cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2024-12355,https://securityvulnerability.io/vulnerability/CVE-2024-12355,Input Validation Flaw in SourceCodester Phone Contact Manager System,"CVE-2024-12355 represents a significant security vulnerability found in the SourceCodester Phone Contact Manager System version 1.0. The issue lies within the ContactBook::adding function located in ContactBook.cpp, where improper input validation allows for potential exploitation. This flaw requires local access to execute an attack, but due to its nature, once leveraged, it can lead to severe consequences, including unauthorized data manipulation or system compromise. The vulnerability has been publicly disclosed, increasing the urgency for users to apply necessary patches or implement mitigating controls as soon as possible.",Sourcecodester,Phone Contact Manager System,7.8,HIGH,0.0004199999966658652,false,false,false,true,true,false,false,2024-12-09T01:31:07.752Z,0 CVE-2024-12354,https://securityvulnerability.io/vulnerability/CVE-2024-12354,Buffer Overflow Vulnerability in SourceCodester Phone Contact Manager System,"A critical buffer overflow vulnerability has been identified in the UserInterface::MenuDisplayStart function of the User Menu component within SourceCodester Phone Contact Manager System version 1.0. This vulnerability allows an attacker to manipulate the function, potentially leading to local code execution and unauthorized access to sensitive information. The exploit has already been disclosed, making this a pressing concern for users of the affected software. Users are strongly advised to apply necessary patches or employ mitigation strategies to protect against potential attacks.",Sourcecodester,Phone Contact Manager System,7.8,HIGH,0.0006000000284984708,false,false,false,true,true,false,false,2024-12-09T01:31:05.768Z,0 CVE-2024-12353,https://securityvulnerability.io/vulnerability/CVE-2024-12353,Input Validation Flaw in SourceCodester Phone Contact Manager System,"CVE-2024-12353 is a high-risk input validation vulnerability in SourceCodester's Phone Contact Manager System version 1.0. It affects the UserInterface::MenuDisplayStart function in the User Menu component, where improper validation of user-inputted arguments can be exploited. This vulnerability requires local access to execute, exposing systems to potential unauthorized actions or data manipulation if exploited. The flaw has been publicly disclosed, which heightens its significance for users of this software. Maintaining robust input validation mechanisms is critical to mitigating the risk of such vulnerabilities.",Sourcecodester,Phone Contact Manager System,7.8,HIGH,0.0006000000284984708,false,false,false,true,true,false,false,2024-12-09T01:00:19.368Z,0