Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-49996 State: PUBLISHED Published: 2024-10-21T18:02:37.046Z Last Updated: 2025-11-03T20:42:50.666Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLength is sum of the InodeType size and DataBuffer size. So to get DataBuffer size it is needed to subtract InodeType's size from ReparseDataLength. Function cifs_strndup_from_utf16() is currentlly accessing buf->DataBuffer at position after the end of the buffer because it does not subtract InodeType size from the length. Fix this problem and correctly subtract variable len. Member InodeType is prese
subtract InodeType size from the length. Fix this problem and correctly subtract variable len. Member InodeType is present only when reparse buffer is large enough. Check for ReparseDataLength before accessing InodeType to prevent another invalid memory access. Major and minor rdev values are present also only when reparse buffer is large enough. Check for reparse buffer size before calling reparse_mkdev(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7b222d6cb87077faf56a687a72af1951cf78c8a9 - https://git.kernel.org/stable/c/73b078e3314d4854fd8286f3ba65c860ddd3a3dd - https://git.kernel.org/stable/c/01cdddde39b065074
s://git.kernel.org/stable/c/73b078e3314d4854fd8286f3ba65c860ddd3a3dd - https://git.kernel.org/stable/c/01cdddde39b065074fd48f07027757783cbf5b7d - https://git.kernel.org/stable/c/ec79e6170bcae8a6036a4b6960f5e7e59a785601 - https://git.kernel.org/stable/c/c6db81c550cea0c73bd72ef55f579991e0e4ba07 - https://git.kernel.org/stable/c/803b3a39cb096d8718c0aebc03fd19f11c7dc919 - https://git.kernel.org/stable/c/c173d47b69f07cd7ca08efb4e458adbd4725d8e9 - https://git.kernel.org/stable/c/e2a8910af01653c1c268984855629d71fb81f404
CVE ID: CVE-2024-49997 State: PUBLISHED Published: 2024-10-21T18:02:37.681Z Last Updated: 2025-11-03T22:24:14.583Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer. In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bi
. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions. Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/905f06a34f960676e7dc77bea00f2f8fe18177ad - https://git.kernel.org/stable/c/60c068444c20bf9a3e22b65b5f6f3d9edc852931 - https://git.kernel.org/stable/c/185df159843d30fb71f821e7ea4368c2a3bfcd36 - https://git.kernel.o
22b65b5f6f3d9edc852931 - https://git.kernel.org/stable/c/185df159843d30fb71f821e7ea4368c2a3bfcd36 - https://git.kernel.org/stable/c/469856f76f4802c5d7e3d20e343185188de1e2db - https://git.kernel.org/stable/c/2bf4c101d7c99483b8b15a0c8f881e3f399f7e18 - https://git.kernel.org/stable/c/e66e38d07b31e177ca430758ed97fbc79f27d966 - https://git.kernel.org/stable/c/1097bf16501ed5e35358d848b0a94ad2830b0f65 - https://git.kernel.org/stable/c/431b122933b197820d319eb3987a67d04346ce9e - https://git.kernel.org/stable/c/45c0de18ff2dc9af01236380404bbd6a46502c69
CVE ID: CVE-2024-49998 State: PUBLISHED Published: 2024-10-21T18:02:38.316Z Last Updated: 2025-11-24T09:49:35.851Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 problems during shutdown with the lan9303 driver. One is specific to lan9303 and the other just happens to reproduce there. The first problem is that lan9303 is unique among DSA drivers in that it calls dev_get_drvdata() at "arbitrary runtime" (not probe, not shutdown, not remove): phy_state_machine() -> ... -> dsa_user_phy_read() -> ds->ops->phy_read() -> lan9303_phy_read() -> chip->ops->phy_read() -> l
state_machine() -> ... -> dsa_user_phy_read() -> ds->ops->phy_read() -> lan9303_phy_read() -> chip->ops->phy_read() -> lan9303_mdio_phy_read() -> dev_get_drvdata() But we never stop the phy_state_machine(), so it may continue to run after dsa_switch_shutdown(). Our common pattern in all DSA drivers is to set drvdata to NULL to suppress the remove() method that may come afterwards. But in this case it will result in an NPD. The second problem is that the way in which we set dp->conduit->dsa_ptr = NULL; is concurrent with receive packet processing. dsa_switch_rcv() checks once whether dev->dsa_ptr is NULL, but afterwards, rather than continuing to use that non-NULL value, dev->dsa_ptr is deref
e whether dev->dsa_ptr is NULL, but afterwards, rather than continuing to use that non-NULL value, dev->dsa_ptr is dereferenced again and again without NULL checks: dsa_conduit_find_user() and many other places. In between dereferences, there is no locking to ensure that what was valid once continues to be valid. Both problems have the common aspect that closing the conduit interface solves them. In the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN event in dsa_user_netdevice_event() which closes user ports as well. dsa_port_disable_rt() calls phylink_stop(), which synchronously stops the phylink state machine, and ds->ops->phy_read() will thus no longer call into the driver
, which synchronously stops the phylink state machine, and ds->ops->phy_read() will thus no longer call into the driver after this point. In the second case, dev_close(conduit) should do this, as per Documentation/networking/driver.rst: | Quiescence | ---------- | | After the ndo_stop routine has been called, the hardware must | not receive or transmit any data. All in flight packets must | be aborted. If necessary, poll or wait for completion of | any reset commands. So it should be sufficient to ensure that later, when we zeroize conduit->dsa_ptr, there will be no concurrent dsa_switch_rcv() call on this conduit. The addition of the netif_device_detach() function is to ensure that ioctls,
ent dsa_switch_rcv() call on this conduit. The addition of the netif_device_detach() function is to ensure that ioctls, rtnetlinks and ethtool requests on the user ports no longer propagate down to the driver - we're no longer prepared to handle them. The race condition actually did not exist when commit 0650bf52b31f ("net: dsa: be compatible with masters which unregister on shutdown") first introduced dsa_switch_shutdown(). It was created later, when we stopped unregistering the user interfaces from a bad spot, and we just replaced that sequence with a racy zeroization of conduit->dsa_ptr (one which doesn't ensure that the interfaces aren't up). Additional Analyst Notes: - CISA ADP Vulnrich
conduit->dsa_ptr (one which doesn't ensure that the interfaces aren't up). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/87bd909a7014e32790e8c759d5b7694a95778ca5 - https://git.kernel.org/stable/c/2e93bf719462ac6d23c881c8b93e5dc9bf5ab7f5 - https://git.kernel.org/stable/c/ab5d3420a1120950703dbdc33698b28a6ebc3d23 - https://git.kernel.org/stable/c/b4a65d479213fe84ecb14e328271251eebe69492 - https://git.kernel.org/stable/c/6c24a03a61a245fe34d47582898331fa034b6ccd
CVE ID: CVE-2024-49999 State: PUBLISHED Published: 2024-10-21T18:02:38.958Z Last Updated: 2025-05-04T09:43:27.031Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afs_wait_for_operation(), we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's possible to exit the loop having had a response from the server that we've discarded (e.g. it returned an abort or we started receiving data, but the call didn't complete). This means that op->server might be NULL, but we don't check that before attempting to set
t the call didn't complete). This means that op->server might be NULL, but we don't check that before attempting to set the server flag. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3d51ab44123f35dd1d646d99a15ebef10f55e263 - https://git.kernel.org/stable/c/97c953572d98080c5f1486155350bb688041747a - https://git.kernel.org/stable/c/ff98751bae40faed1ba9c6a7287e84430f7dec64
CVE ID: CVE-2024-4000 State: PUBLISHED Published: 2024-05-02T16:52:34.856Z Last Updated: 2024-08-01T20:26:57.231Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: stylemix Products: WordPress Header Builder Plugin – Pearl Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stm_hb' shortcode in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attack
ient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c23bba83-35d2-4098-8104-8389bb2ff880?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3078437%40pearl-header-builder&new=3078437%40pearl-header-builder&sfp_email=&sfph_mail=
CVE ID: CVE-2024-4001 State: PUBLISHED Published: 2024-06-05T11:01:58.831Z Last Updated: 2024-08-01T20:26:57.221Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codename065 Products: Download Manager Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_modal_login_form' shortcode in all versions up to, and including, 3.2.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level
output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b478d88d-1423-4a33-b8ef-08b9e66a5d98?source=cve - https://plugins.trac.wordpress.org/changeset/3096459/
CVE ID: CVE-2024-4002 State: PUBLISHED Published: 2025-05-15T20:09:45.188Z Last Updated: 2025-11-13T21:01:57.544Z Vendors: Unknown Products: Carousel, Slider, Gallery by WP Carousel Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/298b51ec-afad-4bc1-968d-76c59e55fc05/
CVE ID: CVE-2024-4003 State: PUBLISHED Published: 2024-05-02T16:51:51.058Z Last Updated: 2024-08-01T20:26:57.273Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-20 Improper Input Validation Description: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_team_members_image_rounded parameter in the Team Members widget in all versions up to, and including, 5.9.15 due to insufficient input sanitization
arameter in the Team Members widget in all versions up to, and including, 5.9.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1cf3190c-e247-4bcc-99e0-2ab2d2fa0590?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3075644%40essential-addons-for-elementor-lite%2Ftrunk&old=3067596%40essential-addons-for-e
ail=&sfph_mail=&reponame=&new=3075644%40essential-addons-for-elementor-lite%2Ftrunk&old=3067596%40essential-addons-for-elementor-lite%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-4004 State: PUBLISHED Published: 2025-05-15T20:09:45.426Z Last Updated: 2025-11-13T21:01:34.495Z Vendors: Unknown Products: Advanced Cron Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Advanced Cron Manager WordPress plugin before 2.5.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8e5e7040-b824-4af7-90a1-90801d12abb6/
CVE ID: CVE-2024-4005 State: PUBLISHED Published: 2024-06-14T06:00:04.285Z Last Updated: 2025-03-13T21:21:59.391Z Vendors: Unknown Products: Social Pixel Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Social Pixel WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/02ca09f8-4080-4969-992d-0e6afb29bc62/
CVE ID: CVE-2024-4006 State: PUBLISHED Published: 2024-04-25T13:30:36.721Z Last Updated: 2024-09-17T15:48:59.440Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1 where personal access scopes were not honored by GraphQL subscriptions Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/455805
CVE ID: CVE-2024-4007 State: PUBLISHED Published: 2024-07-01T12:06:53.048Z Last Updated: 2024-08-01T20:26:57.247Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: ASPECT Enterprise (ASP-ENT-x), NEXUS Series (NEX-2x, NEXUS-3-x), MATRIX Series(MAT-x) Problem Types: CWE-1392 Description: Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A6101&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-4008 State: PUBLISHED Published: 2024-06-05T17:15:56.523Z Last Updated: 2025-09-17T05:33:02.694Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: ABB, Busch-Jaeger Products: 2.4! Display 55, SD/U12.55.11-825, 2.4! Display 55, SD/SD/U12.55.1-825, 2.4! Display 63, SD/U12.63.11-825, RoomTouch 4", RT/U12.86.1-825, RoomTouch 4", RT/U12.86.11-825, 2,4'' Display 70, SD/U12.70.11-4015, 2,4'' Display 70, SD-U12-70-1-4015, RoomTouch 4", RT/U12.86.11-811, RoomTouch 4", RT-U12-86-1-811, BCU KNX, BA-U1.0.11, BCU KNX, BA-U1.0.1, BCU KNX, BA-U1.0.21 Problem Types: CWE-497 Description: FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (ver
, BA-U1.0.21 Problem Types: CWE-497 Description: FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-4009 State: PUBLISHED Published: 2024-06-05T17:19:07.010Z Last Updated: 2025-03-27T20:31:09.386Z Severity: CRITICAL (CVSS 9.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: ABB, Busch-Jaeger Products: 2.4! Display 55, SD/U12.55.11-825, 2.4! Display 55, SD/SD/U12.55.1-825, 2.4! Display 63, SD/U12.63.11-825, RoomTouch 4", RT/U12.86.1-825, RoomTouch 4", RT/U12.86.11-825, 2,4'' Display 70, SD/U12.70.11-4015, 2,4'' Display 70, SD-U12-70-1-4015, RoomTouch 4", RT/U12.86.11-811, RoomTouch 4", RT-U12-86-1-811, BCU KNX, BA-U1.0.11, BCU KNX, BA-U1.0.1, BCU KNX, BA-U1.0.21 Description: Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allo
, BA-U1.0.21 Description: Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-4010 State: PUBLISHED Published: 2024-05-15T08:34:12.914Z Last Updated: 2024-08-01T20:26:57.257Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: icegram Products: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Problem Types: CWE-862 Missing Authorization Description: The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handle_ajax_request function in all versions up to, and including, 5.7.19. This makes it possible for authenticated attackers, with su
quest function in all versions up to, and including, 5.7.19. This makes it possible for authenticated attackers, with subscriber-level access and above, to cause a loss of confidentiality, integrity, and availability, by performing multiple unauthorized actions. Some of these actions could also be leveraged to conduct PHP Object Injection and SQL Injection attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/23bfcdd1-b99d-47eb-9f88-96f9ecc53b32?source=cve - https://plugins.trac.wordpress.org/changeset/3083762/email-subscribers
CVE ID: CVE-2024-4011 State: PUBLISHED Published: 2024-06-26T23:31:20.436Z Last Updated: 2025-01-09T21:38:32.388Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows non-project member to promote key results to objectives. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/457235 - https://hackerone.com/reports/2456186
CVE ID: CVE-2024-4012 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:55.569Z Description: No description available.
CVE ID: CVE-2024-4013 State: PUBLISHED Published: 2024-06-06T21:31:53.472Z Last Updated: 2024-08-01T20:26:57.298Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: silabs.com Products: Gecko SDK Problem Types: CWE-404 Description: A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection List (RPL) from RAM to NVM before powering down, resulting in the ability to replay unsaved messages. Note that as of June 2024, the Gecko SDK was renamed to the Simplicity SDK, and the versioning scheme was changed from Gecko SDK vX.Y.Z to Simplicity SDK YYYY.MM.Patch#. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
nged from Gecko SDK vX.Y.Z to Simplicity SDK YYYY.MM.Patch#. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.silabs.com/068Vm000006rR53 - https://github.com/SiliconLabs/gecko_sdk/releases
CVE ID: CVE-2024-4014 State: PUBLISHED Published: 2024-04-20T09:38:16.702Z Last Updated: 2024-08-01T20:26:57.258Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: hcaptcha Products: hCaptcha for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The hCaptcha for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cf7-hcaptcha shortcode in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level ac
tput escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5ce70e87-6dee-4d4a-b2fc-93fd4d50957d?source=cve - https://plugins.trac.wordpress.org/changeset/3072795/hcaptcha-for-forms-and-more/tags/4.0.1/src/php/CF7/CF7.php
CVE ID: CVE-2024-4017 State: PUBLISHED Published: 2024-04-19T20:40:25.256Z Last Updated: 2024-08-01T20:26:57.257Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: BeyondTrust Products: U-Series Appliance Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (filesystem modules) allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.beyondtrust.com/docs/release-notes/u-series-appliance/bt-appliance-u-series-software-4-0-3.htm
CVE ID: CVE-2024-4018 State: PUBLISHED Published: 2024-04-19T20:29:19.626Z Last Updated: 2024-08-01T20:26:57.247Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: BeyondTrust Products: U-Series Appliance Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (local appliance api modules) allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.beyondtrust.com/docs/release-notes/u-series-appliance/bt-appliance-u-series-software-4-0-3.htm