Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33211 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-15T17:17:45.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/formQuickIndex-e1f24466830f4cb4a7756d6997f411b4
CVE ID: CVE-2024-33212 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-16T15:24:03.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palm-vertebra-fe9.notion.site/formSetCfm-7d199da0fd0740988a498304905e2dd1
CVE ID: CVE-2024-33213 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-15T17:17:52.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/fromRouteStatic_2-e98a555978be404583fef5f5c1e50efa
CVE ID: CVE-2024-33214 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-02T02:27:53.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/fromRouteStatic_1-c8b6c87ee247481c9728a4ed4c6ac853
CVE ID: CVE-2024-33215 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-15T17:17:37.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://palm-vertebra-fe9.notion.site/fromAddressNat_mitInterface-20fb36254513485082243e393b11fd1c
CVE ID: CVE-2024-33217 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-07T15:46:51.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palm-vertebra-fe9.notion.site/fromAddressNat_page-e9c05fb00f89482fa340d21bbda30642
CVE ID: CVE-2024-33218 State: PUBLISHED Published: 2024-05-22T15:00:41.133Z Last Updated: 2025-02-13T15:52:29.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33218
CVE ID: CVE-2024-33219 State: PUBLISHED Published: 2024-05-22T15:03:56.765Z Last Updated: 2025-02-13T15:52:29.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33219
CVE ID: CVE-2024-33220 State: PUBLISHED Published: 2024-05-22T15:04:26.335Z Last Updated: 2025-03-13T15:16:33.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33220
CVE ID: CVE-2024-33221 State: PUBLISHED Published: 2024-05-22T15:07:21.674Z Last Updated: 2025-02-13T15:52:31.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33221
CVE ID: CVE-2024-33222 State: PUBLISHED Published: 2024-05-22T15:08:03.307Z Last Updated: 2025-03-13T18:33:00.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33222
CVE ID: CVE-2024-33223 State: PUBLISHED Published: 2024-05-22T15:08:44.469Z Last Updated: 2025-02-13T15:52:32.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33223
CVE ID: CVE-2024-33224 State: PUBLISHED Published: 2024-05-22T15:13:37.807Z Last Updated: 2025-03-13T13:16:16.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33224
CVE ID: CVE-2024-33225 State: PUBLISHED Published: 2024-05-22T15:15:37.737Z Last Updated: 2025-02-13T15:52:33.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtek(r) High Definition Audio Function Driver v6.0.9549.1 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33225
CVE ID: CVE-2024-33226 State: PUBLISHED Published: 2024-05-22T15:17:09.996Z Last Updated: 2025-02-13T15:52:33.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33226
CVE ID: CVE-2024-33227 State: PUBLISHED Published: 2024-05-22T15:19:34.289Z Last Updated: 2025-03-28T18:57:08.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component ddcdrv.sys of Nicomsoft WinI2C/DDC v3.7.4.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33227
CVE ID: CVE-2024-33228 State: PUBLISHED Published: 2024-05-22T15:23:31.717Z Last Updated: 2025-02-13T15:52:34.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33228
CVE ID: CVE-2024-33231 State: PUBLISHED Published: 2024-11-18T00:00:00 Last Updated: 2024-11-19T14:54:29.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fdzdev/CVE-2024-33231
CVE ID: CVE-2024-33247 State: PUBLISHED Published: 2024-04-25T00:00:00.000Z Last Updated: 2025-03-26T14:43:32.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CveSecLook/cve/issues/11
CVE ID: CVE-2024-33250 State: PUBLISHED Published: 2024-05-13T15:46:25.948Z Last Updated: 2025-02-13T15:52:35.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hacker2004/cccccckkkkkk/blob/main/CVE-2024-33250.md
CVE ID: CVE-2024-33253 State: PUBLISHED Published: 2024-06-13T00:00:00 Last Updated: 2024-08-02T02:27:53.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the badge template editing function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FreySolarEye/CVE/blob/master/GUnet%20OpenEclass%20E-learning%20platform%203.15%20-%20%27certbadge.php%27%20Stored%20Cross%20Site%20Scripting
CVE ID: CVE-2024-33255 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:27:53.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/5135
CVE ID: CVE-2024-33258 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-06T20:30:09.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5114
CVE ID: CVE-2024-33259 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:27:53.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scanner-util.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/5132
CVE ID: CVE-2024-33260 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:27:53.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/5133
CVE ID: CVE-2024-33263 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-11-21T20:29:53.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bellard/quickjs/issues/277
CVE ID: CVE-2024-33266 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-09-06T19:06:34.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2024/04/25/deliveryorderautoupdate.html
CVE ID: CVE-2024-33267 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatewayBackModuleFrontController::initContent() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.heropay.eu/ - https://security.friendsofpresta.org/modules/2024/04/29/hfheropayment.html
CVE ID: CVE-2024-33268 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/04/25/mdgiftproduct.html
CVE ID: CVE-2024-33269 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/04/25/flashsales.html
CVE ID: CVE-2024-33270 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-11-01T16:04:57.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the uploadfiles.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://fme.com - http://fileuploads.com - https://addons.prestashop.com/en/additional-information-product-tab/21373-customer-file-upload-attach-file-on-productcart-pages.html - https://security.friendsofpresta.org/modules/2024/04/29/fileuploads.html
CVE ID: CVE-2024-33271 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps_customer component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/04/25/eventsmanager.html
CVE ID: CVE-2024-33272 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModuleFrontController::initContent(), and AutosuggestSearchModuleFrontController::getKbProducts() components. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/04/25/autosuggest.html
CVE ID: CVE-2024-33273 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate privileges via the getShopID function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.shipup.co/fr - https://security.friendsofpresta.org/modules/2024/04/29/shipup.html
CVE ID: CVE-2024-33274 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-09-06T18:35:21.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sensitive information via the Custom Checkout Fields, Add Custom Fields to Checkout parameter of the ajax.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/registration-ordering-process/19008-custom-checkout-fields-add-custom-fields-to-checkout.html - https://security.friendsofpresta.org/modules/2024/04/29/customfields.html
CVE ID: CVE-2024-33275 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the product_search.php components. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.webbax.ch/2017/08/30/9-modules-prestashop-gratuits-offert-par-webbax/ - https://security.friendsofpresta.org/modules/2024/04/29/supernewsletter.html
CVE ID: CVE-2024-33276 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderModel::getIdProductAttributesByIdAttributes() method. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.friendsofpresta.org/modules/2024/04/25/preorderandnotification.html
CVE ID: CVE-2024-33278 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-02T02:27:53.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbitrary code via the connection_state_machine due to improper length validation for the cookie field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.asus.com/content/asus-product-security-advisory/ - https://gist.github.com/viktoredstrom/cd2580fb0e93e47133b2998553b0a52f
CVE ID: CVE-2024-33292 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/JayChousfan/6a3a8e5a0fa5f1088d83ee21ed2dbb4a
CVE ID: CVE-2024-33294 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the _FAILE variable in the student_edit_photo.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CveSecLook/cve/issues/16
CVE ID: CVE-2024-33297 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T16:04:22.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MathSabo/CVE-2024-33297
CVE ID: CVE-2024-33298 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-13T15:32:46.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MathSabo/CVE-2024-33298
CVE ID: CVE-2024-33299 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T16:07:19.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MathSabo/CVE-2024-33299
CVE ID: CVE-2024-33300 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/whoisoo6/Stored-xss-vulnerability-exists-in-Typra
CVE ID: CVE-2024-33302 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T02:27:53.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting (XSS) via "Middle Name" under Add Users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33302.md
CVE ID: CVE-2024-33303 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T02:27:53.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33303.md
CVE ID: CVE-2024-33304 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33304.md