rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-36611 
In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. NOTE: the Supplier has concluded that this is a false report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36612 
Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36613 
FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-03T00:00:00.000Z
CVE-2024-36615 
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36616 
An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36617 
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36618 
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36619 
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36620 
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36621 
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36622 
In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36623 
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36624 
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36625 
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36626 
In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36647 
A stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-13T00:00:00.000Z
CVE-2024-36650 
TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-11T00:00:00.000Z
CVE-2024-36656 
In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-14T00:00:00.000Z
CVE-2024-36667 
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/idcProType_deal.php?mudi=add&nohrefStr=close
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-05T19:01:21.484Z
CVE-2024-36668 
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.php?mudi=del
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-05T19:00:02.640Z
CVE-2024-36669 
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.php?mudi=add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-05T18:56:54.546Z
CVE-2024-36670 
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-05T18:57:12.653Z
CVE-2024-36671 
nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-29T00:00:00.000Z
CVE-2024-36673 
Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T12:56:32.289Z
CVE-2024-36674 
LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-03T15:41:29.829Z
CVE-2024-36675 
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-04T21:31:16.801Z
CVE-2024-36676 
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-09T00:00:00.000Z
CVE-2024-36677 
In the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-19T00:00:00.000Z
CVE-2024-36678 
In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-19T00:00:00.000Z
CVE-2024-36679 
In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection. Due to a predictable token, the method `Lcp::saveTranslations()` suffer of a white writer that can inject PHP code into a PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-19T00:00:00.000Z
CVE-2024-36680 
In the module "Facebook" (pkfacebook) <=1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookConnect.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-19T00:00:00.000Z
CVE-2024-36681 
SQL Injection vulnerability in the module "Isotope" (pk_isotope) <=1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensitive information and cause other impacts via `pk_isotope::saveData` and `pk_isotope::removeData` methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-24T00:00:00.000Z
CVE-2024-36682 
In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead to leak of personal information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-24T00:00:00.000Z
CVE-2024-36683 
SQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from Smart Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via the ProductsAlertAjaxProcessModuleFrontController::initContent method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-24T00:00:00.000Z
CVE-2024-36684 
In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-19T00:00:00.000Z
CVE-2024-36691 
Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-12T00:00:00.000Z
CVE-2024-36694 
OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-18T00:00:00.000Z
CVE-2024-36697 
A cross-site scripting (XSS) vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SessionID parameter at query.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-10T00:00:00.000Z
CVE-2024-36702 
libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-11T00:00:00.000Z
CVE-2024-36728 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlan_setting with a sufficiently long dns1 or dns 2 key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-03T13:58:51.113Z
CVE-2024-36729 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wizard_ipv6 with a sufficiently long reboot_type key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-03T13:57:31.550Z
CVE-2024-36730 
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T19:06:42.448Z
CVE-2024-36732 
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.tensordot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T18:51:44.630Z
CVE-2024-36734 
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the dim parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T18:44:36.311Z
CVE-2024-36735 
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T18:41:19.132Z
CVE-2024-36736 
An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same dimension operation is performed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T17:47:22.614Z
CVE-2024-36737 
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T17:43:04.792Z
CVE-2024-36740 
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative number exceeds the range of size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T18:40:17.853Z
CVE-2024-36742 
An issue in the oneflow.scatter_nd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index parameter exceeds the range of shape.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T17:10:29.998Z
CVE-2024-36743 
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T17:12:58.912Z
CVE-2024-36745 
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T17:16:32.037Z
CVE-2024-36751 
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service (ReDoS) via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-15T00:00:00.000Z
CVE-2024-36755 
D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change the downloading URL via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-27T00:00:00.000Z
CVE-2024-36760 
A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: (/ SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : _ $LT $impl $u20 $rhai.. engine.. Engine$GT$::eval_stmt::h3f1d68ce37fc6e96). Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file eval_stmt_block function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-13T00:00:00.000Z
CVE-2024-36761 
naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-12T00:00:00.000Z
CVE-2024-36773 
A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T14:28:44.156Z
CVE-2024-36774 
An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T21:33:53.456Z
CVE-2024-36775 
A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T21:35:17.060Z
CVE-2024-36779 
Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T12:31:37.490Z
CVE-2024-36782 
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-03T20:09:40.333Z
CVE-2024-36783 
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-03T19:58:42.756Z
CVE-2024-36787 
An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T14:17:11.178Z
CVE-2024-36788 
Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T14:24:55.183Z
CVE-2024-36789 
An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T14:19:37.128Z
CVE-2024-36790 
Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T14:23:07.428Z
CVE-2024-36792 
An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T14:14:38.070Z
CVE-2024-36795 
Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T20:49:33.951Z
CVE-2024-36800 
A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-04T12:49:06.688Z
CVE-2024-36801 
A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-04T12:47:24.777Z
CVE-2024-36814 
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-08T00:00:00.000Z
CVE-2024-36819 
MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting (XSS). This vulnerability allows malicious users to insert a malicious payload into the "Client Name" input. When a service order from this client is created, the malicious payload is displayed on the administrator and employee dashboards, resulting in unauthorized script execution whenever the dashboard is loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-25T00:00:00.000Z
CVE-2024-36821 
Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-11T00:00:00.000Z
CVE-2024-36823 
The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-06T21:14:31.574Z
CVE-2024-36827 
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-07T00:00:00.000Z
CVE-2024-36829 
Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-26T00:00:00.000Z
CVE-2024-36831 
A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-17T00:00:00.000Z
CVE-2024-36832 
A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it will crash and exit due to a null pointer reference, leading to a denial of service attack to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-17T00:00:00.000Z
CVE-2024-36837 
SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-06-05T00:00:00.000Z