Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0224 State: PUBLISHED Published: 2024-01-04T01:56:14.448Z Last Updated: 2025-06-18T15:41:36.643Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html - https://crbug.com/1505086 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAU
05086 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2024-0225 State: PUBLISHED Published: 2024-01-04T01:56:14.668Z Last Updated: 2025-06-18T15:42:21.997Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html - https://crbug.com/1506923 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXL
923 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2024-0226 State: PUBLISHED Published: 2024-01-09T17:41:31.294Z Last Updated: 2024-09-04T15:10:40.443Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Synopsys Products: Seeker Problem Types: CWE-79 Description: Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2024-0226-Affecting-Seeker
CVE ID: CVE-2024-0227 State: REJECTED Published: 2024-01-11T19:35:51.821Z Last Updated: 2024-03-18T13:52:20.268Z Description: No description available.
CVE ID: CVE-2024-0228 State: REJECTED Published: N/A Last Updated: 2024-01-09T17:08:18.807Z Description: No description available.
CVE ID: CVE-2024-0229 State: PUBLISHED Published: 2024-02-09T06:29:51.542Z Last Updated: 2025-11-06T20:51:57.196Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for
upport, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-787 Description: An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the se
ttached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0320 - https://access.redhat.com/errata/RHSA-2024:0557 - https://access.redhat.com/errata/RHSA-2024:0558 - https://access.redhat.com/errata/RHSA-2024:0597 - https://access.redhat.com/errata/RHSA-2024:0607 - https://access.redhat.com/errata/RHSA-2024:0614 - https://access.redhat.com/errata/RHSA-2024:0617 - https://access.redhat.com/errata/RHSA-2024
com/errata/RHSA-2024:0614 - https://access.redhat.com/errata/RHSA-2024:0617 - https://access.redhat.com/errata/RHSA-2024:0621 - https://access.redhat.com/errata/RHSA-2024:0626 - https://access.redhat.com/errata/RHSA-2024:0629 - https://access.redhat.com/errata/RHSA-2024:2169 - https://access.redhat.com/errata/RHSA-2024:2170 - https://access.redhat.com/errata/RHSA-2024:2995 - https://access.redhat.com/errata/RHSA-2024:2996 - https://access.redhat.com/errata/RHSA-2025:12751 - https://access.redhat.com/security/cve/CVE-2024-0229 - https://bugzilla.redhat.com/show_bug.cgi?id=2256690
CVE ID: CVE-2024-0230 State: PUBLISHED Published: 2024-01-12T23:10:45.940Z Last Updated: 2025-11-04T18:22:20.424Z Vendors: Apple Products: Magic Keyboard Firmware Update Problem Types: An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic Description: A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214050
CVE ID: CVE-2024-0231 State: PUBLISHED Published: 2024-07-24T22:08:20.025Z Last Updated: 2024-08-29T15:04:54.292Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-99 Description: A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/437103 - https://hackerone.com/reports/2299337
CVE ID: CVE-2024-0232 State: PUBLISHED Published: 2024-01-16T14:01:58.505Z Last Updated: 2025-11-21T06:24:19.419Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-416 Description: A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichm
lication, potentially causing a crash and leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-0232 - https://bugzilla.redhat.com/show_bug.cgi?id=2243754
CVE ID: CVE-2024-0233 State: PUBLISHED Published: 2024-01-16T15:57:02.175Z Last Updated: 2025-06-20T17:41:04.389Z Vendors: Unknown Products: EventON Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/04a708a0-b6f3-47d1-aac9-0bb17f57c61e/
CVE ID: CVE-2024-0235 State: PUBLISHED Published: 2024-01-16T15:57:04.379Z Last Updated: 2025-06-20T17:41:43.271Z Vendors: Unknown Products: EventON Problem Types: CWE-862 Missing Authorization Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e370b99a-f485-42bd-96a3-60432a15a4e9/
CVE ID: CVE-2024-0236 State: PUBLISHED Published: 2024-01-16T15:57:00.337Z Last Updated: 2025-06-20T17:42:20.420Z Vendors: Unknown Products: EventON Problem Types: CWE-862 Missing Authorization Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/09aeb6f2-6473-4de7-8598-e417049896d7/
CVE ID: CVE-2024-0237 State: PUBLISHED Published: 2024-01-16T15:56:59.963Z Last Updated: 2025-06-02T15:09:36.305Z Vendors: Unknown Products: EventON Premium, EventON Problem Types: CWE-862 Missing Authorization Description: The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/73d1b00e-1f17-4d9a-bfc8-6bc43a46b90b/
CVE ID: CVE-2024-0238 State: PUBLISHED Published: 2024-01-16T15:57:05.090Z Last Updated: 2025-06-02T15:09:17.461Z Vendors: Unknown Products: EventON Premium, EventON Problem Types: CWE-862 Missing Authorization Description: The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an AJAX action, and does not ensure that the post to be updated belong to the plugin, allowing unauthenticated users to update arbitrary post metadata. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/774655ac-b201-4d9f-8790-9eff8564bc91/
CVE ID: CVE-2024-0239 State: PUBLISHED Published: 2024-01-16T15:57:03.662Z Last Updated: 2025-05-09T15:56:29.885Z Vendors: Unknown Products: Contact Form 7 Connector Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b9a4a3e3-7cdd-4354-8541-4219bd41c854/
CVE ID: CVE-2024-0240 State: PUBLISHED Published: 2024-02-15T20:30:45.263Z Last Updated: 2024-09-25T16:41:33.587Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: silabs.com Products: GSDK Problem Types: CWE-401 Description: A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/069Vm000001AjEfIAK
CVE ID: CVE-2024-0241 State: PUBLISHED Published: 2024-01-04T20:48:00.606Z Last Updated: 2025-06-18T15:43:39.641Z Problem Types: CWE-400 Description: encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c - https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91 - https://github.co
6h2c - https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91 - https://github.com/advisories/GHSA-3px7-jm2p-6h2c - https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2c
CVE ID: CVE-2024-0242 State: PUBLISHED Published: 2024-02-08T19:34:14.895Z Last Updated: 2024-08-01T17:41:16.073Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Qolsys, Inc. Products: IQ Panel 4, IQ4 Hub Problem Types: CWE-200 Description: Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/news-events/ics-advisories/icsa-24-039-01
CVE ID: CVE-2024-0243 State: PUBLISHED Published: 2024-02-24T17:59:26.498Z Last Updated: 2025-04-22T16:14:26.674Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: langchain-ai Products: langchain-ai/langchain Problem Types: CWE-918 Description: With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader( url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text ) docs = loader.load() ``` An attacker in control of the contents of `https://example.com` could place a malicious HTML file in there with links like "https://example.completely.different/my_file.html" and th
m` could place a malicious HTML file in there with links like "https://example.completely.different/my_file.html" and the crawler would proceed to download that file as well even though `prevent_outside=True`. https://github.com/langchain-ai/langchain/blob/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22/libs/community/langchain_community/document_loaders/recursive_url_loader.py#L51-L51 Resolved in https://github.com/langchain-ai/langchain/pull/15559 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/370904e7-10ac-40a4-a8d4-e2d16e1ca861 - https://github.com/langchain-ai/langchain/commit/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22 - https
a4-a8d4-e2d16e1ca861 - https://github.com/langchain-ai/langchain/commit/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22 - https://github.com/langchain-ai/langchain/pull/15559
CVE ID: CVE-2024-0244 State: PUBLISHED Published: 2024-02-06T00:24:03.211Z Last Updated: 2025-06-17T21:29:27.457Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Satera MF750C Series, Color imageCLASS MF750C Series, Color imageCLASS X MF1333C, i-SENSYS MF754Cdw, C1333iF Problem Types: CWE-787 Description: Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS MF750C Series/Color im
arbitrary code.*:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS MF750C Series/Color imageCLASS X MF1333C firmware v03.07 and earlier sold in US. i-SENSYS MF754Cdw/C1333iF firmware v03.07 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.canon/advisory-information/cp2024-001/ - https://canon.jp/support/support-info/240205vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - https://www.canon-europe.com/support/product
fer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - https://www.canon-europe.com/support/product-security-latest-news/
CVE ID: CVE-2024-0245 State: PUBLISHED Published: 2025-03-20T10:10:16.698Z Last Updated: 2025-10-15T12:49:22.092Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: hamza417 Products: hamza417/inure Problem Types: CWE-276 Description: A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a malicious app that hijacks the legitimate Inure app, intercepting and stealing sensitive information when installed on the victim's device.
ijacks the legitimate Inure app, intercepting and stealing sensitive information when installed on the victim's device. This issue affects all Android versions before Android 11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/2108644e-9e54-4236-932d-f204fc68b607 - https://github.com/hamza417/inure/commit/a0c3e68b0542bcd7007c93618e0d50a5331de061
CVE ID: CVE-2024-0246 State: PUBLISHED Published: 2024-01-05T14:00:05.753Z Last Updated: 2024-11-14T18:16:20.443Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: IceWarp Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"()%26%25<zzz><ScRiPt>alert(document.domain)</ScRiPt> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vul
the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249759. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249759 - https://vuldb.com/?ctiid.249759
CVE ID: CVE-2024-0247 State: PUBLISHED Published: 2024-01-05T19:00:04.541Z Last Updated: 2024-11-14T18:11:45.223Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CodeAstro Products: Online Food Ordering System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249778 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CV
the public and may be used. VDB-249778 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249778 - https://vuldb.com/?ctiid.249778 - https://drive.google.com/file/d/13xhOZ3Zg-XoviVC744PPDorTxYbLUgbv/view?usp=sharing
CVE ID: CVE-2024-0248 State: PUBLISHED Published: 2024-02-12T16:05:59.465Z Last Updated: 2025-05-07T20:52:15.342Z Vendors: Unknown Products: EazyDocs Problem Types: CWE-862 Missing Authorization Description: The EazyDocs WordPress plugin before 2.4.0 re-introduced CVE-2023-6029 (https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e/) in 2.3.8, allowing any authenticated users, such as subscriber to delete arbitrary posts, as well as add and delete documents/sections. The issue was partially fixed in 2.3.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/faf50bc0-64c5-4ccc-a8ac-e73ed44a74df/
CVE ID: CVE-2024-0249 State: PUBLISHED Published: 2025-05-15T20:09:29.403Z Last Updated: 2025-11-13T21:12:52.718Z Vendors: Unknown Products: Advanced Schedule Posts Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Advanced Schedule Posts WordPress plugin through 2.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e7ee3e73-1086-421f-b586-d415a45a6c8e/
CVE ID: CVE-2024-0250 State: PUBLISHED Published: 2024-02-12T16:05:58.073Z Last Updated: 2025-03-26T21:09:20.335Z Vendors: Unknown Products: Analytics Insights for Google Analytics 4 (AIWP) Problem Types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Description: The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3 is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Containe
essfully trick them into performing an action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/321b07d1-692f-48e9-a8e5-a15b38efa979/
CVE ID: CVE-2024-0251 State: PUBLISHED Published: 2024-01-13T07:35:21.276Z Last Updated: 2024-11-14T14:26:55.786Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mihail-barinov Products: Advanced Woo Search Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.96 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can succes
makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This only affects sites when the Dynamic Content for Elementor plugin is also installed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/91358e40-e64f-4e8e-b5a3-7d2133db5fe9?source=cve - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.94/includes/class-aws-integrations.php#L287 - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.94/includes/class-aws-integration
tions.php#L287 - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.94/includes/class-aws-integrations.php#L2170 - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.97/includes/class-aws-integrations.php#L2104