Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-57079 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-18T20:13:16.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/4778fc57084766b7b7fb6d25d20b7b9b
CVE ID: CVE-2024-57080 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T16:36:48.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/c0b5fa2d7e4edd3f000e73fb7a10ccbc
CVE ID: CVE-2024-57081 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-19T18:32:56.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/4b2c7273054f0d70ef162aa5b6daec01
CVE ID: CVE-2024-57082 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-18T19:58:51.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the lib.createUploader function of @rpldy/uploader v1.8.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/708e518de0c3b5af7430ec774f68f315
CVE ID: CVE-2024-57083 State: PUBLISHED Published: 2025-03-28T00:00:00.000Z Last Updated: 2025-04-01T19:13:06.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Redocly/redoc/issues/2499
CVE ID: CVE-2024-57084 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-07T16:00:09.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/3dbeb208c3e22f90a601818ccd06a948
CVE ID: CVE-2024-57085 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-03-13T19:21:59.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/f59355f62dad6f8b53b42317f143ba0c
CVE ID: CVE-2024-57086 State: PUBLISHED Published: 2025-02-05T00:00:00.000Z Last Updated: 2025-02-06T16:30:13.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/tariqhawis/30acc3632cf595ca5825b7ec2b2f795a
CVE ID: CVE-2024-57095 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-05T16:46:02.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Go-CMS v.1.1.10 allows a remote attacker to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Xi-Yuer/GO-CMS/issues/6 - https://gist.github.com/wjlin0/ff3ee8afb8f8001faff89bbc03805605
CVE ID: CVE-2024-57096 State: PUBLISHED Published: 2025-05-14T00:00:00.000Z Last Updated: 2025-05-15T13:43:09.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/paokuwansui/wps_exp/blob/main/README
CVE ID: CVE-2024-57097 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-03T20:17:50.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ClassCMS/ClassCMS/issues/5
CVE ID: CVE-2024-57098 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-18T18:12:18.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/deep-project/moss/issues/13
CVE ID: CVE-2024-57099 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-14T15:45:35.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ClassCMS/ClassCMS/issues/6
CVE ID: CVE-2024-57151 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-31T14:58:46.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jcxj/jcxj/blob/master/source/_posts/%E4%BF%A1%E5%91%BCoa%E5%AE%A1%E8%AE%A1.md - https://github.com/l1uyi/cve-list/blob/main/cve-list/xinhu-CVE-2024-57171.md
CVE ID: CVE-2024-57152 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-21T13:40:53.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WinterChenS/my-site/issues/92
CVE ID: CVE-2024-57154 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-21T13:35:45.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication via sending a crafted payload to /admin/auth/index. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/qiguliuxing/dts-shop/issues/29
CVE ID: CVE-2024-57155 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-21T13:33:38.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wfh45678/radar/issues/100
CVE ID: CVE-2024-57157 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-21T14:49:04.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jantent/Jantent/issues/9
CVE ID: CVE-2024-57159 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-13T13:40:20.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1091101/yang.xian/tree/main/6/readme.md
CVE ID: CVE-2024-57160 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-01-31T20:27:07.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1091101/yang.xian/tree/main/7/readme.md
CVE ID: CVE-2024-57161 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-01-31T20:28:01.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1091101/yang.xian/tree/main/8/readme.md
CVE ID: CVE-2024-57162 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-19T17:58:06.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h1-wh0areu/bug_report/blob/main/cybercafe-management-system/SQLi-1.md
CVE ID: CVE-2024-57169 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T17:21:42.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload restrictions and potentially achieve remote code execution by uploading malicious files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://themcsam.github.io/posts/so-planing-vulnerabilities/#arbitrary-file-upload-leading-to-rce
CVE ID: CVE-2024-57170 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T17:30:15.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences (e.g., ../). This vulnerability enables attackers to delete arbitrary files outside the intended upload directory, potentially leading to denial of service or disruption of application functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://themcsam.github.io/posts/so-planing-v
ionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://themcsam.github.io/posts/so-planing-vulnerabilities/#arbitrary-file-deletion
CVE ID: CVE-2024-57174 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-06T21:55:15.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously unregistered domain name as the default DNS suffix. This allows attackers to register the unclaimed domain and point its wildcard DNS entry to an attacker-controlled IP address, making it possible to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chenzw.medium.com/internal-domain-names-f1cd2886c654 - https://github.com/geo-chen/BSides-SG-2022---Internal-Domain-Names?tab=readme-ov-f
/internal-domain-names-f1cd2886c654 - https://github.com/geo-chen/BSides-SG-2022---Internal-Domain-Names?tab=readme-ov-file#finding-1---cve-2024-57174-alphion-routers
CVE ID: CVE-2024-57175 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-03T17:44:49.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ajmal101/CVE-2024-57175/blob/main/README.md
CVE ID: CVE-2024-57176 State: PUBLISHED Published: 2025-02-21T00:00:00.000Z Last Updated: 2025-03-17T18:38:05.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DYX217/Incorrect-Access-Control
CVE ID: CVE-2024-57177 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-11T15:12:54.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/perfood/couch-auth - https://github.com/waristea/cve-research/tree/main/CVE-2024-57177
CVE ID: CVE-2024-57178 State: PUBLISHED Published: 2025-02-10T00:00:00.000Z Last Updated: 2025-02-10T20:22:24.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability exists in Stock-Forecaster <=01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio() endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nihal223/Stock-Forecaster - https://github.com/waristea/cve-research/tree/main/CVE-2024-57178
CVE ID: CVE-2024-57184 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-01-24T14:58:49.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_process_pmt in media_tools/mpegts.c:2163 that can cause a denial of service (DOS) via a crafted MP4 file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/1421 - https://github.com/gpac/gpac/commit/8c5e847185d74462d674ee7d28fb46c29dae6dd2
CVE ID: CVE-2024-57186 State: PUBLISHED Published: 2025-06-10T00:00:00.000Z Last Updated: 2025-06-17T19:15:52.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3 - https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices/
CVE ID: CVE-2024-57189 State: PUBLISHED Published: 2025-06-10T00:00:00.000Z Last Updated: 2025-06-17T19:12:52.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3 - https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices/
CVE ID: CVE-2024-57190 State: PUBLISHED Published: 2025-06-10T00:00:00.000Z Last Updated: 2025-06-10T19:40:27.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Erxes <1.6.1 is vulnerable to Incorrect Access Control. An attacker can bypass authentication by providing a "User" HTTP header that contains any user, allowing them to talk to any GraphQL endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices/ - https://github.com/erxes/erxes/commit/4ed2ca797241d2ba0c9083feeadd9755c1310ce8
CVE ID: CVE-2024-57211 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-15T20:27:42.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_11_enable_wsh/README.md
CVE ID: CVE-2024-57212 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T15:26:01.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_10_action_reboot/README.md
CVE ID: CVE-2024-57213 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-13T15:41:01.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_9_action_passwd/README.md
CVE ID: CVE-2024-57214 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T16:57:39.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/tree/main/TOTOLINK/A6000R/CI_8_reset_wifi
CVE ID: CVE-2024-57222 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T16:22:57.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_5_apcli_cancel_wps/README.md
CVE ID: CVE-2024-57223 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-13T20:11:19.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_6_apcli_wps_gen_pincode/README.md
CVE ID: CVE-2024-57224 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-13T20:12:51.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_3_apcli_do_enr_pin_wps/README.md
CVE ID: CVE-2024-57225 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-13T20:08:35.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_7_reset_wifi/README.md
CVE ID: CVE-2024-57226 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-15T20:28:44.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_2_vif_enable/README.md
CVE ID: CVE-2024-57227 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-16T17:35:15.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_4_apcli_do_enr_pbc_wps/README.md
CVE ID: CVE-2024-57228 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-16T17:34:17.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_1_vif_disable/README.md
CVE ID: CVE-2024-57229 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:17:58.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_7_reset_wifi/README.md
CVE ID: CVE-2024-57230 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:35:46.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_3_apcli_do_enr_pin_wps/README.md
CVE ID: CVE-2024-57231 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:17:04.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_4_apcli_do_enr_pbc_wps/README.md
CVE ID: CVE-2024-57232 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:15:42.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_6_apcli_wps_gen_pincode/README.md