Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-125069 State: PUBLISHED Published: 2023-01-08T10:29:51.522Z Last Updated: 2024-08-06T14:10:56.668Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: saxman Products: maps-js-icoads Problem Types: CWE-548 Description: A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The name of the patch is 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217644. Additional Ana
It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217644. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217644 - https://vuldb.com/?ctiid.217644 - https://github.com/saxman/maps-js-icoads/commit/34b8b0cce2807b119f4cffda2ac48fc8f427d69a
CVE ID: CVE-2014-125070 State: PUBLISHED Published: 2023-01-08T17:17:16.258Z Last Updated: 2024-08-06T14:10:56.617Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: yanheven Products: console Problem Types: CWE-79 Description: A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function get_zone_hosts/AvailabilityZonesTable of the file openstack_dashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can be launched remotely. The patch is named ba908ae88d5925f4f6783eb234cc4ea95017472b. It is recommended to apply a patch to fix this issue. The associated identifier
a908ae88d5925f4f6783eb234cc4ea95017472b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217651. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217651 - https://vuldb.com/?ctiid.217651 - https://github.com/yanheven/console/commit/ba908ae88d5925f4f6783eb234cc4ea95017472b
CVE ID: CVE-2014-125071 State: PUBLISHED Published: 2023-01-09T20:45:48.967Z Last Updated: 2024-11-25T16:38:47.939Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: lukehutch Products: Gribbit Problem Types: CWE-1385 Description: A vulnerability was found in lukehutch Gribbit. It has been classified as problematic. Affected is the function messageReceived of the file src/gribbit/request/HttpRequestHandler.java. The manipulation leads to missing origin validation in websockets. The name of the patch is 620418df247aebda3dd4be1dda10fe229ea505dd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217716. Additional A
. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217716. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217716 - https://vuldb.com/?ctiid.217716 - https://github.com/lukehutch/gribbit/commit/620418df247aebda3dd4be1dda10fe229ea505dd
CVE ID: CVE-2014-125072 State: PUBLISHED Published: 2023-01-09T21:12:12.422Z Last Updated: 2024-08-06T14:10:56.644Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: CherishSin Products: klattr Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in CherishSin klattr. This affects an unknown part. The manipulation leads to sql injection. The patch is named f8e4ecfbb83aef577011b0b4aebe96fb6ec557f1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217719. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217719 - https://vuldb.com/
7719. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217719 - https://vuldb.com/?ctiid.217719 - https://github.com/CherishSin/klattr/commit/f8e4ecfbb83aef577011b0b4aebe96fb6ec557f1
CVE ID: CVE-2014-125073 State: PUBLISHED Published: 2023-01-10T15:45:08.488Z Last Updated: 2024-11-25T16:37:28.573Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: mapoor Products: voteapp Problem Types: CWE-89 Description: A vulnerability was found in mapoor voteapp. It has been rated as critical. Affected by this issue is the function create_poll/do_poll/show_poll/show_refresh of the file app.py. The manipulation leads to sql injection. The patch is identified as b290c21a0d8bcdbd55db860afd3cadec97388e72. It is recommended to apply a patch to fix this issue. VDB-217790 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program
to fix this issue. VDB-217790 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217790 - https://vuldb.com/?ctiid.217790 - https://github.com/mapoor/voteapp/commit/b290c21a0d8bcdbd55db860afd3cadec97388e72
CVE ID: CVE-2014-125074 State: PUBLISHED Published: 2023-01-11T14:53:18.597Z Last Updated: 2024-08-06T14:10:56.647Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Nayshlok Products: Voyager Problem Types: CWE-89 Description: A vulnerability was found in Nayshlok Voyager. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Voyager/src/models/DatabaseAccess.java. The manipulation leads to sql injection. The identifier of the patch is f1249f438cd8c39e7ef2f6c8f2ab76b239a02fae. It is recommended to apply a patch to fix this issue. The identifier VDB-218005 was assigned to this vulnerability. Additional Analyst
ded to apply a patch to fix this issue. The identifier VDB-218005 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218005 - https://vuldb.com/?ctiid.218005 - https://github.com/Nayshlok/Voyager/commit/f1249f438cd8c39e7ef2f6c8f2ab76b239a02fae
CVE ID: CVE-2014-125075 State: PUBLISHED Published: 2023-01-11T18:19:23.192Z Last Updated: 2024-08-06T14:10:56.588Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: gmail-servlet Problem Types: CWE-89 Description: A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the file src/Model.java. The manipulation leads to sql injection. The identifier of the patch is 5d72753c2e95bb373aa86824939397dc25f679ea. It is recommended to apply a patch to fix this issue. The identifier VDB-218021 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https:
r VDB-218021 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218021 - https://vuldb.com/?ctiid.218021 - https://github.com/ChrisMcMStone/gmail-servlet/commit/5d72753c2e95bb373aa86824939397dc25f679ea
CVE ID: CVE-2014-125076 State: PUBLISHED Published: 2023-01-11T18:20:57.332Z Last Updated: 2024-08-06T14:10:56.662Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NoxxieNl Products: Criminals Problem Types: CWE-89 Description: A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of the file ingame/roulette.php. The manipulation of the argument gambleMoney leads to sql injection. The patch is identified as 0a60b31271d4cbf8babe4be993d2a3a1617f0897. It is recommended to apply a patch to fix this issue. VDB-218022 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Pro
atch to fix this issue. VDB-218022 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218022 - https://vuldb.com/?ctiid.218022 - https://github.com/NoxxieNl/Criminals/commit/0a60b31271d4cbf8babe4be993d2a3a1617f0897
CVE ID: CVE-2014-125077 State: PUBLISHED Published: 2023-01-15T08:58:03.618Z Last Updated: 2024-08-06T14:10:56.674Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: pointhi Products: searx_stats Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in pointhi searx_stats. This issue affects some unknown processing of the file cgi/cron.php. The manipulation leads to sql injection. The patch is named 281bd679a4474ddb222d16c1c380f252839cc18f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218351. Additional Analyst Notes: - CVE Program Container: Referenc
e associated identifier of this vulnerability is VDB-218351. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218351 - https://vuldb.com/?ctiid.218351 - https://github.com/pointhi/searx_stats/commit/281bd679a4474ddb222d16c1c380f252839cc18f
CVE ID: CVE-2014-125078 State: PUBLISHED Published: 2023-01-15T08:58:04.667Z Last Updated: 2024-08-06T14:10:56.651Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: yanheven Products: console Problem Types: CWE-79 Description: A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identified as 32a7b713468161282f2ea01d5e2faff980d924cd. It is recommended to apply a patch to fix this issue. VDB-218354 is the identifier assigned to this vulnerability. Addi
It is recommended to apply a patch to fix this issue. VDB-218354 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218354 - https://vuldb.com/?ctiid.218354 - https://github.com/yanheven/console/commit/32a7b713468161282f2ea01d5e2faff980d924cd
CVE ID: CVE-2014-125079 State: PUBLISHED Published: 2023-01-15T08:58:05.592Z Last Updated: 2025-04-08T18:12:34.245Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: agy Products: pontifex.http Problem Types: CWE-89 Description: A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown code of the file lib/Http.coffee. The manipulation leads to sql injection. Upgrading to version 0.1.0 is able to address this issue. The name of the patch is e52a758f96861dcef2dabfecb9da191bb2e07761. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218356. Additional Analys
is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218356. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218356 - https://vuldb.com/?ctiid.218356 - https://github.com/agy/pontifex.http/commit/e52a758f96861dcef2dabfecb9da191bb2e07761 - https://github.com/agy/pontifex.http/releases/tag/v0.1.0
CVE ID: CVE-2014-125080 State: PUBLISHED Published: 2023-01-16T17:58:03.453Z Last Updated: 2024-08-06T14:10:56.703Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: frontaccounting Products: faplanet Problem Types: CWE-22 Description: A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb
dentifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218398 - https://vuldb.com/?ctiid.218398 - https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50
CVE ID: CVE-2014-125081 State: PUBLISHED Published: 2023-01-17T22:58:03.149Z Last Updated: 2024-08-06T14:10:56.650Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: risheesh Products: debutsav Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named 7a8430df79277c613449262201cc792db894fc76. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218459. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.2
is vulnerability is VDB-218459. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218459 - https://vuldb.com/?ctiid.218459 - https://github.com/risheesh/debutsav/commit/7a8430df79277c613449262201cc792db894fc76
CVE ID: CVE-2014-125082 State: PUBLISHED Published: 2023-01-17T23:58:12.432Z Last Updated: 2024-08-06T14:10:56.643Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: nivit Products: redports Problem Types: CWE-89 Description: A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code of the file redports-trac/redports/model.py. The manipulation leads to sql injection. The name of the patch is fc2c1ea1b8d795094abb15ac73cab90830534e04. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218464. Additional Analyst Notes: - CVE Program Container: References: -
ue. The identifier of this vulnerability is VDB-218464. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218464 - https://vuldb.com/?ctiid.218464 - https://github.com/nivit/redports/commit/fc2c1ea1b8d795094abb15ac73cab90830534e04
CVE ID: CVE-2014-125083 State: PUBLISHED Published: 2023-01-19T09:22:36.860Z Last Updated: 2024-10-15T16:08:59.925Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Anant Labs Products: google-enterprise-connector-dctm Problem Types: CWE-89 Description: A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named 6fba04f18ab7764002a1da308e7cd9712b501cb7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability
08e7cd9712b501cb7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218911. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218911 - https://vuldb.com/?ctiid.218911 - https://github.com/AnantLabs/google-enterprise-connector-dctm/commit/6fba04f18ab7764002a1da308e7cd9712b501cb7
CVE ID: CVE-2014-125084 State: PUBLISHED Published: 2023-02-05T23:57:03.158Z Last Updated: 2024-08-06T14:10:56.667Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Gimmie Plugin Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown processing of the file trigger_referral.php. The manipulation of the argument referrername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The identifier of the patch is 7194a09353dd24a274678383a4418f2fd3fce6f7. It is recommended to upgrade the affected component. The i
ier of the patch is 7194a09353dd24a274678383a4418f2fd3fce6f7. It is recommended to upgrade the affected component. The identifier VDB-220205 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220205 - https://vuldb.com/?ctiid.220205 - https://github.com/gimmie/vbulletin-v4/commit/7194a09353dd24a274678383a4418f2fd3fce6f7 - https://github.com/gimmie/vbulletin-v4/tree/v1.3.0
CVE ID: CVE-2014-125085 State: PUBLISHED Published: 2023-02-05T23:57:04.141Z Last Updated: 2024-08-06T14:10:56.638Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Gimmie Plugin Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file trigger_ratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The patch is identified as f11a136e9cbd24997354965178728dc22a2aa2ed. It is recommended to upgrade the affected component. VDB-220206 is the ide
as f11a136e9cbd24997354965178728dc22a2aa2ed. It is recommended to upgrade the affected component. VDB-220206 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220206 - https://vuldb.com/?ctiid.220206 - https://github.com/gimmie/vbulletin-v4/commit/f11a136e9cbd24997354965178728dc22a2aa2ed - https://github.com/gimmie/vbulletin-v4/tree/v1.3.0
CVE ID: CVE-2014-125086 State: PUBLISHED Published: 2023-02-06T03:57:02.804Z Last Updated: 2025-03-25T18:33:42.620Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Gimmie Plugin Problem Types: CWE-89 Description: A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown functionality of the file trigger_login.php. The manipulation of the argument userid leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The patch is named fe851002d20a8d6196a5abb68bafec4102964d5b. It is recommended to upgrade the affected component. The associated ide
named fe851002d20a8d6196a5abb68bafec4102964d5b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220207. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220207 - https://vuldb.com/?ctiid.220207 - https://github.com/gimmie/vbulletin-v4/commit/fe851002d20a8d6196a5abb68bafec4102964d5b - https://github.com/gimmie/vbulletin-v4/tree/v1.3.0
CVE ID: CVE-2014-125087 State: PUBLISHED Published: 2023-02-19T16:31:03.100Z Last Updated: 2025-02-13T16:27:12.299Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: java-xmlbuilder Problem Types: CWE-611 Description: A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is e6fddca201790abab4f2c274341c0bb8835c3e73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221480. Additio
5c3e73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221480. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221480 - https://vuldb.com/?ctiid.221480 - https://github.com/jmurty/java-xmlbuilder/issues/6 - https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73 - https://github.com/jmurty/java-xmlbuilder/releases/tag/v1.2 - https://security.netapp.com/advisory/ntap-20240208-0009/
CVE ID: CVE-2014-125088 State: PUBLISHED Published: 2023-02-20T08:00:06.419Z Last Updated: 2024-08-06T14:10:56.657Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: qt-users-jp Products: silk Problem Types: CWE-79 Description: A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file contents/root/examples/header.qml. The manipulation of the argument model.key/model.value leads to cross site scripting. The attack can be initiated remotely. The name of the patch is bbc5d6eeea800025ef29edda3fd3c57836239eae. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is V
f29edda3fd3c57836239eae. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-221488. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221488 - https://vuldb.com/?ctiid.221488 - https://github.com/qt-users-jp/silk/commit/bbc5d6eeea800025ef29edda3fd3c57836239eae
CVE ID: CVE-2014-125089 State: PUBLISHED Published: 2023-02-21T02:31:03.176Z Last Updated: 2024-08-06T14:10:56.643Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: cention-chatserver Problem Types: CWE-79 Description: A vulnerability was found in cention-chatserver 3.8.0-rc1. It has been declared as problematic. Affected by this vulnerability is the function _formatBody of the file lib/InternalChatProtocol.fe. The manipulation of the argument body leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.9 is able to address this issue. The identifier of the patch is c4c0258bbd18f6915f97f91d5fee625384096a26. It is recommended to upgra
address this issue. The identifier of the patch is c4c0258bbd18f6915f97f91d5fee625384096a26. It is recommended to upgrade the affected component. The identifier VDB-221497 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.221497 - https://vuldb.com/?ctiid.221497 - https://github.com/cention-mujibur-rahman/cention-chatserver/commit/c4c0258bbd18f6915f97f91d5fee625384096a26 - https://github.com/cention-mujibur-rahman/cention-chatserver/releases/tag/3.9
CVE ID: CVE-2014-125090 State: PUBLISHED Published: 2023-03-04T19:31:03.350Z Last Updated: 2025-03-05T19:25:16.415Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Media Downloader Plugin Problem Types: CWE-79 Description: A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vulnerability affects the function dl_file_resumable of the file getfile.php. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.1.993 is able to address this issue. The patch is identified as 77beb720c682b9300035ab5f96eee225181d8a92. It is recommended to
s able to address this issue. The patch is identified as 77beb720c682b9300035ab5f96eee225181d8a92. It is recommended to upgrade the affected component. VDB-222262 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222262 - https://vuldb.com/?ctiid.222262 - https://github.com/wp-plugins/media-downloader/commit/77beb720c682b9300035ab5f96eee225181d8a92
CVE ID: CVE-2014-125091 State: PUBLISHED Published: 2023-03-04T22:00:04.656Z Last Updated: 2025-03-05T19:25:09.890Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: codepeople Products: cp-polls Plugin Problem Types: CWE-89 Description: A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The attack can be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. The name of the patch is 6d7168cbf12d1c183bacc5cd5678f6f5b0d518d2. It is recommended to upgrade the