rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-32166 
Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended (horizontal privilege escalation).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-19T00:00:00.000Z
CVE-2024-32167 
Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-10T00:00:00.000Z
CVE-2024-32206 
A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-19T00:00:00.000Z
CVE-2024-32210 
The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-01T00:00:00.000Z
CVE-2024-32211 
An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensitive information via the UserClass.cs and Settings.cs components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-01T00:00:00.000Z
CVE-2024-32212 
SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-01T00:00:00.000Z
CVE-2024-32213 
The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-01T00:00:00.000Z
CVE-2024-32228 
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-01T00:00:00.000Z
CVE-2024-32229 
FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-01T00:00:00.000Z
CVE-2024-32230 
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-01T00:00:00.000Z
CVE-2024-32231 
Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-15T00:00:00.000Z
CVE-2024-32236 
An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-25T00:00:00.000Z
CVE-2024-32238 
H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-22T00:00:00.000Z
CVE-2024-32254 
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-16T00:00:00.000Z
CVE-2024-32256 
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-16T00:00:00.000Z
CVE-2024-32258 
The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-23T00:00:00.000Z
CVE-2024-32268 
An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-32269 
An issue in Yonganda YAD-LOJ V3.0.561 allows a remote attacker to cause a denial of service via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-29T00:00:00.000Z
CVE-2024-32281 
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32282 
Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32283 
Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32285 
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32286 
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32287 
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32288 
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32290 
Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32291 
Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32292 
Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32293 
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32299 
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32301 
Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32302 
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32303 
Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32305 
Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32306 
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32307 
Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32310 
Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32311 
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32312 
Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32313 
Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the adslPwd parameter of the formWanParameterSetting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32314 
Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32315 
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32316 
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32317 
Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32318 
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32320 
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32323 
SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information via the if parameter in hcit.project.rte.agents.UploadImages.class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-17T00:00:00.000Z
CVE-2024-32324 
Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpn_client_ip variable of the config_vpn_pptp function in rc program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-25T00:00:00.000Z
CVE-2024-32325 
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32326 
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32327 
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32332 
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in WDS Settings under the Wireless Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32333 
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32334 
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32335 
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Access Control under the Wireless Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-18T00:00:00.000Z
CVE-2024-32337 
A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32338 
A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE TITLE parameter under the Current Page module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32339 
Multiple cross-site scripting (XSS) vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32340 
A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32341 
Multiple cross-site scripting (XSS) vulnerabilities in the Home page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32342 
A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Permalink parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32343 
A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32344 
A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32345 
A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-17T00:00:00.000Z
CVE-2024-32349 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T15:52:55.912Z
CVE-2024-32350 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T15:55:10.699Z
CVE-2024-32351 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mru" parameter in the "cstecgi.cgi" binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T15:56:21.177Z
CVE-2024-32352 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T15:57:23.755Z
CVE-2024-32353 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T15:58:27.613Z
CVE-2024-32354 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T15:59:27.126Z
CVE-2024-32355 
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-14T16:00:46.289Z
CVE-2024-32358 
An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-25T00:00:00.000Z
CVE-2024-32359 
An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code through designed commands to obtain the secrets of the entire cluster and further take over the cluster.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-02T00:00:00.000Z
CVE-2024-32368 
Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy (BLE) component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-22T00:00:00.000Z
CVE-2024-32369 
SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-07T00:00:00.000Z
CVE-2024-32370 
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-07T00:00:00.000Z
CVE-2024-32371 
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-07T00:00:00.000Z
CVE-2024-32384 
Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:R
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
Published: 2025-12-01T00:00:00.000Z
CVE-2024-32388 
Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2025-12-01T00:00:00.000Z
CVE-2024-32391 
Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-19T00:00:00.000Z