Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
at Enterprise Linux 9.2 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, OpenShift Developer Tools and Services, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4, Red Hat Quay 3 Problem Types: CWE-22 Description: A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN
mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:8563 - https://access.redhat.com/errata/RHSA-2024:8675 - https://access.redhat.com/errata/RHSA-2024:8679 - https://access.redhat.com/errata/RHSA-2024:8686 - https://access.redhat.com/errata/RHSA-2024:8690 - https://access.redhat.com/errata/RHSA-2024:8700 - https://access.redhat.com/errata/RH
redhat.com/errata/RHSA-2024:8690 - https://access.redhat.com/errata/RHSA-2024:8700 - https://access.redhat.com/errata/RHSA-2024:8703 - https://access.redhat.com/errata/RHSA-2024:8707 - https://access.redhat.com/errata/RHSA-2024:8708 - https://access.redhat.com/errata/RHSA-2024:8709 - https://access.redhat.com/errata/RHSA-2024:8846 - https://access.redhat.com/errata/RHSA-2024:8984 - https://access.redhat.com/errata/RHSA-2024:8994 - https://access.redhat.com/errata/RHSA-2024:9051 - https://access.redhat.com/errata/RHSA-2024:9454 - https://access.redhat.com/errata/RHSA-2024:9459 - https://access.redhat.com/errata/RHSA-2025:2445 - https://access.redhat.com/errata/RHSA-2025:2449 - https://access.
59 - https://access.redhat.com/errata/RHSA-2025:2445 - https://access.redhat.com/errata/RHSA-2025:2449 - https://access.redhat.com/errata/RHSA-2025:2454 - https://access.redhat.com/errata/RHSA-2025:2701 - https://access.redhat.com/errata/RHSA-2025:2710 - https://access.redhat.com/errata/RHSA-2025:3301 - https://access.redhat.com/errata/RHSA-2025:3573 - https://access.redhat.com/security/cve/CVE-2024-9675 - https://bugzilla.redhat.com/show_bug.cgi?id=2317458
CVE ID: CVE-2024-9676 State: PUBLISHED Published: 2024-10-15T15:27:33.665Z Last Updated: 2025-11-20T21:35:32.196Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, OpenShift Developer Tools and Services, Red Hat Enterprise Linux 10, Red Hat OpenShift Container Platform 4, Red Hat Q
, OpenShift Developer Tools and Services, Red Hat Enterprise Linux 10, Red Hat OpenShift Container Platform 4, Red Hat Quay 3 Problem Types: CWE-22 Description: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on th
not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:10289 - https://access.redhat.com/errata/RHSA-2024:8418 - https://access.redhat.com/errata/RHSA-2024:8428 - https://access.redhat.com/errata/RHSA-2024:8437 - https://access.redhat.com/errata/RHSA-2024:8686 - https://access.redhat.com/errata/RHSA-2024:8690 - https://access.redhat.com/errata/RHSA-2024:8694 - https://access.redhat.com/errata/RHSA-2024:8700 - https://access.redhat.com/errata/RHSA-2024:8984 - https://access.redhat.com/errata/RHSA-2024:9051 - https:
A-2024:8700 - https://access.redhat.com/errata/RHSA-2024:8984 - https://access.redhat.com/errata/RHSA-2024:9051 - https://access.redhat.com/errata/RHSA-2024:9454 - https://access.redhat.com/errata/RHSA-2024:9459 - https://access.redhat.com/errata/RHSA-2024:9926 - https://access.redhat.com/errata/RHSA-2025:0876 - https://access.redhat.com/errata/RHSA-2025:2454 - https://access.redhat.com/errata/RHSA-2025:2710 - https://access.redhat.com/errata/RHSA-2025:3301 - https://access.redhat.com/security/cve/CVE-2024-9676 - https://bugzilla.redhat.com/show_bug.cgi?id=2317467 - https://github.com/advisories/GHSA-wq2p-5pc6-wpgf
CVE ID: CVE-2024-9677 State: PUBLISHED Published: 2024-10-22T01:19:53.188Z Last Updated: 2024-10-22T15:52:56.281Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: USG FLEX H series uOS firmware Problem Types: CWE-522 Description: The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. Note that this attack could be successful only if the administrator has not logged out. Additional Analyst Notes: - CISA ADP Vulnrichment:
ack could be successful only if the administrator has not logged out. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficiently-protected-credentials-vulnerability-in-firewalls-10-22-2024
CVE ID: CVE-2024-9678 State: PUBLISHED Published: 2024-12-16T06:31:45.960Z Last Updated: 2024-12-16T16:32:57.875Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Trellix Products: DLP Extension Problem Types: CWE-89 Description: An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thrive.trellix.com/s/article/000013964
CVE ID: CVE-2024-9679 State: PUBLISHED Published: 2024-12-16T06:52:10.521Z Last Updated: 2024-12-16T16:34:25.334Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Trellix Products: DLP Extension Problem Types: CWE -321 Use of Hardcoded Cryptographic key Description: A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thrive.trellix.com/s/article/000013964
CVE ID: CVE-2024-9680 State: PUBLISHED Published: 2024-10-09T12:59:07.108Z Last Updated: 2025-11-03T22:33:32.973Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in Animation timeline Description: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:/
hunderbird < 115.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1923344 - https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039 - https://www.mozilla.org/security/advisories/mfsa2024-51/ - https://www.mozilla.org/security/advisories/mfsa2024-52/
CVE ID: CVE-2024-9681 State: PUBLISHED Published: 2024-11-06T07:47:20.162Z Last Updated: 2025-11-03T20:56:39.087Z Vendors: curl Products: curl Problem Types: CWE-1025 Comparison Using Wrong Factors Description: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have be
s a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.) When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then
asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://curl.se/docs/CVE-2024-9681.json - https://curl.se/docs/CVE-2024-9681.html - https://hackerone.com/reports/2764830
CVE ID: CVE-2024-9682 State: PUBLISHED Published: 2024-11-13T08:29:35.350Z Last Updated: 2024-11-13T14:38:37.822Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wproyal Products: Royal Elementor Addons and Templates Problem Types: CWE-79 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder widget in all versions up to, and including, 1.7.1001 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages t
ossible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bd90b85e-22a9-4c08-b2cf-4f75406e7ca3?source=cve - https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1002/assets/js/frontend.js?rev=3184222#L8771
CVE ID: CVE-2024-9683 State: PUBLISHED Published: 2024-10-17T14:08:57.482Z Last Updated: 2025-11-07T00:44:44.742Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Quay 3 Problem Types: CWE-305 Description: A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affects the authentication mechanism, reducing the overall security of password enforcement. While the risk is relatively low due to the typical length of the passwords used (73 characters), this vulnerability can still be exploited to reduce the complexity of brute-force or password-guessing attac
haracters), this vulnerability can still be exploited to reduce the complexity of brute-force or password-guessing attacks. The truncation of passwords weakens the overall authentication process, thereby reducing the effectiveness of password policies and potentially increasing the risk of unauthorized access in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-9683 - https://bugzilla.redhat.com/show_bug.cgi?id=2317559
CVE ID: CVE-2024-9685 State: PUBLISHED Published: 2024-10-10T02:06:10.487Z Last Updated: 2024-10-10T14:27:42.500Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: rainafarai Products: Notification for Telegram Problem Types: CWE-862 Description: The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftb_test_action' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to send a test message via the Telegram Bot API to all users configured in the settings. Additional Analyst Notes: -
e, to send a test message via the Telegram Bot API to all users configured in the settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/abaebd3b-69ab-4e9b-a528-c9d846e62238?source=cve - https://plugins.trac.wordpress.org/browser/notification-for-telegram/tags/3.3/index.php#L202 - https://plugins.trac.wordpress.org/changeset/3165615/notification-for-telegram
CVE ID: CVE-2024-9686 State: PUBLISHED Published: 2024-10-25T04:33:41.426Z Last Updated: 2024-10-25T20:04:20.065Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: choplugins Products: Order Notification for Telegram Problem Types: CWE-862 Description: The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfw_send_test_message' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to send a test message via the Telegram Bot API to the user configured in the settings. Additional Analyst Notes: - CISA ADP Vulnrichme
message via the Telegram Bot API to the user configured in the settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c182b4f2-c67b-4e82-a790-6d98946ebf2c?source=cve - https://plugins.trac.wordpress.org/browser/order-notification-for-telegram/tags/1.0.1/inc/admin_ajax.php#L5
CVE ID: CVE-2024-9687 State: PUBLISHED Published: 2024-10-15T02:03:49.768Z Last Updated: 2024-10-15T15:49:57.267Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: dueclic Products: WP 2FA with Telegram Problem Types: CWE-639 Description: The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. Additional Analyst Notes: - CISA ADP Vulnrich
ove, to log in as any existing user on the site, such as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/13b5292f-4484-498b-b6b7-2895871ab794?source=cve - https://plugins.trac.wordpress.org/browser/two-factor-login-telegram/tags/3.0/includes/class-wp-factor-telegram-plugin.php#L244
CVE ID: CVE-2024-9688 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:18.115Z Description: No description available.
CVE ID: CVE-2024-9689 State: PUBLISHED Published: 2024-11-05T06:00:08.314Z Last Updated: 2024-11-07T19:56:59.998Z Vendors: Unknown Products: Post From Frontend Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ea501d37-1ec2-43ec-873a-ec204e965f60/
CVE ID: CVE-2024-9692 State: PUBLISHED Published: 2024-10-24T16:20:57.274Z Last Updated: 2024-10-24T19:53:10.104Z Vendors: VIMESA Products: VHF/FM Transmitter Blue Plus Problem Types: CWE-284 Description: VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01
CVE ID: CVE-2024-9693 State: PUBLISHED Published: 2024-11-14T11:02:01.506Z Last Updated: 2024-11-15T04:55:40.277Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/497449
CVE ID: CVE-2024-9694 State: PUBLISHED Published: 2024-12-03T02:05:35.627Z Last Updated: 2024-12-03T11:23:43.361Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: CMSMasters Products: CMSMasters Elementor Addon Problem Types: CWE-79 Description: The CMSMasters Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.14.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user ac
, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7eb78b64-ebe3-44e9-9061-d380693c5566?source=cve - https://docs.cmsmasters.net/cmsmasters-elementor-addon-changelog/
CVE ID: CVE-2024-9696 State: PUBLISHED Published: 2024-10-12T08:41:05.620Z Last Updated: 2024-10-15T01:35:46.464Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rescuethemes Products: Rescue Shortcodes Problem Types: CWE-79 Description: The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rescue_tab' shortcode in all versions up to, and including, 2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user ac
, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9517db1f-1704-4f25-9b02-795da3c4c067?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3167329%40rescue-shortcodes&new=3167329%40rescue-shortcodes&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9697 State: PUBLISHED Published: 2025-01-07T05:23:52.882Z Last Updated: 2025-01-07T16:16:42.813Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: socialrocket Products: Social Rocket – Social Sharing Plugin Problem Types: CWE-862 Description: The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tweet_settings_save() and tweet_settings_update() functions in all versions up to, and including, 1.3.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. Additional Analyst Not
authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/168dd2d4-bffb-4187-afc7-02fef8cb51a7?source=cve - https://plugins.trac.wordpress.org/browser/social-rocket/trunk/admin/includes/class-social-rocket-admin.php#L5501 - https://plugins.trac.wordpress.org/browser/social-rocket/trunk/admin/includes/class-social-rocket-admin.php#L39 - https://plugins.trac.wordpress.org/browser/social-rocket/trunk/admin/includes/class-social-rocket-admin.php#L5531
CVE ID: CVE-2024-9698 State: PUBLISHED Published: 2024-12-14T04:23:48.240Z Last Updated: 2024-12-16T17:49:26.044Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: aruphash Products: Crafthemes Demo Import Problem Types: CWE-434 Description: The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'process_uploaded_files' function in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Not
load arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e44dd0e8-e6e7-4a2d-b9ca-abd1de273092?source=cve - https://plugins.trac.wordpress.org/browser/crafthemes-demo-import/trunk/inc/Helpers.php#L421
CVE ID: CVE-2024-9699 State: PUBLISHED Published: 2025-03-20T10:09:46.528Z Last Updated: 2025-03-20T18:34:52.446Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-79 Description: A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting (XSS) attack if the uploaded file is accessed by other users. The issue is fixed in version 1.4.dev. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a993
xed in version 1.4.dev. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a993a05f-be50-4983-a44a-3bbff1ec00db - https://github.com/flatpressblog/flatpress/commit/f364391085334a7eae02aa2320edd6de7466ec85
CVE ID: CVE-2024-9700 State: PUBLISHED Published: 2024-10-31T05:31:23.699Z Last Updated: 2024-10-31T14:20:15.963Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wpmudev Products: Forminator Forms – Contact Form, Payment Form & Custom Form Builder Problem Types: CWE-639 Description: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.36.0 via the submit_quizzes() function due to missing validation on the 'entry_id' user controlled key. This makes it possible for unauthenticated attackers to modify other user's quiz submissions. A