CpyRe/I-Find-CVE-2024/blob/main/BLUDIT%20Stored%20XSS.md
CVE ID: CVE-2024-25298 State: PUBLISHED Published: 2024-02-17T00:00:00 Last Updated: 2024-08-29T18:04:00.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CpyRe/I-Find-CVE-2024/blob/main/REDAXO%20RCE.md
CVE ID: CVE-2024-25300 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-03-13T16:29:04.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/WoodManGitHub/MyCVEs/blob/main/2024-REDAXO/XSS.md
CVE ID: CVE-2024-25301 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:16:05.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39459 - https://github.com/WoodManGitHub/MyCVEs/blob/main/2024-REDAXO/RCE.md
CVE ID: CVE-2024-25302 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-08T18:35:49.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVE/blob/main/Event_Student_Attendance_System.md
CVE ID: CVE-2024-25304 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:40:10.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-2.md
CVE ID: CVE-2024-25305 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:40:03.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20Authentication%20Bypass.md
CVE ID: CVE-2024-25306 State: PUBLISHED Published: 2024-02-09T00:00:00 Last Updated: 2024-08-19T16:26:00.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-1.md
CVE ID: CVE-2024-25307 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-20T20:19:30.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Cinema%20Seat%20Reservation%20System/Cinema%20Seat%20Reservation%20System%20-%20SQL%20Injection.md
CVE ID: CVE-2024-25308 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-12T15:04:59.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-6.md
CVE ID: CVE-2024-25309 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-17T19:54:18.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-7.md
CVE ID: CVE-2024-25310 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-20T20:20:10.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-3.md
CVE ID: CVE-2024-25312 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-20T20:20:49.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-5.md
CVE ID: CVE-2024-25313 State: PUBLISHED Published: 2024-02-09T00:00:00 Last Updated: 2024-08-26T19:04:51.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20Authentication%20Bypass%20-%202.md
CVE ID: CVE-2024-25314 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:39:54.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Hotel%20Managment%20System/Hotel%20Managment%20System%20-%20SQL%20Injection-2.md
CVE ID: CVE-2024-25315 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:39:47.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Hotel%20Managment%20System/Hotel%20Managment%20System%20-%20SQL%20Injection-1.md
CVE ID: CVE-2024-25316 State: PUBLISHED Published: 2024-02-09T00:00:00 Last Updated: 2024-08-19T16:24:21.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Hotel%20Managment%20System/Hotel%20Managment%20System%20-%20SQL%20Injection-4.md
CVE ID: CVE-2024-25318 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-16T18:19:12.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tubakvgc/CVEs/blob/main/Hotel%20Managment%20System/Hotel%20Managment%20System%20-%20SQL%20Injection-3.md
CVE ID: CVE-2024-25320 State: PUBLISHED Published: 2024-02-16T00:00:00 Last Updated: 2024-08-20T18:55:59.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cqliuke/cve/blob/main/sql.md
CVE ID: CVE-2024-25325 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-10-31T17:22:30.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2024020062
CVE ID: CVE-2024-25327 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-15T20:31:59.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/177500/FullCourt-Enterprise-8.2-Cross-Site-Scripting.html
CVE ID: CVE-2024-25331 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-08-05T14:13:38.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10372 - https://www.ensigninfosecurity.com/advisories/vulnerability-advisories/2
CVE ID: CVE-2024-25343 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-01T23:44:08.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://tenda.com - https://github.com/ShravanSinghRathore/Tenda-N300-F3-Router/wiki/Password-Policy-Bypass-Vulnerability-CVE%E2%80%902024%E2%80%9025343