Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-31586 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T01:52:57.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CyberSentryX/CVE_Hunting/tree/main/CVE-2024-31586
CVE ID: CVE-2024-31587 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:52:57.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/kklzzcun/kklzzcun.github.io/blob/main/Camera.md
CVE ID: CVE-2024-31601 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T01:52:57.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tianqing191/book.io
CVE ID: CVE-2024-31609 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-08-02T01:59:49.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ss122-0ss/BOSSCMS/blob/main/readme.md
CVE ID: CVE-2024-31610 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-08-15T15:37:30.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ss122-0ss/School/blob/main/readme.md
CVE ID: CVE-2024-31611 State: PUBLISHED Published: 2024-06-10T00:00:00.000Z Last Updated: 2025-03-13T17:52:03.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 12.9 has a file deletion vulnerability via admin_template.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ss122-0ss/seacms/blob/main/readme.md
CVE ID: CVE-2024-31612 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-08-19T16:59:44.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ss122-0ss/cms/blob/main/emlog-csrf.md
CVE ID: CVE-2024-31613 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-08-19T15:02:54.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ss122-0ss/BOSSCMS/blob/main/bosscms%20csrf.md
CVE ID: CVE-2024-31615 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-08-02T01:59:50.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/huajiuqi/bug/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
CVE ID: CVE-2024-31616 State: PUBLISHED Published: 2024-04-23T00:00:00 Last Updated: 2024-08-02T01:59:49.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(07150910) allows attackers to execute arbitrary code via the common_quick_config.lua file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Swind1er/0c50e72428059fb72a4fd4d31c43f883
CVE ID: CVE-2024-31617 State: PUBLISHED Published: 2024-05-22T17:42:57.754Z Last Updated: 2025-02-13T15:47:52.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenLiteSpeed before 1.8.1 mishandles chunked encoding. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/litespeedtech/openlitespeed/releases/tag/v1.8.1
CVE ID: CVE-2024-31621 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T01:59:49.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://flowiseai.com/ - https://www.exploit-db.com/exploits/52001
CVE ID: CVE-2024-31622 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:53.734Z Description: No description available.
CVE ID: CVE-2024-31623 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:53.925Z Description: No description available.
CVE ID: CVE-2024-31624 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:54.094Z Description: No description available.
CVE ID: CVE-2024-31625 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:54.273Z Description: No description available.
CVE ID: CVE-2024-31626 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:54.459Z Description: No description available.
CVE ID: CVE-2024-31627 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:54.658Z Description: No description available.
CVE ID: CVE-2024-31628 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:54.862Z Description: No description available.
CVE ID: CVE-2024-31629 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:55.078Z Description: No description available.
CVE ID: CVE-2024-31630 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:55.269Z Description: No description available.
CVE ID: CVE-2024-31631 State: REJECTED Published: N/A Last Updated: 2024-06-05T17:04:55.440Z Description: No description available.
CVE ID: CVE-2024-31634 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-10-30T16:24:25.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/buchilajiao1/CVE/blob/main/xunruicms/xunruicms.md
CVE ID: CVE-2024-31636 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T01:59:49.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://lief.com - https://github.com/lief-project/LIEF - https://github.com/lief-project/LIEF/issues/1038
CVE ID: CVE-2024-31648 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-08T18:47:17.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/new_category2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-31648.md
CVE ID: CVE-2024-31649 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-02T01:59:49.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-31649.md
CVE ID: CVE-2024-31650 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-02T01:59:50.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-31650.md
CVE ID: CVE-2024-31651 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-20T15:41:16.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-31651.md
CVE ID: CVE-2024-31652 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-10-30T16:27:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-31652.md
CVE ID: CVE-2024-31666 State: PUBLISHED Published: 2024-04-22T00:00:00.000Z Last Updated: 2025-03-26T20:58:18.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hapa3/cms/blob/main/1.md
CVE ID: CVE-2024-31668 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-18T15:49:11.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rizinorg/rizin/commit/c025dcee40c8eac2ab559f2caa3798a2dbf019e4 - https://gist.github.com/Crispy-fried-chicken/cb0b3a653a43a2fe2361641eddd8330d
CVE ID: CVE-2024-31669 State: PUBLISHED Published: 2024-12-02T00:00:00 Last Updated: 2024-12-03T15:17:52.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rizinorg/rizin/commit/e42999dda0be7737fafaf5e63c1c5833a72fd9c9 - https://gist.github.com/Crispy-fried-chicken/fb9f7000f0517a085483f7f2a60f0f08
CVE ID: CVE-2024-31670 State: PUBLISHED Published: 2024-12-12T00:00:00 Last Updated: 2024-12-13T18:05:22.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rizinorg/rizin/commit/75bac3088b2ec173e22d4be9d525ceacc987cf02
CVE ID: CVE-2024-31673 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-05T18:27:28.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/265
CVE ID: CVE-2024-31678 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-08-02T01:59:50.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CveSecLook/cve/issues/10
CVE ID: CVE-2024-31680 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-09-13T15:00:23.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local attacker to execute arbitrary code via the my_parser.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/heidashuai5588/cve/blob/main/upload.md
CVE ID: CVE-2024-31682 State: PUBLISHED Published: 2024-06-03T19:07:26.884Z Last Updated: 2025-02-13T15:47:53.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost & Clean v2.2.0 allows attackers to bypass fingerprint authentication due to the use of a deprecated API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zzzxiin.github.io/post/phone-cleaner/
CVE ID: CVE-2024-31684 State: PUBLISHED Published: 2024-06-03T19:05:16.824Z Last Updated: 2025-02-13T15:47:53.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the fingerprint authentication mechanism of Bitdefender Mobile Security v4.11.3-gms allows attackers to bypass fingerprint authentication due to the use of a deprecated API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.choiceoflove.dating&hl=en_US - https://zzzxiin.github.io/post/choice-of-love/
CVE ID: CVE-2024-31695 State: PUBLISHED Published: 2024-11-14T00:00:00 Last Updated: 2024-12-03T16:53:39.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attackers to bypass authentication when adding a new fingerprint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zzzxiin.github.io/post/binance/
CVE ID: CVE-2024-31705 State: PUBLISHED Published: 2024-04-29T00:00:00.000Z Last Updated: 2025-11-04T18:30:54.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/V3locidad/GLPI_POC_Plugins_Shell - https://seclists.org/fulldisclosure/2024/Apr/23
CVE ID: CVE-2024-31714 State: PUBLISHED Published: 2024-05-20T17:17:45.261Z Last Updated: 2025-02-13T15:47:54.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/lakemoon602/vuln/blob/main/wax.md
CVE ID: CVE-2024-31741 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T01:59:50.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/49
CVE ID: CVE-2024-31744 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T01:59:49.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a denial of service attack through a specific image file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jasper-software/jasper/issues/381 - https://github.com/jasper-software/jasper/commit/6d084c53a77762f41bb5310713a5f1872fef55f5
CVE ID: CVE-2024-31745 State: REJECTED Published: N/A Last Updated: 2024-04-25T16:02:25.354253 Description: No description available.
CVE ID: CVE-2024-31747 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-11-04T16:49:44.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c
CVE ID: CVE-2024-31750 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T01:59:49.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/lampSEC/semcms/blob/main/datacube3.md
CVE ID: CVE-2024-31755 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T01:59:49.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/DaveGamble/cJSON/issues/839
CVE ID: CVE-2024-31756 State: PUBLISHED Published: 2024-05-21T19:57:26.870Z Last Updated: 2025-02-13T15:47:55.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and before and fixed in v.5.0.4.0 allows a local attacker to escalate privileges via the Hw65.sys component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://northwave-cybersecurity.com/vulnerability-notice-hardware-access-driver-marvintest-solutions
CVE ID: CVE-2024-31757 State: PUBLISHED Published: 2024-05-21T17:37:47.272Z Last Updated: 2025-02-13T15:47:55.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0 allows a local attacker to escalate privileges via the TBOFLHelper64.sys and TBOFLHelper.sys component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.terabyteunlimited.com/image-for-windows/
CVE ID: CVE-2024-31759 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-08-22T18:39:43.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/menghaining/PoC/blob/main/PublicCMS/publishCMS--PoC.md - https://1drv.ms/v/s%21AmTWEcd1YDpUjgoJ8lkA8pN8zYEJ?e=gIlbGf - https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
CVE ID: CVE-2024-31760 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-08-02T01:59:50.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/menghaining/PoC/blob/main/gin-vue-admin/gin-vue-admin--PoC.md - https://github.com/flipped-aurora/gin-vue-admin/issues/1324 - https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
CVE ID: CVE-2024-31771 State: PUBLISHED Published: 2024-05-13T18:42:47.733Z Last Updated: 2025-02-13T15:47:56.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/restdone/CVE-2024-31771
CVE ID: CVE-2024-31777 State: PUBLISHED Published: 2024-06-13T00:00:00 Last Updated: 2024-09-06T16:39:13.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FreySolarEye/Exploit-CVE-2024-31777
CVE ID: CVE-2024-31783 State: PUBLISHED Published: 2024-04-16T00:00:00.000Z Last Updated: 2025-03-13T15:28:49.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script during markdown file creation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/0x0fc/TyporaXSS/blob/main/TyporaXSS.md
CVE ID: CVE-2024-31784 State: PUBLISHED Published: 2024-04-16T00:00:00 Last Updated: 2024-08-02T01:59:50.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the src component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/0x0fc/TyporaIframe/blob/main/TyporaIframeVuln.md
CVE ID: CVE-2024-31798 State: PUBLISHED Published: 2024-08-15T00:00:00 Last Updated: 2024-08-15T17:27:56.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gncchome.com/collections/indoor-camera/products/c2-indoor-security-camera-1080p - https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001
CVE ID: CVE-2024-31799 State: PUBLISHED Published: 2024-08-15T00:00:00 Last Updated: 2024-08-16T17:32:01.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the WiFi passphrase via the UART Debugging Port. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gncchome.com/collections/indoor-camera/products/c2-indoor-security-camera-1080p - https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001