forked from CVEProject/cvelistV5
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- 3 new CVEs: CVE-2024-34520, CVE-2024-34521, CVE-2024-51376 - 1 updated CVEs: CVE-2024-55488
- Loading branch information
cvelistV5 Github Action
committed
Feb 12, 2025
1 parent
7d8d339
commit f553ff3
Showing
4 changed files
with
177 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "cveMetadata": { | ||
| "state": "PUBLISHED", | ||
| "cveId": "CVE-2024-34520", | ||
| "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", | ||
| "assignerShortName": "mitre", | ||
| "dateUpdated": "2025-02-12T22:30:32.223Z", | ||
| "dateReserved": "2024-05-05T00:00:00.000Z", | ||
| "datePublished": "2025-02-12T00:00:00.000Z" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "providerMetadata": { | ||
| "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", | ||
| "shortName": "mitre", | ||
| "dateUpdated": "2025-02-12T22:30:32.223Z" | ||
| }, | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls." | ||
| } | ||
| ], | ||
| "affected": [ | ||
| { | ||
| "vendor": "n/a", | ||
| "product": "n/a", | ||
| "versions": [ | ||
| { | ||
| "version": "n/a", | ||
| "status": "affected" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "url": "https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34520" | ||
| } | ||
| ], | ||
| "problemTypes": [ | ||
| { | ||
| "descriptions": [ | ||
| { | ||
| "type": "text", | ||
| "lang": "en", | ||
| "description": "n/a" | ||
| } | ||
| ] | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| "dataVersion": "5.1" | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "cveMetadata": { | ||
| "state": "PUBLISHED", | ||
| "cveId": "CVE-2024-34521", | ||
| "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", | ||
| "assignerShortName": "mitre", | ||
| "dateUpdated": "2025-02-12T22:32:14.628Z", | ||
| "dateReserved": "2024-05-05T00:00:00.000Z", | ||
| "datePublished": "2025-02-12T00:00:00.000Z" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "providerMetadata": { | ||
| "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", | ||
| "shortName": "mitre", | ||
| "dateUpdated": "2025-02-12T22:32:14.628Z" | ||
| }, | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative user to access system files with the file permissions of the privileged system user running the application." | ||
| } | ||
| ], | ||
| "affected": [ | ||
| { | ||
| "vendor": "n/a", | ||
| "product": "n/a", | ||
| "versions": [ | ||
| { | ||
| "version": "n/a", | ||
| "status": "affected" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "url": "https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34521" | ||
| } | ||
| ], | ||
| "problemTypes": [ | ||
| { | ||
| "descriptions": [ | ||
| { | ||
| "type": "text", | ||
| "lang": "en", | ||
| "description": "n/a" | ||
| } | ||
| ] | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| "dataVersion": "5.1" | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,59 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "cveMetadata": { | ||
| "state": "PUBLISHED", | ||
| "cveId": "CVE-2024-51376", | ||
| "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", | ||
| "assignerShortName": "mitre", | ||
| "dateUpdated": "2025-02-12T22:21:26.505Z", | ||
| "dateReserved": "2024-10-28T00:00:00.000Z", | ||
| "datePublished": "2025-02-12T00:00:00.000Z" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "providerMetadata": { | ||
| "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", | ||
| "shortName": "mitre", | ||
| "dateUpdated": "2025-02-12T22:21:26.505Z" | ||
| }, | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "Directory Traversal vulnerability in yeqifu carRental v.1.0 allows a remote attacker to obtain sensitive information via the file/downloadFile.action?path= component." | ||
| } | ||
| ], | ||
| "affected": [ | ||
| { | ||
| "vendor": "n/a", | ||
| "product": "n/a", | ||
| "versions": [ | ||
| { | ||
| "version": "n/a", | ||
| "status": "affected" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "url": "https://github.com/yeqifu/carRental/issues/43" | ||
| }, | ||
| { | ||
| "url": "https://github.com/echo0d/vulnerability/blob/main/yeqifu_carRental/DirectoryTraversal.md" | ||
| } | ||
| ], | ||
| "problemTypes": [ | ||
| { | ||
| "descriptions": [ | ||
| { | ||
| "type": "text", | ||
| "lang": "en", | ||
| "description": "n/a" | ||
| } | ||
| ] | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| "dataVersion": "5.1" | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters