Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9d47df99-cff5-4be7-ab8e-ef333cf3755b?source=cve - https://plugins.trac.wordpress.org/browser/wpextended/trunk/admin/class-wp-extended-admin.php#L262 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ft
min.php#L262 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-8103 State: PUBLISHED Published: 2024-09-24T06:40:56.424Z Last Updated: 2024-09-24T13:48:31.693Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cguntur Products: WP Category Dropdown Problem Types: CWE-79 Description: The WP Category Dropdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analy
, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7c959f9c-8ac4-4f59-9d93-8f96e650b02d?source=cve - https://plugins.trac.wordpress.org/browser/wp-category-dropdown/trunk/category_dropdown_block.php#L8 - https://wordpress.org/plugins/wp-category-dropdown/#developers - https://plugins.trac.wordpress.org/browser/wp-category-dropdown/trunk/build/index.js#L270 - https://plugins.trac.wordpress.org/browser/wp-category-dropdown/trunk/src/index.js#L24 - https://plugins.trac.wordpress.org/browser/wp-category-dropdown/trunk/src/
wp-category-dropdown/trunk/src/index.js#L24 - https://plugins.trac.wordpress.org/browser/wp-category-dropdown/trunk/src/edit.js#L258
CVE ID: CVE-2024-8104 State: PUBLISHED Published: 2024-09-04T06:49:03.122Z Last Updated: 2024-09-04T14:14:30.782Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpextended Products: The Ultimate WordPress Toolkit – WP Extended Problem Types: CWE-22 Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0.8 via the download_file_ajax function. This makes it possible for authenticated attackers, with subscriber access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA AD
contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0fad1834-0ee1-4542-a5a7-55a32861c81d?source=cve - https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/libraries/wpext_export/wpext_export.php#L137 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-8105 State: PUBLISHED Published: 2024-08-26T19:15:11.237Z Last Updated: 2025-08-25T21:48:41.125Z Vendors: Acer, Aopen, Dell, Formelife, Gigabyte, Fujitsu, HP, Lenovo, Supermicro, Intel Products: vz2694g, aspire s 27, aspire s32-1856, aspire xc-1710, c24-1655, aspire c22-1600, c24-962, altos r680 f4, altos r680s f4, iAPLx-DE(TAA30 TEST), iKBLMUx-DER(Volta Charging), inspiron-15-3510-laptop, alienware-x17-r2-laptop, alienware-m17-r4-laptop, alienware-x14-r1-laptop, alienware-aurora-r15-amd-desktop, alienware-m17-r3-laptop, alienware-area51m-r2-laptop, alienware-x15-r1-laptop, inspiron-15-3521-laptop, alienware-aurora-r11-desktop, inspiron-15-3502-laptop, alienware-aurora-r13-d
re-x15-r1-laptop, inspiron-15-3521-laptop, alienware-aurora-r11-desktop, inspiron-15-3502-laptop, alienware-aurora-r13-desktop, xps-8950-desktop, alienware-aurora-r15-desktop, alienware-aurora-r14-desktop, alienware-aurora-r16-desktop, xps-8960-desktop, alienware-m15-r2-laptop, inspiron-17-3782-laptop, alienware-15-r4, inspiron-5680-gaming-desktop, alienware-17-laptop, alienware-13-laptop, inspiron-3472-desktop, alienware-17-r3, alienware-13-r2, vostro-24-5460-aio, inspiron-20-3059-aio, inspiron-24-5459-aio, inspiron-22-3263-desktop-aio, inspiron-3250-small-desktop, inspiron-24-3464-aio, inspiron-3662-desktop, alienware-13, inspiron-one-23-2330-aio, alienware-17-r2, poweredge-c5230, alienwar
n-24-3464-aio, inspiron-3662-desktop, alienware-13, inspiron-one-23-2330-aio, alienware-17-r2, poweredge-c5230, alienware-alpha, inspiron-15-5552-laptop, inspiron-3646-small-desktop, inspiron-24-3455-aio, vostro-20-3052-aio, vostro-3252-small-desktop, inspiron-3655-desktop, inspiron-22-3265-desktop-aio, inspiron-17-5755-laptop, inspiron-3656-desktop, vostro-20-3015-aio, Studio Sys UPD, E152-ZE1 (rev. A00), AU47 M1, PRIMERGY TX100 S3p, PRIMERGY CX270 S2, PRIMERGY CX420 S1 Chassis, PRIMERGY RX100 S7p, PRIMERGY TX120 S3p, G152-Z12, G242-Z11, G242-Z12, G262-ZR0, G292-Z20 (rev. A00), G292-Z43, G292-Z45, G482-Z50, G492-Z52, H252-Z12 (rev. A02), H262-Z61, H262-Z6B, H282-ZC0 (rev. A00), MZ32-AR0 (re
A00), G292-Z43, G292-Z45, G482-Z50, G492-Z52, H252-Z12 (rev. A02), H262-Z61, H262-Z6B, H282-ZC0 (rev. A00), MZ32-AR0 (rev. 3.x), MZ72-HB0 (rev. 3.x/4.x), MZ72-HB2 (rev. 3.x), R162-Z10, R162-ZA2, R182-Z90 (rev. A00/B00/AT0), R262-ZA2, R282-Z97 (rev. A00), S252-ZC0, ME03-CE0 (rev. 1.0), ME03-PE0 (rev. 1.x), ME33-AR0 (rev. 1.0), R143-EG0-AAC1, R243-E30-AAC1, G191-H44, G241-G40 (rev. 100), G291-2G0 (rev. 100), G591-HS0, H231-G20 (rev. 100/A00), H261-H61 (rev. 100), H261-NO0, H281-PE0, MD61-SC2 (rev. 1.x), MD71-HB0 (rev. 1.x), MD71-HB1 (rev. 1.x), MU71-SU0 (rev. 1.x), R161-340 (rev. 100/200), R281-3C1, R281-3C2, T181-G20 (rev. 1.0), MC13-LE0 (rev. 1.x/3.x), R123-C00, R133-C10 (rev. AAG1), G293-Z2
rev. 100/200), R281-3C1, R281-3C2, T181-G20 (rev. 1.0), MC13-LE0 (rev. 1.x/3.x), R123-C00, R133-C10 (rev. AAG1), G293-Z23, G293-Z42 (rev. IAP1), G363-ZR0, G493-ZB4 (rev. AAP1), G593-ZD1 (rev. AAX1), G593-ZD2 (rev. AAX1), G593-ZX1 (rev. AAX1), H223-Z10 (rev. AAP1), H233-Z80, H253-Z10, H273-Z80, MZ33-AR0 (rev. 1.x), MZ33-CP0 (rev. 1.x), MZ73-LM0 (rev. 2.x), MZ73-LM1 (rev. 1.x), R163-Z35 (rev. AAC1), R183-Z90 (rev. LAD1), R183-Z93 (rev. AAV1), R263-Z35 (rev. AAF1), R283-Z93, R283-Z97, R283-ZF0 (rev. IAL1), TO25-Z12 (rev. AA01), H223-V10, H263-V60, H263-V11, H263-V60 (rev. AAW1), E162-220, G262-IR0, G292-280, G492-ID0 (rev. 100), H252-3C0 (rev. 100), H262-PC0 (rev. 100), H262-PC1 (rev. 100), H26
), E162-220, G262-IR0, G292-280, G492-ID0 (rev. 100), H252-3C0 (rev. 100), H262-PC0 (rev. 100), H262-PC1 (rev. 100), H262-PC2, MD72-HB0 (rev. 1.x/2.0), MD72-HB1 (rev. 1.x), MD72-HB2 (rev. 1.x), MD72-HB3 (rev. 1.x), MU72-SU0 (rev. 1.x/2.x), MU92-TU0 (rev. 1.x), MU92-TU1 (rev. 1.x/2.x), R182-34A, R182-NA0, R182-NC0, R282-G30, G493-ZB1 (rev. AAP1), MZ33-AR0 (rev. 1.0), MZ73-LM0 (rev. 2.0), MZ73-LM1 (rev. 1.0), R263-Z34 (rev. AAH1), R263-Z35 (rev. AAL1), GA-H110M-DS2 (rev. 1.0/1.1/1.2), E251-U70 (rev. 100), G293-Z40, G493-ZB0 (rev. AAP1), R283-Z94, R283-ZF0 (rev. AAL1), MX34-BS0 (rev. 1.x), R123-X00 (rev. AA01), R162-ZA1, G242-Z10, MC12-LE0 (rev. 1.x), MW34-SP0 (rev. 1.0), E133-C10, E163-Z30, MC
0 (rev. 1.x), R123-X00 (rev. AA01), R162-ZA1, G242-Z10, MC12-LE0 (rev. 1.x), MW34-SP0 (rev. 1.0), E133-C10, E163-Z30, MC62-G41 (rev. 1.0), MX33-BS0 (rev. 1.x), MC13-LE0 (rev. 1.x), R263-Z33 (rev. AAL1), R133-X13 (rev. AAB1), B760M D2HX LITE SI (rev. 1.0), GB-BER7-7840, R163-Z32 (rev. AAG1), MD72-HB2 (rev. 1.x/2.x), GA-H310MSTX-HD3, GA-H310TN-CM, GA-H310TN-R2 (rev. 1.0), H310N, R143-E30 (rev. AAB1), TO25-Z11, G293-S46 (rev. AAM1), R163-S35 (rev. AAH1), R283-S94, TO25-S11 (rev. AA01), G482-Z54, R183-S90 (rev. LAD1), MX34-BS0 (rev. 1.0), G293-S45, R163-S30 (rev. AAB1), R133-X11 (rev. AAG1), E283-Z91 (rev. AAV1), R143-EG0 (rev. AAC1), GB-BEi3-1220 (rev. 1.0), GB-BEi5-1240 (rev. 1.0), GB-BEi7-126
1 (rev. AAG1), E283-Z91 (rev. AAV1), R143-EG0 (rev. AAC1), GB-BEi3-1220 (rev. 1.0), GB-BEi5-1240 (rev. 1.0), GB-BEi7-1260 (rev. 1.0), E283-S90 (rev. AAD1), G493-SB0, H263-S62, R163-SG0 (rev. AAC1), S453-S70, E163-S30 (rev. AAB1), G293-Z20, TO15-Z40, E133-C10 (rev. AAA1), R271-Z00 (rev. B00), ME03-PE0 (rev. 1.0), GA-H110M-DS2 (rev. 1.3), GA-H110M-H, E152-ZE0, R282-Z93 (rev. A00), R162-ZA0 (rev. A00), S453-Z30, G262-ZO0, H262-Z6A, MZ72-HB0 (rev. 3.0/4.0), MZ72-HB2 (rev. 3.0), G152-Z12 (rev. 200), G292-Z40, H242-Z10 (rev. A00), R152-Z30, GB-BSi3-6100 (rev. 1.0), E283-Z90, R163-Z30 (rev. AAB1), G262-IR0 (rev. 100), G292-280 (rev. 100), G492-H80, H262-NO0, H262-NO1, R182-340 (rev. 100), G291-280,
-Z30 (rev. AAB1), G262-IR0 (rev. 100), G292-280 (rev. 100), G492-H80, H262-NO0, H262-NO1, R182-340 (rev. 100), G291-280, G481-H80 (rev. 100), H231-H60 (rev. 100/A00), R181-2A0 (rev. 100), S251-3O0 (rev. 100), S451-3R0, WRX80-SU8-IPMI (rev. 1.0), R292-4S0, R283-Z93 (rev. AAF1), GB-BNE3HG4-950 (rev. 1.0), R161-R12, GB-BXBT-2807, MB12-CE0 (rev. 100), R263-Z30 (rev. AAC1), TO23-H60, GB-BRR7-4700, GB-BRR7-4800, GB-BRR3-4300 (rev. 1.0), GB-BRR5-4500 (rev. 1.0), W771-Z00 (rev. 100), MB51-PS0 (rev. 1.0), X299 UD4 Pro (rev. 1.0), G492-ZD2 (rev. A00), MW22-SE0 (rev. 1.0), MX32-4L0 (rev. 1.0), MW32-SP0 (rev. 1.0), MX32-BS0 (rev. 1.0), GB-BER3-5300, GB-BER3-5400, GB-BER5-5500 (rev. 1.0), GB-BER5-5600, G
ev. 1.0), MW32-SP0 (rev. 1.0), MX32-BS0 (rev. 1.0), GB-BER3-5300, GB-BER3-5400, GB-BER5-5500 (rev. 1.0), GB-BER5-5600, GB-BER7-5700, GB-BER7-5800, GB-BMCE-4500C, GB-BMCE-5105, GB-BMPD-6005, GB-BRi3-10110 (rev. 1.0), GB-BRi7-10510 (rev. 1.0), MF51-ES1 (rev. 1.0), MF51-ES0 (rev. 1.0), MF51-ES2 (rev. 1.0), G492-Z50 (rev. A00), GA-J1800M-D3P (rev. 1.x), GB-BSRE-1505 (rev. 1.0), GB-BSi3-1115G4 (rev. 1.0), GB-BSi5-1135G7, GB-BSi7-1165G7, GA-H110M-S2PH, GA-H110M-S2PV, G292-Z20 (rev. 100), W331-Z00 (rev. 100), X299 AORUS Gaming, X299 AORUS Gaming 3, X299 AORUS Gaming 3 Pro, X299 AORUS Gaming 7 (rev. 1.0), X299 AORUS Gaming 7 Pro (rev. 1.0), X299 AORUS Gaming 9 (rev. 1.0), X299 AORUS MASTER, X299 AOR
RUS Gaming 7 (rev. 1.0), X299 AORUS Gaming 7 Pro (rev. 1.0), X299 AORUS Gaming 9 (rev. 1.0), X299 AORUS MASTER, X299 AORUS Ultra Gaming (rev. 1.0), X299 AORUS Ultra Gaming Pro (rev. 1.0), X299 DESIGNARE EX (rev. 1.0), X299 UD4 (rev. 1.0), X299 UD4 EX (rev. 1.0), X299-WU8, H261-Z60, MZ71-CE0 (rev. 3.x/4.x), G292-Z40 (rev. 100), G182-C20, R162-ZA0 (rev. 100), MZ72-HB0 (rev. 1.x), G221-Z30, G291-Z20 (rev. A00), MZ71-CE0 (rev. 1.x), R181-Z90, R271-Z00 (rev. A00), T181-Z70 (rev. A00), GB-BRi7-10710 (rev. 1.0), GB-BRi5-10210(E), G492-ZD0, G292-Z46, R282-Z90 (rev. A00), R282-Z96 (rev. 100), G482-Z50 (rev. 100), GA-H61M-S, G492-ZD0 (rev. 100), W281-G40, MW51-HP0 (rev. 1.x), G482-Z53, G482-Z54 (rev.
rev. 100), G482-Z50 (rev. 100), GA-H61M-S, G492-ZD0 (rev. 100), W281-G40, MW51-HP0 (rev. 1.x), G482-Z53, G482-Z54 (rev. 100), GB-BXi5-4570R, C621 AORUS XTREME (rev. 1.0), MJ11-EC0 (rev. 1.2), GA-E6010N (rev. 1.0), GB-BACE-3000, G291-Z20 (rev. 100), H261-Z60 (rev. 100), R181-Z90 (rev. 100), H261-T60 (rev. 100), GB-BSi7HT-6500, C621-SD8, C621-SU8 (rev. 1.0), GB-BSRE-1605 (rev. 1.0), GA-Z170X-Gaming G1 (rev. 1.0), C621-WD12-IPMI (rev. 1.0), C621-WD12, GA-Z77X-D3H, GA-J1900N-D3V (rev. 1.x), G211-H4G, MW21-SE0 (rev. 1.0), MW31-SP0 (rev. 1.0), R121-340, R121-X30 (rev. 100), W131-X30, G292-Z42 (rev. 100), G180-G00 (rev. 100), G190-G30, G190-H44, G250-G50 (rev. 400), G250-G51 (rev. 400), H230-R4C (r
X30, G292-Z42 (rev. 100), G180-G00 (rev. 100), G190-G30, G190-H44, G250-G50 (rev. 400), G250-G51 (rev. 400), H230-R4C (rev. 100), H23N-H60, H23N-R4O, H270-F4G (rev. 100), H270-H70 (rev. 100), MD30-RS0 (rev. 1.0), MD60-SC0 (rev. 1.1), MD60-SC1 (rev. 1.1), MD70-HB1 (rev. 1.2), MD70-HB2 (rev. 1.0), MD80-TM0 (rev. 1.0), MD80-TM1 (rev. 1.0), MU70-SU0 (rev. 1.0), MW50-SV0 (rev. 1.0), MW70-3S0 (rev. 1.0), R180-F28 (rev. 152), R260-R3C, R270-R3C (rev. 143), R280-G2O, D120-C20 (rev. 230), G150-B10 (rev. 111), G482-Z51 (rev. 100), MB10-DS0 (rev. 1.3), MZAPLAI (rev. 1.0), GB-BPCE-3350 (rev. 1.0), GB-BPCE-3350C (rev. 1.0), GB-BPCE-3455, GB-BPCE-3455C, GB-EACE-3450, GB-EAPD-4200, GA-IMB1900N, GA-IMB1900T
(rev. 1.0), GB-BPCE-3350C (rev. 1.0), GB-BPCE-3455, GB-BPCE-3455C, GB-EACE-3450, GB-EAPD-4200, GA-IMB1900N, GA-IMB1900TN (rev. 1.0), W42G-P08R, MA10-ST0 (rev. 1.1), MDH11HI (rev. 1.0), GB-GZ1DTi7-1070-NK (rev. 1.0), S12-P04R (rev. 1.0), R272-Z30 (rev. 100), GB-BNi7HG4-1050Ti (rev. 1.0), GB-GZ1DTi5K (rev. 1.0), R160-S34, R181-T90 (rev. 100), MDH11BM (rev. 1.0), MDH11JI (rev. 1.0), MDH11KI (rev. 1.0), MDH11TI (rev. 1.0), MFH27AI (rev. 1.0), J4105N H, GA-N3160N-D2H, GB-BRi5-8250, GA-SBC4100 (rev. 1.0), GB-BRi7-8550 (rev. 1.0), GB-BKi5A-7200 (rev. 1.0), GB-BKi7A-7500, GB-BNi5HG6-1060, GB-BNi7G4-1050Ti, GB-BNi7HG6-1060 (rev. 1.0), GB-BKi3A-7100 (rev. 1.0), GB-EKi3A-7100, GB-EKi3M-7100, GB-BKi5HT
G6-1060, GB-BNi7G4-1050Ti, GB-BNi7HG6-1060 (rev. 1.0), GB-BKi3A-7100 (rev. 1.0), GB-EKi3A-7100, GB-EKi3M-7100, GB-BKi5HT-7200 (rev. 1.0), GB-BKi5HT2-7200 (rev. 1.0), GB-BKi7HT-7500, GB-BKi7HT2-7500 (rev. 1.0), GB-BRi3-8130, iTXL-Q170A, GB-BSi7A-6600 (rev. 1.0), GB-BSi5HT-6200 (rev. 1.0), GB-BNi7HG4-950, GB-BNi7QG4-950 (rev. 1.0), GA-J1800N-D2H (rev. 1.x), GB-BACE-3150, GB-BSi7H-6500-LA-IW (rev. 1.0), GA-IMB4100TN, GA-N3160M-D3P, GB-BNi7G4-950 (rev. 1.0), GB-BSCE-3955, GB-BSCEA-3955, GB-BSi7A-6500 (rev. 1.0), GB-BNi5HG4-950, GB-BSI3H-6100-ZA-IWUS (rev. 1.0), GB-BSi3A-6100 (rev. 1.0), GB-BSi5-6200 (rev. 1.0), GB-BSi5A-6200, GB-BSi5A-6300 (rev. 1.0), GB-BSi5H-6200-B2-IW (rev. 1.0), GB-BSi7-6500
ev. 1.0), GB-BSi5-6200 (rev. 1.0), GB-BSi5A-6200, GB-BSi5A-6300 (rev. 1.0), GB-BSi5H-6200-B2-IW (rev. 1.0), GB-BSi7-6500, GB-BACE-3150-FT-BW (rev. 1.0), GB-BACE-3000-FT-BW (rev. 1.0), GA-7PXSL1 (rev. 1.0), GA-X99-Gaming 5 (rev. 1.0), GA-X99-Gaming 5P, GA-X99-Gaming 7 WIFI (rev. 1.0), GA-X99-Gaming G1 WIFI (rev. 1.0), GA-X99-Phoenix SLI, GA-X99-SOC Champion, GA-X99-UD4, GA-X99-UD5 WIFI, GA-X99-UD7 WIFI, GA-X99-Ultra Gaming, GA-X99M-Gaming 5 (rev. 1.0), GA-X99-Designare EX, GA-X99-SLI, GA-X99-SOC Force, GA-X99-UD3, GA-X99-UD3P (rev. 1.0), GA-X99-UD4P (rev. 1.0), GB-BACE-3160, GA-B150N-GSM, MVBAYAI (rev. 1.0), MZBAYAC (rev. 1.0), MZBAYAD (rev. 1.0), MZBAYAG (rev. 1.0), MZBAYAI (rev. 1.0), MZBAY
GA-B150N-GSM, MVBAYAI (rev. 1.0), MZBAYAC (rev. 1.0), MZBAYAD (rev. 1.0), MZBAYAG (rev. 1.0), MZBAYAI (rev. 1.0), MZBAYVA (rev. 1.2), GA-H110M-S2H DDR3, GA-H110M-HD2 (rev. 1.0), GA-H110N, GA-H110-D3A (rev. 1.0), GA-H110M-A, GA-H110M-S2H, GA-X150M-PLUS WS, GA-B150M-D3H (rev. 1.0), GA-H110-D3, GA-H110M-D3H R2 (rev. 1.0), GA-H110M-DS2V (rev. 1.0), GA-H110M-Gaming 3 (rev. 1.0), GA-H110M-S2 (rev. 1.x), GA-H110M-WW, GA-P110-D3, GA-H110M-DS2V DDR3 (rev. 1.0), MZBSWAI (rev. 1.0), GA-H110M-M.2, GA-H110M-S2PT, GA-H110M-S2V, GA-H110MSTX-HD3 (rev. 1.0), GA-H110TN (rev. 1.0), GA-X150-PLUS WS (rev. 1.0), GA-J1800M-D2P, GA-J1800M-D2P-IN (rev. 1.1), GA-J1800N-D2P (rev. 1.0), GA-J1800N-D2PH (rev. 1.1), GA-J
LUS WS (rev. 1.0), GA-J1800M-D2P, GA-J1800M-D2P-IN (rev. 1.1), GA-J1800N-D2P (rev. 1.0), GA-J1800N-D2PH (rev. 1.1), GA-J1800N-H, GA-J1900M-D2P (rev. 1.1), GA-J1900M-D3P, GA-J1900N-D2H, GA-6LASL (rev. 1.0), GA-6LISL (rev. 1.1), GA-X99P-SLI, G1.Sniper B7, G1.Sniper M7 (rev. 1.0), G1.Sniper Z170 (rev. 1.0), GA-B150-HD3 (rev. 1.0), GA-B150-HD3 DDR3, GA-B150-HD3P, GA-B150M-D2V, GA-B150M-D2V DDR3 (rev. 1.0), GA-B150M-D3H DDR3, GA-B150M-D3V, GA-B150M-DS3H (rev. 1.0), GA-B150M-DS3H DDR3, GA-B150M-DS3P, GA-B150M-Gaming (rev. 1.0), GA-B150M-HD3, GA-B150M-HD3 DDR3, GA-B150N Phoenix (rev. 1.0), GA-B150N Phoenix-WIFI (rev. 1.0), GA-H110M-D3H (rev. 1.0), GA-H110M-D3H R2 TPM (rev. 1.0), GA-H110M-DS2 DDR3 (
ev. 1.0), GA-B150N Phoenix-WIFI (rev. 1.0), GA-H110M-D3H (rev. 1.0), GA-H110M-D3H R2 TPM (rev. 1.0), GA-H110M-DS2 DDR3 (rev. 1.0), GA-H110M-H DDR3, GA-H110M-HD3 DDR3, GA-H110M-S2 DDR3, GA-H110M-S2HP (rev. 1.0), GA-H110M-S2PH DDR3, GA-H110M-S2PV DDR3, GA-H110M-S2V DDR3 (rev. 1.0), GA-H110TN-E, GA-H110TN-M, GA-H170-D3H (rev. 1.0), GA-H170-D3HP (rev. 1.0), GA-H170-Designare (rev. 1.0), GA-H170-Gaming 3, GA-H170-Gaming 3 DDR3 (rev. 1.0), GA-H170-HD3, GA-H170-HD3 DDR3, GA-H170M-D3H, GA-H170M-D3H DDR3, GA-H170M-DS3H, GA-H170M-HD3 DDR3, GA-H170N-WIFI, GA-Z170-D3H, GA-Z170-Gaming K3 (rev. 1.0), GA-Z170-HD3 (rev. 1.0), GA-Z170-HD3 DDR3 (rev. 1.0), GA-Z170-HD3P, GA-Z170M-D3H (rev. 1.0), GA-Z170M-D3H D
3 (rev. 1.0), GA-Z170-HD3 (rev. 1.0), GA-Z170-HD3 DDR3 (rev. 1.0), GA-Z170-HD3P, GA-Z170M-D3H (rev. 1.0), GA-Z170M-D3H DDR3 (rev. 1.0), GA-Z170MX-Gaming 5, GA-Z170N-Gaming 5 (rev. 1.0), GA-Z170N-WIFI, GA-Z170X-Designare, GA-Z170X-Gaming 3 (rev. 1.0), GA-Z170X-Gaming 5 (rev. 1.0), GA-Z170X-Gaming 6, GA-Z170X-Gaming 7, GA-Z170X-Gaming GT, GA-Z170X-SOC FORCE, GA-Z170X-UD3 (rev. 1.0), GA-Z170X-UD3 Ultra (rev. 1.0), GA-Z170X-UD5, GA-Z170X-UD5 TH (rev. 1.0), GA-Z170X-Ultra Gaming (rev. 1.0), GA-Z170XP-SLI, GB-BXBT-1900, GA-N3160N-D3V (rev. 1.0), J4005N D2P, GB-BACE-3010 (rev. 1.0), GA-N3050M-D3P (rev. 1.0), GA-N3050N-D2P (rev. 1.0), GA-N3050N-D3H (rev. 1.0), GA-N3150M-D3P, GA-N3150N-D2H (rev. 1.0)
), GA-N3050M-D3P (rev. 1.0), GA-N3050N-D2P (rev. 1.0), GA-N3050N-D3H (rev. 1.0), GA-N3150M-D3P, GA-N3150N-D2H (rev. 1.0), GA-N3150N-D3V (rev. 1.0), GA-N3160TN (rev. 1.0), GA-B150M-D3V DDR3, GA-X150-PRO ECC, GA-X150M-PRO ECC (rev. 1.0), GA-X170-EXTREME ECC, GA-H170TN, GA-9SISL (rev. 1.2), GA-B75M-S (rev. 1.0), GA-Z68MX-UD2H-B3, GA-Z68X-UD3P-B3, EL-30 (rev. 1.0), GA-H61M-S2PV (rev. 2.3), GB-BXi7-4770R (rev. 1.0), R130-134, R270-D70, P15F R5, EL-20-3060-32G (rev. 1.0), MP30-AR1 (rev. 1.1), GB-KMA1 (rev. 1.0), GA-6LXGH (rev. 1.0), GA-6LXGL (rev. 1.0), GB-BXi3-4010 (rev. 1.0), GA-Z68X-UD3H-B3, GB-BXBT-3825 (rev. 1.0), GA-X99M-Gaming 5 (rev. 1.1), G210-H4G (rev. 100), MSQ77DI (rev. 1.1), GB-KMA3 (
A-Z68X-UD3H-B3, GB-BXBT-3825 (rev. 1.0), GA-X99M-Gaming 5 (rev. 1.1), G210-H4G (rev. 100), MSQ77DI (rev. 1.1), GB-KMA3 (rev. 1.0), M9M3XAI (rev. 1.0), GB-BXCE-3205, GB-BXi7-5500, GA-B85TN, GA-H81TN, GA-H87TN (rev. 1.0), GA-Q87TN (rev. 1.0), GB-BXi3-5010 (rev. 1.0), GB-BXi5-5200, MATMH81 (rev. 1.0), MZJ19AI (rev. 1.0), GA-H97TN (rev. 1.0), U21M, GB-BXPi3-4010 (rev. 1.0), GB-SIOPS-J1900 (rev. 1.0), GB-TCV2A (rev. 1.0), MQHUDVI (rev. 1.0), GB-SIOPS-4550U (rev. 1.0), GB-BXCE-2955 (rev. 1.0), GB-BXi5-4200 (rev. 1.0), GB-BXi7-4500 (rev. 1.0), GA-H61M-S1, GB-BXi5G-760 (rev. 1.0), GB-BXi5G3-760 (rev. 1.0), GB-BXi7G3-760, GA-6LXSL (rev. 1.0), GA-6LXSG (rev. 1.0), GA-6LASH (rev. 1.0), GA-Z77X-UP5 TH (
GB-BXi5G3-760 (rev. 1.0), GB-BXi7G3-760, GA-6LXSL (rev. 1.0), GA-6LXSG (rev. 1.0), GA-6LASH (rev. 1.0), GA-Z77X-UP5 TH (rev. 1.0), GA-6LXSV (rev. 1.2), MSH87FI (rev. 1.0), GA-B75M-D3V, MSH61DI (rev. 1.2), GB-XM12-3227 (rev. 1.0), GA-H77M-D3H (rev. 1.0), GA-F2A85XM-D3H, GA-H77-D3H, GA-H77-D3H-MVP (rev. 1.0), GA-Z77-D3H, GA-Z77MX-D3H, GA-Z77MX-D3H TH (rev. 1.0), GA-Z77X-D3H (rev. 1.0), GA-Z77X-UD3H, GA-Z77X-UD3H (rev. 1.0), GA-Z77M-D3H, GA-Z77M-D3H-MVP (rev. 1.0), GA-B75M-D2V (rev. 1.0), GA-B75M-HD3 (rev. 1.0), GA-B75N (rev. 1.0), GA-H77-DS3H (rev. 1.0), GA-Z77-DS3H (rev. 1.0), GA-B75-D3V (rev. 1.0), GA-B75M-D3H (rev. 1.0), GA-B75M-D3V (rev. 1.0), GA-P75-D3 (rev. 1.0), GA-P75-D3P, GA-F2A55M-DS
), GA-B75-D3V (rev. 1.0), GA-B75M-D3H (rev. 1.0), GA-B75M-D3V (rev. 1.0), GA-P75-D3 (rev. 1.0), GA-P75-D3P, GA-F2A55M-DS2 (rev. 1.0), GA-E350N WIN8 (rev. 1.0), GA-H77N-WIFI, GA-6UASV3 (rev. 1.0), GA-H61TN (rev. 1.1), GA-B75TN, GA-H77TN, GA-Z77N-WIFI, G1.Sniper M3, GA-H61M-S2P-R3 (rev. 3.0), GA-Z68X-UD3-B3, GA-P67-DS3-B3, GA-P67X-UD3-B3, GA-P67X-UD3R-B3 (rev. 1.0), GA-Z68MA-D2H-B3 (rev. 1.0), GA-P67A-D3-B3, GA-P67A-UD3-B3 (rev. 1.x), GA-Z68X-UD3R-B3, GA-Z68X-UD4-B3 (rev. 1.0), GA-Z68XP-UD3-iSSD (rev. 1.0), GA-Z68XP-UD3P (rev. 1.0), GA-Z68XP-UD3R (rev. 1.0), GA-Z68P-DS3 (rev. 2.0), GA-Z68XP-D3 (rev. 1.0), GA-Z68A-D3-B3 (rev. 1.0), GA-Z68A-D3H-B3 (rev. 1.0), GA-Z68AP-D3, GA-Z68M-D2H, GA-Z68XP-U
2.0), GA-Z68XP-D3 (rev. 1.0), GA-Z68A-D3-B3 (rev. 1.0), GA-Z68A-D3H-B3 (rev. 1.0), GA-Z68AP-D3, GA-Z68M-D2H, GA-Z68XP-UD3, GA-Z68XP-UD4 (rev. 1.0), GA-C1007UN (rev. 1.0), GA-C1007UN-D (rev. 1.0), GA-H77M-HD3, G1.Sniper 3 (rev. 1.0), GA-6UASL3 (rev. 1.x/2.x), GA-Z77X-UD4H, GA-Q77M-D2H (rev. 1.0), GA-Z77-HD4, GA-Z77-HD3, GA-Z77P-D3, GA-Z77X-UP4 TH (rev. 1.0), Q1742F, GA-6UASL1 (rev. 1.0), Q2542N, hp-proone-400-g1-19.5-inch-non-touch-all-in-one-pc, hp-rp5-retail-system-model-5810, hp-z1-all-in-one-g2-workstation, hp-z228-microtower-workstation, hp-z820-workstation, hp-z420-workstation, hp-z1-all-in-one-workstation, hp-z220-convertible-minitower-workstation, hp-prodesk-400-g1-microtower-pc, hp-
rkstation, hp-z1-all-in-one-workstation, hp-z220-convertible-minitower-workstation, hp-prodesk-400-g1-microtower-pc, hp-prodesk-600-g1-desktop-mini-pc, hp-compaq-elite-8380-convertible-minitower-pc, hp-elitedesk-705-g1-desktop-mini-pc, hp-compaq-pro-6305-microtower-pc, hp-elitedesk-800-g1-tower-pc, lenovo-10w-type-82st-82su, thinkcentre-edge-62z, thinkcentre-m72z, thinkcentre-edge-92z, thinkcentre-m62z, lenovo-62-desktop, aio-510-22asr, aio-300-22isu, lenovo-c460-all-in-one, lenovo-c365-all-in-one, lenovo-erazer-x700-desktop, lenovo-h520e-desktop, Multiple Problem Types: CWE-321: Use of Hard-coded Cryptographic Key Description: A vulnerability related to the use an insecure Platform Key (PK)
E-321: Use of Hard-coded Cryptographic Key Description: A vulnerability related to the use an insecure Platform Key (PK) has been discovered. An attacker with the compromised PK private key can create malicious UEFI software that is signed with a trusted key that has been compromised. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://uefi.org/specs/UEFI/2.9_A/32_Secure_Boot_and_Driver_Signing.html - https://www.binarly.io/advisories/brly-2024-005 - https://kb.cert.org/vuls/id/455367 - https://github.com/binarly-io/Vulnerability-REsearch/blob/main/PKfail/BRLY-2024-005.md - https://www.supermicro.com/en/support/security_PKFAIL_Jul_2024 - https://
y-REsearch/blob/main/PKfail/BRLY-2024-005.md - https://www.supermicro.com/en/support/security_PKFAIL_Jul_2024 - https://www.intel.com/content/www/us/en/security-center/announcement/intel-security-announcement-2024-07-25-001.html - https://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FJ-ISS-2024-072412-Security-Notice.pdf - https://www.gigabyte.com/us/Support/Security/2205
CVE ID: CVE-2024-8106 State: PUBLISHED Published: 2024-09-04T06:49:04.798Z Last Updated: 2024-09-04T14:13:01.800Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wpextended Products: The Ultimate WordPress Toolkit – WP Extended Problem Types: CWE-200 Description: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.8 via the download_user_ajax function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including usernames, hashed passwords, and emails. Additional Analyst Notes: - CISA A
d above, to extract sensitive data including usernames, hashed passwords, and emails. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/593eb5bc-59f9-4944-b147-4ba66d49abe6?source=cve - https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_export_users/wpext_export_users.php#L54 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail=