rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-41454 
An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-15T00:00:00.000Z
CVE-2024-41459 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41460 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41461 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41462 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41463 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41464 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41465 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41466 
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41468 
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-25T00:00:00.000Z
CVE-2024-41473 
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-25T00:00:00.000Z
CVE-2024-41475 
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-12T00:00:00.000Z
CVE-2024-41476 
AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-09T00:00:00.000Z
CVE-2024-41481 
Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-08T00:00:00.000Z
CVE-2024-41482 
Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-08T00:00:00.000Z
CVE-2024-41492 
A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41502 
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (observances) in the "Pessoas" (persons) section when creating or editing either a legal or a natural person.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-10T00:00:00.000Z
CVE-2024-41503 
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) inside the filter Save option in the "Busca" (search) function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-10T00:00:00.000Z
CVE-2024-41504 
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the "Oportunidades" (opportunities) section of the application when creating or editing an "Atividade" (activity), the form field "Descrico" allows injection of JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-10T00:00:00.000Z
CVE-2024-41505 
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section via the field "Profisso" (professor).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-10T00:00:00.000Z
CVE-2024-41511 
A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-41512 
A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via the "bomid" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-41513 
A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-41514 
A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-41515 
A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "res_url" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-41516 
A Reflected cross-site scripting (XSS) vulnerability in "ccHandler.aspx" CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "bomid" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-41517 
An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-02T00:00:00.000Z
CVE-2024-41518 
An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-02T00:00:00.000Z
CVE-2024-41519 
Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-02T00:00:00.000Z
CVE-2024-41550 
CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice_items.php?id= .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41551 
CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-24T00:00:00.000Z
CVE-2024-41564 
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2024-08-28T00:00:00.000Z
CVE-2024-41565 
JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2024-08-28T00:00:00.000Z
CVE-2024-41570 
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-09T00:00:00.000Z
CVE-2024-41572 
Learning with Texts (LWT) 2.0.3 is vulnerable to Cross Site Scripting (XSS). The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user credentials or execute actions such as injecting malicious scripts or redirecting users to malicious sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-21T00:00:00.000Z
CVE-2024-41577 
An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-09T00:00:00.000Z
CVE-2024-41579 
DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-05T00:00:00.000Z
CVE-2024-41583 
DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41584 
DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41585 
DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject arbitrary commands into the host machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41586 
A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attacker to execute arbitrary code via a long query string to the cgi-bin/ipfedr.cgi component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41587 
Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41588 
The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41589 
DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41590 
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41591 
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41592 
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41593 
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41594 
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41595 
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41596 
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-03T00:00:00.000Z
CVE-2024-41597 
Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41599 
Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41600 
Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41601 
Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41602 
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41603 
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-19T00:00:00.000Z
CVE-2024-41605 
In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-26T00:00:00.000Z
CVE-2024-41610 
D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-30T00:00:00.000Z
CVE-2024-41611 
In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-30T00:00:00.000Z
CVE-2024-41613 
A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-13T00:00:00.000Z
CVE-2024-41614 
symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-13T00:00:00.000Z
CVE-2024-41616 
D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-06T00:00:00.000Z
CVE-2024-41617 
Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control. The `redirect_if_not_loggedin` function in `functions_security.php` fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary files, potentially leading to Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-24T00:00:00.000Z
CVE-2024-41618 
Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to improper sanitization of user input in the `TrDeleteArr` parameter, which is directly incorporated into an SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-24T00:00:00.000Z
CVE-2024-41622 
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-27T00:00:00.000Z
CVE-2024-41623 
An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-13T00:00:00.000Z
CVE-2024-41624 
Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an unspecified impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-29T00:00:00.000Z
CVE-2024-41628 
Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-26T00:00:00.000Z
CVE-2024-41629 
An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-12T00:00:00.000Z
CVE-2024-41630 
Stack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10_EN allows a remote attacker to execute arbitrary code via the ssid parameter at ip/goform/fast_setting_wifi_set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-31T00:00:00.000Z
CVE-2024-41631 
Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-29T00:00:00.000Z
CVE-2024-41637 
RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo privileges to execute several critical commands without a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-29T00:00:00.000Z
CVE-2024-41640 
Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-07-29T00:00:00.000Z
CVE-2024-41643 
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-03-26T00:00:00.000Z
CVE-2024-41644 
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_ component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-06T00:00:00.000Z
CVE-2024-41645 
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2__amcl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-06T00:00:00.000Z